-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 10 Oct 2026 19:56:39 +0200 Source: glibc Binary: libc-bin libc-bin-dbgsym libc-dev-bin libc-dev-bin-dbgsym libc-devtools libc-devtools-dbgsym libc6 libc6-dbg libc6-dev libc6-dev-dbgsym libc6-udeb locales-all nscd nscd-dbgsym Architecture: armel Version: 2.41-12+deb13u5 Distribution: trixie Urgency: medium Maintainer: armel Build Daemon (arm-ubc-03) Changed-By: Aurelien Jarno Description: libc-bin - GNU C Library: Binaries libc-dev-bin - GNU C Library: Development binaries libc-devtools - GNU C Library: Development tools libc6 - GNU C Library: Shared libraries libc6-dbg - GNU C Library: detached debugging symbols libc6-dev - GNU C Library: Development Libraries and Header Files libc6-udeb - GNU C Library: Shared libraries - udeb (udeb) locales-all - GNU C Library: Precompiled locale data nscd - GNU C Library: Name Service Cache Daemon Closes: 1135230 1135231 1144252 1145880 1145891 1145987 1146721 1147395 1148168 1148727 1148728 1149647 Changes: glibc (2.41-12+deb13u5) trixie; urgency=medium . * debian/patches/git-updates.diff: update from upstream stable branch: - Cache cpuid results in ld.so for Intel CPUs. - Fix a buffer overread in ns_sprintrrf with corrupted RDATA field (CVE-2026-6238). Closes: #1135231. - Fix an out-of-bounds write in ns_sprintrrf when printing TSIG records (CVE-2026-5435). Closes: #1135230. - Fix stack overflow in wordexp tilde expansion (CVE-2026-6791). - Fix wordexp WRDE_APPEND to preserve state on non-NOSPACE errors (CVE-2026-6368). Closes: #1144252. - Fix out-of-bounds stack array write in tdelete (CVE-2026-19542). - Fix a buffer overflow in strfmon right-justification padding (CVE-2026-19499). Closes: #1145891. - Fix a hang when decoding SHIFT_JISX0213 to UTF-32 (CVE-2026-77117). Closes: #1145880. - Fix a hand when decoding EUC_JISX0213 to UTF-32 (CVE-2026-80489). Closes: #1145987. - Fix a heap buffer overlow in how fopen() parses the ,ccs= mode suffix (CVE-2026-18374). Closes: #1146721. - Keep needed last transition to new type in TZif files generated by zic. - Fix an assertion failure in the DNS stub resolver with a long search domain (CVE-2026-8674). Closes: #1148168. - Fix a stack overflow in nscd that can be triggered by large DNS responses from malicious servers (CVE-2026-89092). Closes: #1147395. - Fix a TOCTOU race condition in the dynamic loader (CVE-2026-86805). Closes: #1148727. - Fix a stack overflow in the dynamic loader (CVE-2026-95818). Closes: #1148728. - Fix one byte overread in POWER8 version of strncasecmp() (CVE-2026-97399). Closes: #1149647 Checksums-Sha1: 77085e5c078d79b192cfa857c37337fc5a7c08f2 13003 glibc_2.41-12+deb13u5_armel-buildd.buildinfo 4dc0ddceb82e3cd68cdb78f5f51953afa85d0ac0 2207284 libc-bin-dbgsym_2.41-12+deb13u5_armel.deb 6248b1151c8167f4503408dc419ef4be595365cf 518692 libc-bin_2.41-12+deb13u5_armel.deb 4703229ad158ad47f879d37fea034094a0a759f0 31800 libc-dev-bin-dbgsym_2.41-12+deb13u5_armel.deb 686655c3226aecbfe1eb527f94ac12cb108d9928 59180 libc-dev-bin_2.41-12+deb13u5_armel.deb e0ec53cf24cf0cf3eb3448b70f736e5dbbbfe7f5 46268 libc-devtools-dbgsym_2.41-12+deb13u5_armel.deb b5cf4aac162cc7a9d69d58c0bdf42cdb35389cd9 71716 libc-devtools_2.41-12+deb13u5_armel.deb 91bcda1a1a6ac7c153280ecc8890cbf408db86c6 6843164 libc6-dbg_2.41-12+deb13u5_armel.deb 1b7d5c8319c5b706a58ee3434e11d1e0fe9808fa 13456 libc6-dev-dbgsym_2.41-12+deb13u5_armel.deb 735e54b5b417fc6e5821c725ba77c12d7a6e15ed 1363236 libc6-dev_2.41-12+deb13u5_armel.deb e87a1f01f3716800fcf4340a1841080616998db2 825160 libc6-udeb_2.41-12+deb13u5_armel.udeb d568051ccef907a079f34ebc91e33e491988ec11 2264024 libc6_2.41-12+deb13u5_armel.deb fd9aefdd08ff7bd141b45dab7579a9369ba2a7f7 11203772 locales-all_2.41-12+deb13u5_armel.deb 33dbe5cd39bc2242ad31630b7cd9900e1debb8c0 213952 nscd-dbgsym_2.41-12+deb13u5_armel.deb 904e64880815d09ad9eb057fcbbfd1204d580fd5 101548 nscd_2.41-12+deb13u5_armel.deb Checksums-Sha256: efef18e670be2d1978bc4ce04efe6cc2a71fecc3b63a4eb6d46d06af2470e813 13003 glibc_2.41-12+deb13u5_armel-buildd.buildinfo 8863c109fca06845954b989d82e9fd683547a29d8cd90d0b08dfb3de230dbb10 2207284 libc-bin-dbgsym_2.41-12+deb13u5_armel.deb 26dc4419fc679193aa2e19ff98e60290112e0d64759e77b68e5a926cccdb22e8 518692 libc-bin_2.41-12+deb13u5_armel.deb 04fddadab35d1a4e300c64b65eefb36d4dcec9839b6c9a4b1ec68f58108fd593 31800 libc-dev-bin-dbgsym_2.41-12+deb13u5_armel.deb 99db745556c9969c808a21bcbcd34281aa52f6f9577b3e2f66be83ca822a306d 59180 libc-dev-bin_2.41-12+deb13u5_armel.deb 1b45eaaa2ed4b458cc1800621ed4cc1bb2ae147b0103e5573df6b21283455d2a 46268 libc-devtools-dbgsym_2.41-12+deb13u5_armel.deb 004dca5ad1346b3d963bab9ed2c2059efa1b2983c4f0708a5c9ddf734a8cf58f 71716 libc-devtools_2.41-12+deb13u5_armel.deb d360ddfccf68ff01dd5ce8f384397f6836e3c26c0e4f56ccf069c76fe72b441d 6843164 libc6-dbg_2.41-12+deb13u5_armel.deb d470b4f06c54cbda477c3c66206c9aad635c709551ebcffceeb0823717b788b2 13456 libc6-dev-dbgsym_2.41-12+deb13u5_armel.deb 5acacc38082dfd3efddbfd2558d7aa94c7cd50531df46ebdd4070596a7ed744f 1363236 libc6-dev_2.41-12+deb13u5_armel.deb eef645253147dfceea173293d0def0f7093f1a2e0f36e3212d746b0475f24bbb 825160 libc6-udeb_2.41-12+deb13u5_armel.udeb e6d49111722906c475ba891b613161f1359e4d15e5e86efc68533bbf846eafdb 2264024 libc6_2.41-12+deb13u5_armel.deb fa664a0b5d1780e4716eeda721e62bb133a3f2b1de92fdcc2ffaba3c9e0e9c1a 11203772 locales-all_2.41-12+deb13u5_armel.deb 168c48a3a89d3e2ec0a6124e679b7b3f94e03a7f59934c7c38f4209bbfa83cf7 213952 nscd-dbgsym_2.41-12+deb13u5_armel.deb 3df3ef4f05b8be29bd6fd08a1f491a842d0f7b9b326438c822100df2a6ead37f 101548 nscd_2.41-12+deb13u5_armel.deb Files: ea9658b5e9bbec0f93c4330fc66cfaf9 13003 libs required glibc_2.41-12+deb13u5_armel-buildd.buildinfo a0140f187262186768ddc42f9a46ac50 2207284 debug optional libc-bin-dbgsym_2.41-12+deb13u5_armel.deb ab05b76d705675ffce28cbf7119846a8 518692 libs required libc-bin_2.41-12+deb13u5_armel.deb 8401c6ced54cdda2aa360427ecc8f0bc 31800 debug optional libc-dev-bin-dbgsym_2.41-12+deb13u5_armel.deb b49772867406c67a81d85e49b60d6471 59180 libdevel optional libc-dev-bin_2.41-12+deb13u5_armel.deb 42cee42f967d8d4fbbc007c53c962dea 46268 debug optional libc-devtools-dbgsym_2.41-12+deb13u5_armel.deb 1c254ef40aef7abe88aca5e524331e32 71716 devel optional libc-devtools_2.41-12+deb13u5_armel.deb cddae69c51a856ae3410eee4f33554df 6843164 debug optional libc6-dbg_2.41-12+deb13u5_armel.deb b6496f4e2e2c983b03df4ab790bd0ffd 13456 debug optional libc6-dev-dbgsym_2.41-12+deb13u5_armel.deb 4a79f62a59f6417c5d3cacd49fbcd245 1363236 libdevel optional libc6-dev_2.41-12+deb13u5_armel.deb aa6f08dac2da577fcdc8350ad6c6310c 825160 debian-installer optional libc6-udeb_2.41-12+deb13u5_armel.udeb eb605d6f0e6ee12dc4d39a8efea0a5e9 2264024 libs optional libc6_2.41-12+deb13u5_armel.deb 8cb49a295da23bb287600da84b3a3801 11203772 localization optional locales-all_2.41-12+deb13u5_armel.deb 395505539d8dac2ebe629ebdb22d5189 213952 debug optional nscd-dbgsym_2.41-12+deb13u5_armel.deb 2c926ef982db6191cbdb9a0b09982b1d 101548 admin optional nscd_2.41-12+deb13u5_armel.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE2kd8oHy+LXk/nybqvzDqKQSGl8UFAmr4WH4ACgkQvzDqKQSG l8Wtaw/7B8brRcR46K0kBN0V7MzBgBgCzcTFwd0CXT6u4GPMv17F1CshVq+Qeviq Tm1efGzmiDC4CxNqJ48XggrtDr1Y4FiuKy2WlP50BcaVJZ2CP9sUheJ0gCZEyMwh ky81J5SfQeBy9NTGzfutdHYdp4OzwbP9i6EsdN32l++HhAFdc5OPknbPH0lMWWto iP5W5FaKM6jxTrL6oWnA2ElHV1oC0IPNCCVUcgGvGatzK5/4g5TACWe7x4Q7/Za+ ula/yv38DvNRkAf3F5SGpl+YAU34+uX5TZOvmUW8QyXZRGgqiXKzDdUpzOfMc7Y9 gHmoj9i3oOE6BCUPfUqng+98ohmaBg4V9sJ47oTgK6kzUh967VRidfkHrtrVahQB 1321i80ny70dy8B2JRPMmdGnwQC2avMA1gwPclL7glkYXG/nuJj00anr7VOqMP2H 7vwtfSMeG23rBk1os12/Y2Q2mkkb9zU4Lzw21FG5hHBW44xmJGvO+sumo8pHqymI QsVbI+RfQKTeA+mJENvatO46PhZFjOzWEAbuiuC3WKgmj6oU6JQIKPdzx/rDUzoQ ggnjArQoCiOukriRawAYVpfeoSfDcI1xYA/1RRx9F7fzhhI3i57OPGo0FqWi+TyR k88pOF90+opqZiHUyMOTixtFiAcofAHDRQLN2f9QHXdzFTyT9GA= =SIEE -----END PGP SIGNATURE-----