-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 10 Oct 2026 19:56:39 +0200 Source: glibc Binary: libc-bin libc-bin-dbgsym libc-dev-bin libc-dev-bin-dbgsym libc-devtools libc-devtools-dbgsym libc6 libc6-dbg libc6-dev libc6-dev-dbgsym libc6-udeb locales-all nscd nscd-dbgsym Architecture: armhf Version: 2.41-12+deb13u5 Distribution: trixie Urgency: medium Maintainer: armhf Build Daemon (arm-conova-01) Changed-By: Aurelien Jarno Description: libc-bin - GNU C Library: Binaries libc-dev-bin - GNU C Library: Development binaries libc-devtools - GNU C Library: Development tools libc6 - GNU C Library: Shared libraries libc6-dbg - GNU C Library: detached debugging symbols libc6-dev - GNU C Library: Development Libraries and Header Files libc6-udeb - GNU C Library: Shared libraries - udeb (udeb) locales-all - GNU C Library: Precompiled locale data nscd - GNU C Library: Name Service Cache Daemon Closes: 1135230 1135231 1144252 1145880 1145891 1145987 1146721 1147395 1148168 1148727 1148728 1149647 Changes: glibc (2.41-12+deb13u5) trixie; urgency=medium . * debian/patches/git-updates.diff: update from upstream stable branch: - Cache cpuid results in ld.so for Intel CPUs. - Fix a buffer overread in ns_sprintrrf with corrupted RDATA field (CVE-2026-6238). Closes: #1135231. - Fix an out-of-bounds write in ns_sprintrrf when printing TSIG records (CVE-2026-5435). Closes: #1135230. - Fix stack overflow in wordexp tilde expansion (CVE-2026-6791). - Fix wordexp WRDE_APPEND to preserve state on non-NOSPACE errors (CVE-2026-6368). Closes: #1144252. - Fix out-of-bounds stack array write in tdelete (CVE-2026-19542). - Fix a buffer overflow in strfmon right-justification padding (CVE-2026-19499). Closes: #1145891. - Fix a hang when decoding SHIFT_JISX0213 to UTF-32 (CVE-2026-77117). Closes: #1145880. - Fix a hand when decoding EUC_JISX0213 to UTF-32 (CVE-2026-80489). Closes: #1145987. - Fix a heap buffer overlow in how fopen() parses the ,ccs= mode suffix (CVE-2026-18374). Closes: #1146721. - Keep needed last transition to new type in TZif files generated by zic. - Fix an assertion failure in the DNS stub resolver with a long search domain (CVE-2026-8674). Closes: #1148168. - Fix a stack overflow in nscd that can be triggered by large DNS responses from malicious servers (CVE-2026-89092). Closes: #1147395. - Fix a TOCTOU race condition in the dynamic loader (CVE-2026-86805). Closes: #1148727. - Fix a stack overflow in the dynamic loader (CVE-2026-95818). Closes: #1148728. - Fix one byte overread in POWER8 version of strncasecmp() (CVE-2026-97399). Closes: #1149647 Checksums-Sha1: 7fa317eb1e32dc116f0b632c9b8f85d0f42226fe 13017 glibc_2.41-12+deb13u5_armhf-buildd.buildinfo 45cec3e7518d10c2f77c755ee12f18ac8264572f 2211052 libc-bin-dbgsym_2.41-12+deb13u5_armhf.deb e756952068ee1e3f034345e451ff447c251a81aa 525592 libc-bin_2.41-12+deb13u5_armhf.deb c9c46612fa3cdb11326dd4449f763fe0ff34a273 31980 libc-dev-bin-dbgsym_2.41-12+deb13u5_armhf.deb 40edfcad1b0c5be8e96e2113de821d9fac9b51c9 59136 libc-dev-bin_2.41-12+deb13u5_armhf.deb eea414dc1202723fd50b047b5cb796feb90e93d8 46632 libc-devtools-dbgsym_2.41-12+deb13u5_armhf.deb 724dbfc513e37bc06fddf6007b2b2e052b499b45 71136 libc-devtools_2.41-12+deb13u5_armhf.deb 0d8a97f03161784ed83825df11377c46511b9517 6717200 libc6-dbg_2.41-12+deb13u5_armhf.deb 799722fde422cbec1d963c5490305dd2a1934257 13624 libc6-dev-dbgsym_2.41-12+deb13u5_armhf.deb 36fc579051b7634301c61d2c1a311a095ad48899 1329576 libc6-dev_2.41-12+deb13u5_armhf.deb 830ffb2d654d33652d24a2f2486f07805f8c51e8 801160 libc6-udeb_2.41-12+deb13u5_armhf.udeb a76f90875bdb733ae850c9734d9bc1c56863bc4f 2254924 libc6_2.41-12+deb13u5_armhf.deb cae4eba86a1be306872ffb3f84238832d56793de 11203792 locales-all_2.41-12+deb13u5_armhf.deb 8ca4ff8db06ad194515dd6b193280b5759cbab62 216384 nscd-dbgsym_2.41-12+deb13u5_armhf.deb c3c3606619bbcecac1acc773ca1b0381f34880fa 101936 nscd_2.41-12+deb13u5_armhf.deb Checksums-Sha256: 232fe2fc5b05983852468a690ffbc76a0ecf27afc16d150e73d862236c9a6f6b 13017 glibc_2.41-12+deb13u5_armhf-buildd.buildinfo d2a065782e9b3d7b7c804184e81f1788938c88113dfafac8631ce0c88ec998d4 2211052 libc-bin-dbgsym_2.41-12+deb13u5_armhf.deb 056edf5c8c0db97a0b8b98a51822b23ab6df094b250aa06f00377875de1382bf 525592 libc-bin_2.41-12+deb13u5_armhf.deb faa1d449bb4c91fd1fc7cc33cda7fc46ea845bff08411347fb8a7a4ae9eb9f92 31980 libc-dev-bin-dbgsym_2.41-12+deb13u5_armhf.deb 78f799a0f1b9584b62971d899dbd5398869b6e72a948d9e3d708f6df37e9ae15 59136 libc-dev-bin_2.41-12+deb13u5_armhf.deb 9a1ed7f61501bf2d7b65c1235019a325f28b86e74bab3a807b859e56573c8e72 46632 libc-devtools-dbgsym_2.41-12+deb13u5_armhf.deb 4328b5bc7dddd2e8790e7828e30ef63f5e9c3be8f3658d01855b248d7badd4dd 71136 libc-devtools_2.41-12+deb13u5_armhf.deb 6f4765360c614e5f9d4f17d1b7163c1a71ae8d8b49686bf89f6ca9c14db9e487 6717200 libc6-dbg_2.41-12+deb13u5_armhf.deb fd2e393582f9b894f33225ec13e48759bd1baab1311b087aecde9ae7e3a18d2f 13624 libc6-dev-dbgsym_2.41-12+deb13u5_armhf.deb adcaa6b9a0b6d8be481b0005682690829c85e88c989daa9c5ecb86069416c404 1329576 libc6-dev_2.41-12+deb13u5_armhf.deb 38b15d4d9ec9786673087890629ff45d12e8453d57e6c42713f8173e1a7934ee 801160 libc6-udeb_2.41-12+deb13u5_armhf.udeb 2061abc005d078226a3be33e11e2e422f712827833eedd81fae55b203f792604 2254924 libc6_2.41-12+deb13u5_armhf.deb 2fd8230c5b81621a47d77b9503b4e3bc71447ebb353666b4ff41fbb28889da7b 11203792 locales-all_2.41-12+deb13u5_armhf.deb 9b57087b086ee1c4af7cf4ae6e28572ce387253adb9fe5daa3eb5500c62a78a5 216384 nscd-dbgsym_2.41-12+deb13u5_armhf.deb 0b2ef11aab4d0db6b4bc1fce73176512a59d93667d35c8dd20d2174625c8d65c 101936 nscd_2.41-12+deb13u5_armhf.deb Files: fbd8e42de35a4fe4ef652583c61ce805 13017 libs required glibc_2.41-12+deb13u5_armhf-buildd.buildinfo 4dda2f64981abbcf8c03f81fba558844 2211052 debug optional libc-bin-dbgsym_2.41-12+deb13u5_armhf.deb a7ee4aca5ec341a1fab02c2b440393f1 525592 libs required libc-bin_2.41-12+deb13u5_armhf.deb e981ed9a44a84847d1a12c4e25d1ceff 31980 debug optional libc-dev-bin-dbgsym_2.41-12+deb13u5_armhf.deb e5a7ba3a84dc613cb6ce8af38ec4331f 59136 libdevel optional libc-dev-bin_2.41-12+deb13u5_armhf.deb 7295b5493f5d14116a63eb03468b1f12 46632 debug optional libc-devtools-dbgsym_2.41-12+deb13u5_armhf.deb 3655e6e253ded4cc60333878de47c039 71136 devel optional libc-devtools_2.41-12+deb13u5_armhf.deb 094006a4f3b8fa0b7743187d4ff46512 6717200 debug optional libc6-dbg_2.41-12+deb13u5_armhf.deb df3ecd764457632ae13b23cc4ead308e 13624 debug optional libc6-dev-dbgsym_2.41-12+deb13u5_armhf.deb 73dd19df562ad79ed717b40fc7d66219 1329576 libdevel optional libc6-dev_2.41-12+deb13u5_armhf.deb de0967b2513a7443525158b56dab3e23 801160 debian-installer optional libc6-udeb_2.41-12+deb13u5_armhf.udeb eb53347ff8b43173e1dc0776eaef61ba 2254924 libs optional libc6_2.41-12+deb13u5_armhf.deb 2f0f30422999039a122379c4d4101455 11203792 localization optional locales-all_2.41-12+deb13u5_armhf.deb 2e1301a7bd0627df147bba3ceadd3bee 216384 debug optional nscd-dbgsym_2.41-12+deb13u5_armhf.deb 0e909fbf16f3f531e537caf79b452ded 101936 admin optional nscd_2.41-12+deb13u5_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEdK9iafpA71gaFfL5MLZgEo1cLWsFAmr4V9AACgkQMLZgEo1c LWtY7xAAiYXbez6j1pkjvpQTceESKuompFzWKx6xAkVT4lFohwJiGAiPsiiA3xRh mlin4CVTFl75mQjhC3AHubNUgelMMrw0xe/tBtESW8ij3DE0wBfU4SRbZH/uVN3l o9MeIAPbzvG9S/EBUOYxEudkiz8e0p2OiSgZek8Y7OQl8AlEIpII2UolUEo6lPOG 1+Vy8Ui2RuiySk0uwqe+Sb/TrbQN01VQ3+13t1UVAytaGi2WZ+2szN3QTbhq881x bD/7t4dtvzi0itRm1VyP4NivUXxJ5mThiVJluqMbod9N62xDo7mCz8xqhBVgZIKV G8MNDhQYcYLv/qOAuW5/bSGBLqLHpd4gM8HZ8PUNHMldX6kMlgpU4k+g7WrlemyD GMHstTDFuRpjAoSJtI6CFbbEMi8+T+zUoVbfb/TAW0dKW+ZSnafSug+upG7dQmU8 fhFbP4hEAjjFfP56kKH1e7WwwU/m8MgjoHNDxWr0Z9zXDIIuavDdTl6scbOI/oFu NuZIijjmngJ5+IT1FZo0AsXsg/wPFf43oaXHox3hmDHw4xWslhN7zWcBAH1cQvNZ 98fg3wJxu+4lyOiIC2O4RYAU+4eQXP3Bbvp/MG2A+y3Gl92FHLOxpTe05HCQSpW0 XPnlaeOQ9YDDo7N3qtQge7E3LvNplF6u7dhCxjDCCxb8Ma1Uhv8= =LFJT -----END PGP SIGNATURE-----