-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 10 Oct 2026 19:56:39 +0200 Source: glibc Binary: libc-bin libc-bin-dbgsym libc-dev-bin libc-dev-bin-dbgsym libc-devtools libc-devtools-dbgsym libc6 libc6-dbg libc6-dev libc6-dev-dbgsym libc6-udeb locales-all nscd nscd-dbgsym Architecture: riscv64 Version: 2.41-12+deb13u5 Distribution: trixie Urgency: medium Maintainer: riscv64 Build Daemon (rv-manda-03) Changed-By: Aurelien Jarno Description: libc-bin - GNU C Library: Binaries libc-dev-bin - GNU C Library: Development binaries libc-devtools - GNU C Library: Development tools libc6 - GNU C Library: Shared libraries libc6-dbg - GNU C Library: detached debugging symbols libc6-dev - GNU C Library: Development Libraries and Header Files libc6-udeb - GNU C Library: Shared libraries - udeb (udeb) locales-all - GNU C Library: Precompiled locale data nscd - GNU C Library: Name Service Cache Daemon Closes: 1135230 1135231 1144252 1145880 1145891 1145987 1146721 1147395 1148168 1148727 1148728 1149647 Changes: glibc (2.41-12+deb13u5) trixie; urgency=medium . * debian/patches/git-updates.diff: update from upstream stable branch: - Cache cpuid results in ld.so for Intel CPUs. - Fix a buffer overread in ns_sprintrrf with corrupted RDATA field (CVE-2026-6238). Closes: #1135231. - Fix an out-of-bounds write in ns_sprintrrf when printing TSIG records (CVE-2026-5435). Closes: #1135230. - Fix stack overflow in wordexp tilde expansion (CVE-2026-6791). - Fix wordexp WRDE_APPEND to preserve state on non-NOSPACE errors (CVE-2026-6368). Closes: #1144252. - Fix out-of-bounds stack array write in tdelete (CVE-2026-19542). - Fix a buffer overflow in strfmon right-justification padding (CVE-2026-19499). Closes: #1145891. - Fix a hang when decoding SHIFT_JISX0213 to UTF-32 (CVE-2026-77117). Closes: #1145880. - Fix a hand when decoding EUC_JISX0213 to UTF-32 (CVE-2026-80489). Closes: #1145987. - Fix a heap buffer overlow in how fopen() parses the ,ccs= mode suffix (CVE-2026-18374). Closes: #1146721. - Keep needed last transition to new type in TZif files generated by zic. - Fix an assertion failure in the DNS stub resolver with a long search domain (CVE-2026-8674). Closes: #1148168. - Fix a stack overflow in nscd that can be triggered by large DNS responses from malicious servers (CVE-2026-89092). Closes: #1147395. - Fix a TOCTOU race condition in the dynamic loader (CVE-2026-86805). Closes: #1148727. - Fix a stack overflow in the dynamic loader (CVE-2026-95818). Closes: #1148728. - Fix one byte overread in POWER8 version of strncasecmp() (CVE-2026-97399). Closes: #1149647 Checksums-Sha1: 41a9e7115110268d9aae45e33ad53de359a5b7df 13170 glibc_2.41-12+deb13u5_riscv64-buildd.buildinfo a04dc340e65865f0960c20017a37b83f35432cda 2142744 libc-bin-dbgsym_2.41-12+deb13u5_riscv64.deb 68dd2371639fc08d3fa78d83c839b84602071d75 608280 libc-bin_2.41-12+deb13u5_riscv64.deb 6e0d131a7e901ade49a4ab6416c2b178dc9db56b 31664 libc-dev-bin-dbgsym_2.41-12+deb13u5_riscv64.deb 6dc5f977bbb9794a21ddcc31bae2f8e9144c14aa 59688 libc-dev-bin_2.41-12+deb13u5_riscv64.deb ba0a4184844cb8675abea6e34561edf06f69fe59 44888 libc-devtools-dbgsym_2.41-12+deb13u5_riscv64.deb 52162140c33efc89d59ac1b25df8f2dcbf61428c 69104 libc-devtools_2.41-12+deb13u5_riscv64.deb 74bed587c4e1f47915d056f7af2b86e567ce4573 6193924 libc6-dbg_2.41-12+deb13u5_riscv64.deb 9abdafe9eef5671437cc9707ca006b594940a4be 13560 libc6-dev-dbgsym_2.41-12+deb13u5_riscv64.deb f28dc028eaa33c1f630e522d4d8e7655b25f8014 3122480 libc6-dev_2.41-12+deb13u5_riscv64.deb d855efefefbe3857e423f19615eab47db574b7da 1038248 libc6-udeb_2.41-12+deb13u5_riscv64.udeb 55d9f581b0510fd601b0771854e7ac4fdf58dd80 2474016 libc6_2.41-12+deb13u5_riscv64.deb 88cd422357a7c430f7fc05efce1001916bdfcba5 11203724 locales-all_2.41-12+deb13u5_riscv64.deb d995b8ac2a376ce51ada3a095af589a3d7830c94 210188 nscd-dbgsym_2.41-12+deb13u5_riscv64.deb 9797f6d19d43feb7c776c1298b90f18f4efa06ae 105756 nscd_2.41-12+deb13u5_riscv64.deb Checksums-Sha256: faf00b89a7e614cc55c690daf6bc6c41b746435e7ffa8a349523db3be43ec88a 13170 glibc_2.41-12+deb13u5_riscv64-buildd.buildinfo 937670eb9716f3c2cfb51019435835b5057efc6ddb253acec73f357912752c56 2142744 libc-bin-dbgsym_2.41-12+deb13u5_riscv64.deb 4f07f3899f15e04c43e4d8f148b46de683d47062aadcfb25e8432c5e6464eb97 608280 libc-bin_2.41-12+deb13u5_riscv64.deb 50bd745e94fcb4696a41836e70c4357db49f675a0125311cf45ff264d29c5362 31664 libc-dev-bin-dbgsym_2.41-12+deb13u5_riscv64.deb cfb3bc1686576292362c2989cfc176a76a3bd513f1e4a5b800f023075a9b85af 59688 libc-dev-bin_2.41-12+deb13u5_riscv64.deb 12a0110cfc8a92a6b3b82be08f723625a6ff1af5b5056bc84cd79c6cefd9865a 44888 libc-devtools-dbgsym_2.41-12+deb13u5_riscv64.deb cdbc38960c28e874c580b29d75bf71d63ce9eb7f9dd0011da55d8a781295bea0 69104 libc-devtools_2.41-12+deb13u5_riscv64.deb c5559026426def2237ef3748c34fa7e043a0baf2386b5ec1e7daa2ade4fcaeca 6193924 libc6-dbg_2.41-12+deb13u5_riscv64.deb 87f9cbc8bc0b95bc7b9e178b9136d3460fc72019ba81a2570a2970606d283d1b 13560 libc6-dev-dbgsym_2.41-12+deb13u5_riscv64.deb 2dc323eca5898a6792e6e41779f50d317f0e919da1856c5d9b306142b53fe3e7 3122480 libc6-dev_2.41-12+deb13u5_riscv64.deb c038d8c30275de9fec61b7f2587a0fa3485d16e4d91dabc4f6f574d4019f2aa0 1038248 libc6-udeb_2.41-12+deb13u5_riscv64.udeb 107a6b5d327f81122549b1c5bfa9cfdea2532c4fddd9e0211a915bdfdf22d7f5 2474016 libc6_2.41-12+deb13u5_riscv64.deb b2ac32590fdf8d99604459fe807877e843122ee6c332118192143f6b3f7fb2d9 11203724 locales-all_2.41-12+deb13u5_riscv64.deb 0b32d261abbb0072e28666d886d8e09eaedeb0a146aed14b1cbedd8c227eb192 210188 nscd-dbgsym_2.41-12+deb13u5_riscv64.deb 8f60723d51ec1416a4cff652ef3c1d2f1cd4031511d645577df82fd109f98c23 105756 nscd_2.41-12+deb13u5_riscv64.deb Files: db3c14a55b4528c636086369192a6e0f 13170 libs required glibc_2.41-12+deb13u5_riscv64-buildd.buildinfo 75f03e97ebafd9bf866371edfa9325cb 2142744 debug optional libc-bin-dbgsym_2.41-12+deb13u5_riscv64.deb a361f6ec509067b0ce67b18c0a937a9d 608280 libs required libc-bin_2.41-12+deb13u5_riscv64.deb f69baef3f6d908d171a8b2bd8e35209a 31664 debug optional libc-dev-bin-dbgsym_2.41-12+deb13u5_riscv64.deb 5b1a8355c1479fd25cdcc379fa5f2fe8 59688 libdevel optional libc-dev-bin_2.41-12+deb13u5_riscv64.deb 7d3e1570352bdeba5b3d9690123ac97f 44888 debug optional libc-devtools-dbgsym_2.41-12+deb13u5_riscv64.deb 8709875d299df18d3dfc1fdb027a4ce9 69104 devel optional libc-devtools_2.41-12+deb13u5_riscv64.deb 6dad504305d25946d2add4866e899137 6193924 debug optional libc6-dbg_2.41-12+deb13u5_riscv64.deb 3cd346efb7cd456f784a8b5c0bc8306b 13560 debug optional libc6-dev-dbgsym_2.41-12+deb13u5_riscv64.deb fa5e0956c2c6a208ca5d37bf51573722 3122480 libdevel optional libc6-dev_2.41-12+deb13u5_riscv64.deb 1de475285344dbb56e4bdc83400bf086 1038248 debian-installer optional libc6-udeb_2.41-12+deb13u5_riscv64.udeb 10ef425ebc62d513b1c71d893f5bb745 2474016 libs optional libc6_2.41-12+deb13u5_riscv64.deb c83e550a5ea297b75985f3156c67d463 11203724 localization optional locales-all_2.41-12+deb13u5_riscv64.deb 7992a5a1a8f5aeaa02e69b35b612eab3 210188 debug optional nscd-dbgsym_2.41-12+deb13u5_riscv64.deb 2cf3c3ca7accf5c22d5a59f6c5aa0e63 105756 admin optional nscd_2.41-12+deb13u5_riscv64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEckWcgW/UYsXlW9tIY8xd4TxhvSAFAmr5A7cACgkQY8xd4Txh vSDUig//faDC5nxzSHjimosL6EmDtqjIK4DVxxhDga7PRNyMy+UoKqjCIPQIDb3E JloN6R5LdISDfMhznjE/Z1SUQRlsjrZzd7ilPytmXTCjQC9waRnfq96culxLuUSE yxa4GLT6k0+Cci4kTdeuIIBqszHzNU6ThtFKBdeOYT/Ve8HiR+65/sYj5mcb4g2S BGoGmxR/2HxjN6nDifHY2ETEgD8qw4PjE9TftBxqRI9hjgZgNvR1uxg1D6Lr7CnL wteGgXD/Rz0X5WLe+nhRWEPXxnT4kCL9rabXArRhtN1KB3K9JsSaqy9kyeTv81Pi tfD8zIOuKWL7X7Ba2I2fb5zT2387YHFZxF8k1wmFpE6Gd2gWRea+GM8LSNFVK6vH 686oMctoHE7b2etZAfmTzSFhHcP46jk6/o956xcIcFoevsUEBRft+ypY4iS2JLEI UnYC8hg8O+2ptVWdhXcbmZ8MIzurb5nJ2+WGWLzi469DomBNrp755M6YYZlyaYjw 4L771PaLJsAUaK2D+/Fq7Jeo1k91Cz9eU1YIEp3jrj52HwHufF6dZnyZggxi8oV1 b/30oks1Erb3w1YSydAJLSkGwTiqPuJDMdeJQYTZVQwf5vZrpK4L1n0g74nSYPeb j1fAVPnTnyey475EYWwKkpux3ssPj16lgpacecHnn2fTrByXnqc= =3g62 -----END PGP SIGNATURE-----