-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 10 Oct 2026 19:56:39 +0200 Source: glibc Binary: libc-bin libc-bin-dbgsym libc-dev-bin libc-dev-bin-dbgsym libc-devtools libc-devtools-dbgsym libc6 libc6-dbg libc6-dev libc6-dev-dbgsym libc6-dev-s390 libc6-s390 libc6-s390-dbgsym libc6-udeb locales-all nscd nscd-dbgsym Architecture: s390x Version: 2.41-12+deb13u5 Distribution: trixie Urgency: medium Maintainer: s390x Build Daemon (zandonai) Changed-By: Aurelien Jarno Description: libc-bin - GNU C Library: Binaries libc-dev-bin - GNU C Library: Development binaries libc-devtools - GNU C Library: Development tools libc6 - GNU C Library: Shared libraries libc6-dbg - GNU C Library: detached debugging symbols libc6-dev - GNU C Library: Development Libraries and Header Files libc6-dev-s390 - GNU C Library: 32bit Development Libraries for IBM zSeries libc6-s390 - GNU C Library: 32bit Shared libraries for IBM zSeries libc6-udeb - GNU C Library: Shared libraries - udeb (udeb) locales-all - GNU C Library: Precompiled locale data nscd - GNU C Library: Name Service Cache Daemon Closes: 1135230 1135231 1144252 1145880 1145891 1145987 1146721 1147395 1148168 1148727 1148728 1149647 Changes: glibc (2.41-12+deb13u5) trixie; urgency=medium . * debian/patches/git-updates.diff: update from upstream stable branch: - Cache cpuid results in ld.so for Intel CPUs. - Fix a buffer overread in ns_sprintrrf with corrupted RDATA field (CVE-2026-6238). Closes: #1135231. - Fix an out-of-bounds write in ns_sprintrrf when printing TSIG records (CVE-2026-5435). Closes: #1135230. - Fix stack overflow in wordexp tilde expansion (CVE-2026-6791). - Fix wordexp WRDE_APPEND to preserve state on non-NOSPACE errors (CVE-2026-6368). Closes: #1144252. - Fix out-of-bounds stack array write in tdelete (CVE-2026-19542). - Fix a buffer overflow in strfmon right-justification padding (CVE-2026-19499). Closes: #1145891. - Fix a hang when decoding SHIFT_JISX0213 to UTF-32 (CVE-2026-77117). Closes: #1145880. - Fix a hand when decoding EUC_JISX0213 to UTF-32 (CVE-2026-80489). Closes: #1145987. - Fix a heap buffer overlow in how fopen() parses the ,ccs= mode suffix (CVE-2026-18374). Closes: #1146721. - Keep needed last transition to new type in TZif files generated by zic. - Fix an assertion failure in the DNS stub resolver with a long search domain (CVE-2026-8674). Closes: #1148168. - Fix a stack overflow in nscd that can be triggered by large DNS responses from malicious servers (CVE-2026-89092). Closes: #1147395. - Fix a TOCTOU race condition in the dynamic loader (CVE-2026-86805). Closes: #1148727. - Fix a stack overflow in the dynamic loader (CVE-2026-95818). Closes: #1148728. - Fix one byte overread in POWER8 version of strncasecmp() (CVE-2026-97399). Closes: #1149647 Checksums-Sha1: 83f3d735058697722c13633d5ea09e2323d3f4d9 14201 glibc_2.41-12+deb13u5_s390x-buildd.buildinfo 88fde7ac93778e6670ce744e66230d84b9438475 2303692 libc-bin-dbgsym_2.41-12+deb13u5_s390x.deb e2a4679d07fbb2315a5012c9750093c8201712cb 618632 libc-bin_2.41-12+deb13u5_s390x.deb 54fccd985d7b22aeb8ba7e286ff12b94e2c7c6c5 32216 libc-dev-bin-dbgsym_2.41-12+deb13u5_s390x.deb 985ae1440f885451095001b0825164ebc0c9fea5 59960 libc-dev-bin_2.41-12+deb13u5_s390x.deb 02115f4f6ea0ecd00278c49b2b6c0c04d9d720d9 46572 libc-devtools-dbgsym_2.41-12+deb13u5_s390x.deb b20b0a47c6528f352183b56f760a0f652b426000 70664 libc-devtools_2.41-12+deb13u5_s390x.deb dcad2af7fb4c5c688483ea871b87dc76c0fd3395 7888424 libc6-dbg_2.41-12+deb13u5_s390x.deb e7e7ff5b93aefb3d59cf29b1504e5f83fe017c8a 14100 libc6-dev-dbgsym_2.41-12+deb13u5_s390x.deb b211256fb426a2b6851357569cae8bd6b72760c6 1206516 libc6-dev-s390_2.41-12+deb13u5_s390x.deb 5e0f16ec1ef3d3f8a278285d1c78074169de9352 1560996 libc6-dev_2.41-12+deb13u5_s390x.deb f0933a4dcd008a48d8e3d2317893e54b04d0b377 8211328 libc6-s390-dbgsym_2.41-12+deb13u5_s390x.deb 10e22fc26015be01309a203b5b94346c7500a306 2318492 libc6-s390_2.41-12+deb13u5_s390x.deb ec5d6d36ff9355f3f1b241eca55d11c50b41777c 1042700 libc6-udeb_2.41-12+deb13u5_s390x.udeb eaca26ae68e59bbf3f1a7bcea89926c98c2c21a9 2455564 libc6_2.41-12+deb13u5_s390x.deb 5977230fb082d941ecebf26fb6d55c4afc40cb70 11446936 locales-all_2.41-12+deb13u5_s390x.deb 1bada57273722e50d1cee057572e323d567feec5 218644 nscd-dbgsym_2.41-12+deb13u5_s390x.deb 9f807551eb83dcb3cd4680de5ccc8469ebfd2742 107680 nscd_2.41-12+deb13u5_s390x.deb Checksums-Sha256: 064573ca7a8ebb6ce217cc446cb346055fc2d3ea05be2939b79696c21a71eb4c 14201 glibc_2.41-12+deb13u5_s390x-buildd.buildinfo ec4b85ee799db15147c3d44270526daa6d273922a6b93f4301fa27c2c6aeeea8 2303692 libc-bin-dbgsym_2.41-12+deb13u5_s390x.deb a8e1a01fbd7f9cea51b93d134f1a733e399065b39601489ded806ac1d357de9f 618632 libc-bin_2.41-12+deb13u5_s390x.deb 5e35bea0986fd6d3db86d707594ff7967c8c26dc3ed4445104ed30d8f1787288 32216 libc-dev-bin-dbgsym_2.41-12+deb13u5_s390x.deb 60601eeda7ee52e8fbcd21cf5ed5a936a37a146cfdae599fa8d18a4ca3ed98b8 59960 libc-dev-bin_2.41-12+deb13u5_s390x.deb 22a1993209a4cc9314218ddd138f3b093bba5fb3b669d3a7f7908025f938dc58 46572 libc-devtools-dbgsym_2.41-12+deb13u5_s390x.deb 56eb19259c1fd55b0deb4cdfc3cf30100b9f587492108e69a46d6f84849276b2 70664 libc-devtools_2.41-12+deb13u5_s390x.deb 79a22d685adbac00bd07db52087d6d37f7d3401ffe94371cc848d17e26178adf 7888424 libc6-dbg_2.41-12+deb13u5_s390x.deb 7d94e77661439bfc08cd3b2015759990751d39d2681f754d1feb823d4ace53b8 14100 libc6-dev-dbgsym_2.41-12+deb13u5_s390x.deb b963512c86ca375ba9bc562aa15f617db9b31e96f395172556497c20b61d6ae1 1206516 libc6-dev-s390_2.41-12+deb13u5_s390x.deb 532d72bcc73694ffd91911fb4bfbd0660bd474c02d6e12288017118d374c31b9 1560996 libc6-dev_2.41-12+deb13u5_s390x.deb b842c4847c5056f80ae902f48381a05a5ad336ffcfd7a66e74eb65342d28226e 8211328 libc6-s390-dbgsym_2.41-12+deb13u5_s390x.deb 310cd7857981c3f680484258a9928d71630e028f723b23b790cfadc45165921d 2318492 libc6-s390_2.41-12+deb13u5_s390x.deb 8f6028504858b785704b085b4eae22f3a89504c45a242c10a20a72f90ff3a67a 1042700 libc6-udeb_2.41-12+deb13u5_s390x.udeb 5ce86e304957620bf36516132c020f5eb9c4d4a3174466d377b7726e67dd3570 2455564 libc6_2.41-12+deb13u5_s390x.deb 0df6916fa92512fb00dfac0bb57f17015a2644da2e869b46e24c5d987324166c 11446936 locales-all_2.41-12+deb13u5_s390x.deb 44fa6bdcf3a7a11e61a862154ed67b90b89d7e8dedcd132a3d4ac44683fda278 218644 nscd-dbgsym_2.41-12+deb13u5_s390x.deb 12936c6f442b24cfd15b2d0849d43dded5cd7aaa8ecf42b5bf45aa7f1d2a1707 107680 nscd_2.41-12+deb13u5_s390x.deb Files: 7d673def5c6652148f11dee06ef2d651 14201 libs required glibc_2.41-12+deb13u5_s390x-buildd.buildinfo 2e1fe060317ccf43188997aa90385f42 2303692 debug optional libc-bin-dbgsym_2.41-12+deb13u5_s390x.deb f183b22ad45fcb5b5bdf362d07574804 618632 libs required libc-bin_2.41-12+deb13u5_s390x.deb 9a594801e8b3734a347e64e4465bc53d 32216 debug optional libc-dev-bin-dbgsym_2.41-12+deb13u5_s390x.deb 9705efcd9cdbd5e481cb3c1faa78ac35 59960 libdevel optional libc-dev-bin_2.41-12+deb13u5_s390x.deb 8cbd74e7d66ef4e4f93d5f437174e53f 46572 debug optional libc-devtools-dbgsym_2.41-12+deb13u5_s390x.deb d224ed53d359113d330eff3873ffbe8b 70664 devel optional libc-devtools_2.41-12+deb13u5_s390x.deb 84363a35988715dee4d95601b7b4d3d4 7888424 debug optional libc6-dbg_2.41-12+deb13u5_s390x.deb e01ac0cf6c9f04a9b10fb27541108286 14100 debug optional libc6-dev-dbgsym_2.41-12+deb13u5_s390x.deb 4dae28a5bdfda03ef0ecc5d1c0cb07d7 1206516 libdevel optional libc6-dev-s390_2.41-12+deb13u5_s390x.deb ec668fd6c72092a3a66eb3b97ed5bdb9 1560996 libdevel optional libc6-dev_2.41-12+deb13u5_s390x.deb 55d07a53fb0569e67026756f67a349ad 8211328 debug optional libc6-s390-dbgsym_2.41-12+deb13u5_s390x.deb 137c362cdb27088ae58c06cf2f5c5cb6 2318492 libs optional libc6-s390_2.41-12+deb13u5_s390x.deb c2cb74c2c8c85499aeb86c887d35b78b 1042700 debian-installer optional libc6-udeb_2.41-12+deb13u5_s390x.udeb c6d4a3a1919e915b3f88b82e69c48bef 2455564 libs optional libc6_2.41-12+deb13u5_s390x.deb 611d9eae7121a4422da29bbbe57725a6 11446936 localization optional locales-all_2.41-12+deb13u5_s390x.deb 57e76235c456e81f13a68e51fe1b7ee7 218644 debug optional nscd-dbgsym_2.41-12+deb13u5_s390x.deb 33c26d582a4cb49a808a15cd9eccea06 107680 admin optional nscd_2.41-12+deb13u5_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEPFXUCSHwedwJxYxMojUpyTy8GroFAmr4Zu8ACgkQojUpyTy8 GrpVBA//aHWmDR9w5IVMVRM6qsrvzetVuCtCygz9cjfPg/I7IztBmSQ7ju+88+w+ X2e150TSP4BynJ5AWuqMDIdGOjGn+OHZXggRavWp/BTRSq75FgYDm2IiYQ0IDhTD PgdRkF821cpOhmiNnVOOKN5CqQlcn7CGhe3ojzjOP61Lk+yq1Yli/jBRZYwBgePr S5JkK6s1DRgc75D+R+FlY838bEC1p5f0iCGXLwnizbFOzKodNwPwJuqQZ1cYGAPA +7qX26xBtEbRYzi8+kZb6xwbHJhQexXHTiki1no/YRFNQCRchen84NvjcDs6KLNE t5d1F90ao+lA/kp3wTWfQPgKWiBCF/eBPEPR7lETMGpWQD5wMY2lZuY0pNOP8Jnz G6Adf/HuGga+P1Qvk9rTLnHFgZhe3/ERKpCiykfvS5lEmvo7Zj+wbth23Sc42fP7 UH7EgbUKOiUBUO3Xsltv43XzVBIVu/cy5Dv4cPjJ8u6Po3UYFzaW3wejLSat/Ryo zMOgZFqxgCQtut7Juq6mQjRj5qdhWyVEetGjs93O2rDFKRsIVoQGgX5cNp5LgxKi gKW/4r2QoZOQjhARTh55aABhmumA0VtMnK6vkTYa7sjXa8hc4qbAuNazzJYKMjOu wZb+PvMX62s4dGzO9qWg430XO9TB5GVJqnNcD8f2ojzyLqqNOxQ= =JyXt -----END PGP SIGNATURE-----