-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 01 Mar 2026 21:10:06 +0100 Source: glibc Binary: libc-bin libc-bin-dbgsym libc-dev-bin libc-dev-bin-dbgsym libc-devtools libc-devtools-dbgsym libc6 libc6-dbg libc6-dev libc6-dev-dbgsym libc6-udeb locales-all nscd nscd-dbgsym Architecture: riscv64 Version: 2.41-12+deb13u2 Distribution: trixie Urgency: medium Maintainer: riscv64 Build Daemon (rv-osuosl-04) Changed-By: Aurelien Jarno Description: libc-bin - GNU C Library: Binaries libc-dev-bin - GNU C Library: Development binaries libc-devtools - GNU C Library: Development tools libc6 - GNU C Library: Shared libraries libc6-dbg - GNU C Library: detached debugging symbols libc6-dev - GNU C Library: Development Libraries and Header Files libc6-udeb - GNU C Library: Shared libraries - udeb (udeb) locales-all - GNU C Library: Precompiled locale data nscd - GNU C Library: Name Service Cache Daemon Closes: 1125678 1125748 1126266 Changes: glibc (2.41-12+deb13u2) trixie; urgency=medium . * debian/patches/git-updates.diff: update from upstream stable branch: - Fix a null pointer dereference in macros in multithreaded programs with multiple libc.so. - Fix _r_debug handling when interposed by the main executable, restoring compatibility with Dyninst. - Fix a null pointer dereference in symbol lookup when the symbol version hash value is zero. - Add a new test for dlopen (NULL, RTLD_LAZY) from an ELF constructor. - Preserve vector registers in the i386 TLS slow path. - Add GLIBC_ABI_GNU2_TLS and GLIBC_ABI_GNU_TLS symbol versions and i386. - Add GLIBC_ABI_GNU2_TLS and GLIBC_ABI_DT_X86_64_PLT symbol versions on amd64. - Fix NSS group merge not reacting to ERANGE during merge. - Detect Intel Nova and Wildcat processors and use the same ifunc selection as for Intel Panther Lake. - Fix typo in wmemset ifunc selector that caused AVX2/AVX512 paths to be skipped. - Fix incorrect return values and improve special case handling in arm64 SVE pow/powf and tanpi/tanpif implementations. - Optimise SVE scalar callbacks on arm64. - Correct SME handling on arm64 by disabling ZA state in setjmp and sigsetjmp, clearing ZA state in clone/clone3. - Fix conform tests on arm64 when the toolchain does not default to -mbranch-protection=standard. - Fix performance instability in AdvSIMD tan and sinh function on arm64 - Fix and restore POWER10 optimized strcmp/strncmp functions on ppc64el, they got previously disabled 2.41-8 due to a security issue. - Fix POWER optimized rawmemchr function on ppc64el. - Validate pread size and offset for overflow when reading ELF headers in the sprof utility. - Minor fixes to testsuite support code. - Optimize trylock for high cache contention workloads. - Fix and integer overflow in _int_memalign leading to heap corruption (CVE-2026-0861). Closes: #1125678. - Fix stack contents leak in getnetbyaddr (CVE-2026-0915). Closes: #1125748. - Fix bug in wordexp, which could return uninitialized memory when using WRDE_REUSE together with WRDE_APPEND (CVE-2025-15281). Closes: #1126266. - Switch currency symbol for the bg_BG locale to euro. * Revert addition of symbol versions used as ABI flags, as the dpkg-shlibdeps version in trixie is not able to handle them (see #1122107): - local-revert-x86-64-add-GLIBC_ABI_DT_X86_64_PLT-version.diff - local-revert-x86-64-add-GLIBC_ABI_GNU2_TLS-version.diff - local-revert-i386-add-GLIBC_ABI_GNU2_TLS-version.diff - local-revert-i386-add-GLIBC_ABI_GNU_TLS-version.diff Checksums-Sha1: e9e74e31bf1ea21c10c34edb5f707cd06190412f 12799 glibc_2.41-12+deb13u2_riscv64-buildd.buildinfo c8f47ddcd326a3843a7e6ccfcfde833658f0e335 2143988 libc-bin-dbgsym_2.41-12+deb13u2_riscv64.deb 040cd34092a864f4ea509c103f2ac4006870aa33 606992 libc-bin_2.41-12+deb13u2_riscv64.deb ddd596ba2195bd445da3c84ff9e5db2625aa336c 31672 libc-dev-bin-dbgsym_2.41-12+deb13u2_riscv64.deb 1b02a6d64423073607c580e12a792583561e158d 58604 libc-dev-bin_2.41-12+deb13u2_riscv64.deb 484235c3118b7f98ece88cc8cc0a5289e2dc4f42 44876 libc-devtools-dbgsym_2.41-12+deb13u2_riscv64.deb 69586c1d20bc8fc2a2e70553ad7e1f0aab26e15a 67980 libc-devtools_2.41-12+deb13u2_riscv64.deb b86d3607950168d13ef6431eb6db9be5049f3f4d 6219612 libc6-dbg_2.41-12+deb13u2_riscv64.deb e668ac283a6dfe15bf1f36c018963aa558929bd5 13564 libc6-dev-dbgsym_2.41-12+deb13u2_riscv64.deb 6ab9673dfa5d7823ddde6f381e25dc570ba115fc 3127608 libc6-dev_2.41-12+deb13u2_riscv64.deb b83b42673cd8d0d81054405640ef19c84e974ad6 1039468 libc6-udeb_2.41-12+deb13u2_riscv64.udeb b30ff4ea47e64264db8b46e5c4fea913f8612d6f 2470620 libc6_2.41-12+deb13u2_riscv64.deb 8d87733de53805b6f82f59e0609f08243fc39374 11079300 locales-all_2.41-12+deb13u2_riscv64.deb 6633a871d93fe0aaf120812577cc081997b70c88 210488 nscd-dbgsym_2.41-12+deb13u2_riscv64.deb 3a1d17d247afe052f9d7157ad29ad4082307fa12 105252 nscd_2.41-12+deb13u2_riscv64.deb Checksums-Sha256: 3b10fb3ee2f68fb5713e3ab3ef0f51df43c55fc4a0d209d91bdc3ea374b58b45 12799 glibc_2.41-12+deb13u2_riscv64-buildd.buildinfo 3edc34afbe3a3611b96a7cd41ef25cc4c50b542251d0f4ccf443619672f19582 2143988 libc-bin-dbgsym_2.41-12+deb13u2_riscv64.deb 4b03a077476ed203f0edd56339a8d2b91a6b12ae1cc801db2ac917ad07b05617 606992 libc-bin_2.41-12+deb13u2_riscv64.deb 219e252fe6346bbccbcc6d8f61760074e342c43d2aec9d95f871fd8d87912a47 31672 libc-dev-bin-dbgsym_2.41-12+deb13u2_riscv64.deb 6df4016bdc20eb7236574a6c5c1bbd6cec49e6ef77606443f64370e87954f05f 58604 libc-dev-bin_2.41-12+deb13u2_riscv64.deb d2394fc63851212ddb327f60933b3c69d6961ccaf3d8116111de292a1f48b722 44876 libc-devtools-dbgsym_2.41-12+deb13u2_riscv64.deb 5c035bcd9aae2fc386290f183260c30b9d06d3fedf3b05ab0fe1f3ad6c67a4e7 67980 libc-devtools_2.41-12+deb13u2_riscv64.deb adc3b7895f81d73f4bec86c52b16035d8ba2da1eda51252f212ae0748d8e56f5 6219612 libc6-dbg_2.41-12+deb13u2_riscv64.deb fe47ce6c7f2c168e236b8b94cad2e4cc45857d97ae56efbd79830cd7138ad061 13564 libc6-dev-dbgsym_2.41-12+deb13u2_riscv64.deb 35966cc363767527aec3b3ca63ed0ab328062f3d1021db4bb56a31ec355f11ef 3127608 libc6-dev_2.41-12+deb13u2_riscv64.deb b6d293232c692b82517d0fa9679a8ff7a592544199033c88018f70d0564b51a0 1039468 libc6-udeb_2.41-12+deb13u2_riscv64.udeb 3c80d1019eb1d15c5d941bda85bab8358621d46408099ba2bc08ac4512c2fe0c 2470620 libc6_2.41-12+deb13u2_riscv64.deb 9446d0e8537baa10d422385ecff07ea868a8fef5fd586431cead9e947ac2a4f0 11079300 locales-all_2.41-12+deb13u2_riscv64.deb b3f261afff15905a4cb57fcf2c10d8e0df4b7182f3c83e00af5a476bad556f33 210488 nscd-dbgsym_2.41-12+deb13u2_riscv64.deb aeb6f1ea995341c06095f903814d500db5d6f4bf36c3104c727bd4166bec7210 105252 nscd_2.41-12+deb13u2_riscv64.deb Files: b2f254ccfd2233b3e9d315216a2dfffc 12799 libs required glibc_2.41-12+deb13u2_riscv64-buildd.buildinfo a2466fca8ad3b5063c266a55787c9e2f 2143988 debug optional libc-bin-dbgsym_2.41-12+deb13u2_riscv64.deb 39fa760958abcee2a51b52267ef2096e 606992 libs required libc-bin_2.41-12+deb13u2_riscv64.deb b90cf87062864db459befddd71d0a4b3 31672 debug optional libc-dev-bin-dbgsym_2.41-12+deb13u2_riscv64.deb fb45396128190079aeeebcd043fe75b8 58604 libdevel optional libc-dev-bin_2.41-12+deb13u2_riscv64.deb 1de4bfa6b75b7dcda1a1a376bf7a02d7 44876 debug optional libc-devtools-dbgsym_2.41-12+deb13u2_riscv64.deb cd161db54c2c8c4078aa3114b0d97c02 67980 devel optional libc-devtools_2.41-12+deb13u2_riscv64.deb 66fe5925b8a022a055316c939a2fabea 6219612 debug optional libc6-dbg_2.41-12+deb13u2_riscv64.deb f2efa71f419965028c1f804bc7ee720b 13564 debug optional libc6-dev-dbgsym_2.41-12+deb13u2_riscv64.deb dff96677c66ac4bb013a797f1035c269 3127608 libdevel optional libc6-dev_2.41-12+deb13u2_riscv64.deb 494b3849a9eaded95a682da6d80460cb 1039468 debian-installer optional libc6-udeb_2.41-12+deb13u2_riscv64.udeb 6bc9532c9c13c55a14d14edd5101fc19 2470620 libs optional libc6_2.41-12+deb13u2_riscv64.deb a2380ee0e4171f0ff290b1a8a32a8b7e 11079300 localization optional locales-all_2.41-12+deb13u2_riscv64.deb 2fe21fdc2ea68d414fab6806dffd9a5b 210488 debug optional nscd-dbgsym_2.41-12+deb13u2_riscv64.deb 8e6318ccb59557d803b8a28ae84c9617 105252 admin optional nscd_2.41-12+deb13u2_riscv64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEgLDDByWcR07HDSHyNVgvumj7+mMFAmmm/OkACgkQNVgvumj7 +mOasA/+Pu1frfyaGWYCMTzdGPuEz53pCrwzME/FulU72CnK+gVcgqMKni9f31ow VGBLXCMjyrQNNpulQCl/buI43CoveB1/H/jTp69j3XICYw4xl7wJqd3C5IE499YB 1YTAkxT31BNJotIKapgDKObK2ouE6F8N1LsTkLdV3MAhRj13o/N4EL/8GVLXMZdI CoVbLiPNw+o6i760YwdODyRw4YaoCnFIRfmcXgKiEkhut+AmiFpn4dkKLf0DtSvi +lN3wxGX8q5ZJbFEGFb+GlUtHr9x3gM+QtdrbRC42mWrAgyf4vpqZYfT2spUPjvk z5yIxQxHO9VJFNTTyvpbDXcDC8y5NDg9stJfwLt4ojIQYGRz1F6WqH+VpZ2Qmeu7 RmZ8sayxTyku9BkZH+AS3t151WxvG2e38s2jJA6yGG3gTxzVqhtKgPz0/ID8JUca 1obUWndgA6wXYkEgG+BkldMkG58L+ZikzcOrixKcGLGxKQwP/rkJHwHiWJkMQweI R7AXTfh1JRXq6/TvE6ppAqlNH6BMWV8Y939qR3OxDQciwK9VUKoIipUpyPvzG5N0 XYiPaATkHWR88YIknTii7OHRR0egeFqfEozScR7GeWc0eMLyNZefUCqWT2WSJ2li kMXz5Evk44vosFusDlEzrlMhUduzhMkw4VTaiky2ohXCHPyZF+g= =qodB -----END PGP SIGNATURE-----