-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 10 Oct 2026 19:56:39 +0200 Source: glibc Binary: libc-bin libc-bin-dbgsym libc-dev-bin libc-dev-bin-dbgsym libc-devtools libc-devtools-dbgsym libc6 libc6-amd64 libc6-amd64-dbgsym libc6-dbg libc6-dev libc6-dev-amd64 libc6-dev-dbgsym libc6-dev-x32 libc6-udeb libc6-x32 libc6-x32-dbgsym locales-all nscd nscd-dbgsym Architecture: i386 Version: 2.41-12+deb13u5 Distribution: trixie Urgency: medium Maintainer: amd64 / i386 Build Daemon (x86-ubc-02) Changed-By: Aurelien Jarno Description: libc-bin - GNU C Library: Binaries libc-dev-bin - GNU C Library: Development binaries libc-devtools - GNU C Library: Development tools libc6 - GNU C Library: Shared libraries libc6-amd64 - GNU C Library: 64bit Shared libraries for AMD64 libc6-dbg - GNU C Library: detached debugging symbols libc6-dev - GNU C Library: Development Libraries and Header Files libc6-dev-amd64 - GNU C Library: 64bit Development Libraries for AMD64 libc6-dev-x32 - GNU C Library: X32 ABI Development Libraries for AMD64 libc6-udeb - GNU C Library: Shared libraries - udeb (udeb) libc6-x32 - GNU C Library: X32 ABI Shared libraries for AMD64 locales-all - GNU C Library: Precompiled locale data nscd - GNU C Library: Name Service Cache Daemon Closes: 1135230 1135231 1144252 1145880 1145891 1145987 1146721 1147395 1148168 1148727 1148728 1149647 Changes: glibc (2.41-12+deb13u5) trixie; urgency=medium . * debian/patches/git-updates.diff: update from upstream stable branch: - Cache cpuid results in ld.so for Intel CPUs. - Fix a buffer overread in ns_sprintrrf with corrupted RDATA field (CVE-2026-6238). Closes: #1135231. - Fix an out-of-bounds write in ns_sprintrrf when printing TSIG records (CVE-2026-5435). Closes: #1135230. - Fix stack overflow in wordexp tilde expansion (CVE-2026-6791). - Fix wordexp WRDE_APPEND to preserve state on non-NOSPACE errors (CVE-2026-6368). Closes: #1144252. - Fix out-of-bounds stack array write in tdelete (CVE-2026-19542). - Fix a buffer overflow in strfmon right-justification padding (CVE-2026-19499). Closes: #1145891. - Fix a hang when decoding SHIFT_JISX0213 to UTF-32 (CVE-2026-77117). Closes: #1145880. - Fix a hand when decoding EUC_JISX0213 to UTF-32 (CVE-2026-80489). Closes: #1145987. - Fix a heap buffer overlow in how fopen() parses the ,ccs= mode suffix (CVE-2026-18374). Closes: #1146721. - Keep needed last transition to new type in TZif files generated by zic. - Fix an assertion failure in the DNS stub resolver with a long search domain (CVE-2026-8674). Closes: #1148168. - Fix a stack overflow in nscd that can be triggered by large DNS responses from malicious servers (CVE-2026-89092). Closes: #1147395. - Fix a TOCTOU race condition in the dynamic loader (CVE-2026-86805). Closes: #1148727. - Fix a stack overflow in the dynamic loader (CVE-2026-95818). Closes: #1148728. - Fix one byte overread in POWER8 version of strncasecmp() (CVE-2026-97399). Closes: #1149647 Checksums-Sha1: 6cd68d3d9ec55ccb436998cb90d30e4d92600304 15615 glibc_2.41-12+deb13u5_i386-buildd.buildinfo 2e2fcdbb941b4d53d58f870f32f9ee1e45e7dc6c 2149204 libc-bin-dbgsym_2.41-12+deb13u5_i386.deb 7bb1a94072bd74a400977b98c989077f0347f745 660116 libc-bin_2.41-12+deb13u5_i386.deb 878366d9303a2c431c179fdbe48c99c69109ae30 30936 libc-dev-bin-dbgsym_2.41-12+deb13u5_i386.deb 75bf3a4d34814ae8563ce5e39d5c14c6ca60d709 60800 libc-dev-bin_2.41-12+deb13u5_i386.deb dcb84597ea5c3c92e06a7bbe6a2cff1aea24f06d 45812 libc-devtools-dbgsym_2.41-12+deb13u5_i386.deb e0a7f20790aeaf28fc4610bbcfc84986cfc65115 71964 libc-devtools_2.41-12+deb13u5_i386.deb 9dafec088c9e20562c59ac934a599e36e4cbc40e 7329084 libc6-amd64-dbgsym_2.41-12+deb13u5_i386.deb cc7a48f97e67c75dd304739b2c005fe512e2dac7 2664284 libc6-amd64_2.41-12+deb13u5_i386.deb 8b6e1f6bd3b0968cb95484129c57eb33770a8be7 6886104 libc6-dbg_2.41-12+deb13u5_i386.deb 34919f08b900ab2707d1f3f33672953a881d97b7 1611700 libc6-dev-amd64_2.41-12+deb13u5_i386.deb 476e6d1004e4d1d0caab3d1551ea2e0128f57170 13884 libc6-dev-dbgsym_2.41-12+deb13u5_i386.deb e644a6d60c6fd91f29439f43059a6e145b04e6ed 1598020 libc6-dev-x32_2.41-12+deb13u5_i386.deb a1aac5eef79953a848519a115f6d31d86b93e0de 1811284 libc6-dev_2.41-12+deb13u5_i386.deb d520fbc07760f8d5d78bb20da9720206118051c4 1286380 libc6-udeb_2.41-12+deb13u5_i386.udeb 699d32cde0194817142116ba16404739ce652f68 7114500 libc6-x32-dbgsym_2.41-12+deb13u5_i386.deb a99b17873681e4109aae7f7c4ebf1c8e170c3ed9 2664664 libc6-x32_2.41-12+deb13u5_i386.deb 756a0f0348f4de812deed96e1cc2581d3d67a961 2720280 libc6_2.41-12+deb13u5_i386.deb dc09395aecd041b7632c9369b98ed83b7c4250fa 11203728 locales-all_2.41-12+deb13u5_i386.deb a5749c5c9e53bed59b1f8e90303ae635a24489d2 203316 nscd-dbgsym_2.41-12+deb13u5_i386.deb 335bd88c8d5c7a20e4b182525abd74941aaf54f4 110648 nscd_2.41-12+deb13u5_i386.deb Checksums-Sha256: fc267440d6a361c4898199eba827298a6a45cb322d6715f9655d5073f243dda2 15615 glibc_2.41-12+deb13u5_i386-buildd.buildinfo 733be68617849be3de844c2ad63b830c1821c55a006a1ffca72a09e34023dc7f 2149204 libc-bin-dbgsym_2.41-12+deb13u5_i386.deb 6daf5764b5e0fbea145d608728bd7f62574fb135bf8d0aea9854b0d8509e9229 660116 libc-bin_2.41-12+deb13u5_i386.deb 45932017ba5b61bf8b5c59963d06dfce52ee251e06bb7249bda1f9fe77694dd7 30936 libc-dev-bin-dbgsym_2.41-12+deb13u5_i386.deb 332cf4d8da06e36f495f9fb2bedaf16ac2708033be4f72042252a3ed039f91ca 60800 libc-dev-bin_2.41-12+deb13u5_i386.deb 0f593d3ca66d27bb57bb8aea4bb4eacd82b2d763d75f5b6af82d12b856052403 45812 libc-devtools-dbgsym_2.41-12+deb13u5_i386.deb 03c6bd4d86c9b2f57c66b7362d6cbc989d04c4db1ec40ee6be32848ce5840d5b 71964 libc-devtools_2.41-12+deb13u5_i386.deb 8750b3bc0e8da04f62f01e1c50ab1a9586417c5dcb809b7520c153901c7b749a 7329084 libc6-amd64-dbgsym_2.41-12+deb13u5_i386.deb 773b642874ded753a551d842e98e33420175f0ad62ea7bc61f7302b095be2d13 2664284 libc6-amd64_2.41-12+deb13u5_i386.deb 06bc393141dea0823def6c35f0a09a114612a85ccf57462d0c64227c84d686e7 6886104 libc6-dbg_2.41-12+deb13u5_i386.deb b5dea82316eba06c9585e7431e5dce0a0f9db2ab53d8a2ca9e50c265a29c6010 1611700 libc6-dev-amd64_2.41-12+deb13u5_i386.deb 4057367a08426b361f83fa3693244f39492a3c3faab5eb9583b8ff3df6c67165 13884 libc6-dev-dbgsym_2.41-12+deb13u5_i386.deb e915690ab5e5e1519b194fdf1dcc5913075f81b62c7a2874e4e2be56e93cad11 1598020 libc6-dev-x32_2.41-12+deb13u5_i386.deb e78c6c77e7752d62a7dddb50d0b634545f2e444d9165c53fc2e0b8abbebe0b65 1811284 libc6-dev_2.41-12+deb13u5_i386.deb bdd56662be97c5993926a91211eec605a3ce2552834ec45d791b473cad620c28 1286380 libc6-udeb_2.41-12+deb13u5_i386.udeb 216c70a822fd54d6d9c97162492d2473adf300473a0f909c8e4feeb97966b506 7114500 libc6-x32-dbgsym_2.41-12+deb13u5_i386.deb 9363ac6d2fdf5a17d8c634f99bec86abf7707f7b0bf932cf3096a0c7d0816925 2664664 libc6-x32_2.41-12+deb13u5_i386.deb 8b29b5d68814a9dd4cbc37e2ddbae7cef608e54083a369e6545d7fcca76e813b 2720280 libc6_2.41-12+deb13u5_i386.deb 74907acb263f2d767648d8acf3a1a6ef20957ef2eed0e6d53840f692e9c9eb9c 11203728 locales-all_2.41-12+deb13u5_i386.deb 5210ec22cc21c0a213be1c62f36475735be5e75ee18af2e3a7d02f6cc7f95e4d 203316 nscd-dbgsym_2.41-12+deb13u5_i386.deb eb0f408340fe6a54d6a46a596f30b352519aeabc737d6a3c8379b238f6f85fd2 110648 nscd_2.41-12+deb13u5_i386.deb Files: 9eb964a703da97ba8b153a4c33b5a5aa 15615 libs required glibc_2.41-12+deb13u5_i386-buildd.buildinfo df16667311b430c90f5469091175373c 2149204 debug optional libc-bin-dbgsym_2.41-12+deb13u5_i386.deb 73669e3bcc0d59e57e2d982b233868a3 660116 libs required libc-bin_2.41-12+deb13u5_i386.deb 55cbaaf5b9e8bb43043ff2b76a7e1820 30936 debug optional libc-dev-bin-dbgsym_2.41-12+deb13u5_i386.deb de68c2c3a4db491cdf39c096c66f32f0 60800 libdevel optional libc-dev-bin_2.41-12+deb13u5_i386.deb 5ae5563f05955c49b1839411631eeb1a 45812 debug optional libc-devtools-dbgsym_2.41-12+deb13u5_i386.deb 1ea89056989726a5363c825f623702e8 71964 devel optional libc-devtools_2.41-12+deb13u5_i386.deb 8900d85146ca2058f42f4b1dde96aa6c 7329084 debug optional libc6-amd64-dbgsym_2.41-12+deb13u5_i386.deb 56d2945dc915ae674ca375b6739340fa 2664284 libs optional libc6-amd64_2.41-12+deb13u5_i386.deb 5d15279b91193c6d6e26dce2e26ef05f 6886104 debug optional libc6-dbg_2.41-12+deb13u5_i386.deb ac6cf7725a2a48d6054835caa43dfcaf 1611700 libdevel optional libc6-dev-amd64_2.41-12+deb13u5_i386.deb 8360bdbb282aa1c1cc01fc1889d7a45c 13884 debug optional libc6-dev-dbgsym_2.41-12+deb13u5_i386.deb 6119e175fa3b6e084dd77232324bc41d 1598020 libdevel optional libc6-dev-x32_2.41-12+deb13u5_i386.deb dd68d750a1d03a5bb70bd3413df07812 1811284 libdevel optional libc6-dev_2.41-12+deb13u5_i386.deb 811f2476a554975381909eba6daa15e9 1286380 debian-installer optional libc6-udeb_2.41-12+deb13u5_i386.udeb 8032d4b7c67ddad217635d3b0c7635b5 7114500 debug optional libc6-x32-dbgsym_2.41-12+deb13u5_i386.deb aa2f32b405637fc3893bb7ae2ac56572 2664664 libs optional libc6-x32_2.41-12+deb13u5_i386.deb 5c2e65db15a174edeffef10e0e858f50 2720280 libs optional libc6_2.41-12+deb13u5_i386.deb 1ccdb687ad2f6772d5280a2e0229bf77 11203728 localization optional locales-all_2.41-12+deb13u5_i386.deb d308475faccc91015344583c14582d93 203316 debug optional nscd-dbgsym_2.41-12+deb13u5_i386.deb 41f073964a6d07fb4c4de29fe12bfe56 110648 admin optional nscd_2.41-12+deb13u5_i386.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEb5EwsJvHBEjqIJYIbheoBegwXLIFAmr4Yc4ACgkQbheoBegw XLLAxBAAhIl+C20eBxdNK7kaaO0JXcrXdL3LU+J0vrttLX6/8ueo2uOk2WTA/+4I 359JqjI1a1iW7EtEL9RrstEWCxT77HAqWhaVfeNtBle0NM2+0CdJKWGd8E1QJtQh L6e+mGCgbNGpTQlRGNDZ47hCYtoZ1OMQMNbAjTZumMd3OpLJNQBgx2RRsBEqWw4J jPeeNQBWqyeUUGKjDr//yNIoO2BHrJuSwNlAeR1969/TvRwzOEq1eivkA7RZD0/n Fsmu1avClHsWKZ1+aGYT2XRAXjSM04uAsQeVdNxVSSorB9jrzRNhWiZLcoTYy8jh vuO0SdoiipWTJD0a/fDwVHsv9EMorBxPSpIc4yuLfRPrmRwyU7A68cV3RsJN3CZc afGcOBSXSq0JScgisgmzCQ0LPwo+fh1xYbCTMFOYedo0I2NsFG0wR080OQRhnYp0 swUel4zVYFFARYk2uNHy8LdHD11TZl0pBVWV/G5wFr5Kguw4KrsGOjbNBSa7xuac ylnCe4VKTgHUcQ5NMP4cGihia9opWeTVZC2j7Z4Uu0WwYdL0MZ8whV+uQ328r7tY T9eEgpBC8bpKo7XlONVK7NkZCVAfdUblkJyvi2C2Enm/cOy+RRa12cLNDTqW5UGE +U3pccGlnHNWpndd77hA5D7G7l2DSMn7ZRio62jqkeH9K38+IsI= =EE6R -----END PGP SIGNATURE-----