Merge version 2.36-9+rpi1+deb12u13 and 2.36-9+deb12u14 to produce 2.36-9+rpi1+deb12u14

diff --cc debian/changelog
index fe556f21c51e126b867363672c79773c3023c77c,88dc46142e5ab98f511890c0e42490e0650484d2..0b950772e659bfc27c91b5d320ce01f3eb5ad91e
--- 1/debian/changelog
--- 2/debian/changelog
+++ b/debian/changelog
@@@ -1,12 -1,37 +1,47 @@@
- glibc (2.36-9+rpi1+deb12u13) bookworm-staging; urgency=medium
++glibc (2.36-9+rpi1+deb12u14) bookworm-staging; urgency=medium
 +
 +  [changes brought forward from 2.25-2+rpi1 by Peter Michael Green <plugwash@raspbian.org> at Wed, 29 Nov 2017 03:00:21 +0000]
 +  * Disable testsuite.
 +
 +  [changes brought forward from 2.35-1+rpi2 by Peter Michael Green <plugwash@raspbian.org> at Sun, 02 Oct 2022 17:46:25 +0000]
 +  * Remove valgrind breaks.
 +
-  -- Raspbian forward porter <root@raspbian.org>  Thu, 11 Sep 2025 22:03:57 +0000
++ -- Raspbian forward porter <root@raspbian.org>  Mon, 18 May 2026 21:53:48 +0000
++
+ glibc (2.36-9+deb12u14) bookworm; urgency=medium
+ 
+   * debian/patches/git-updates.diff: update from upstream stable branch:
+     - Fix a performance bottleneck with the Address Sanitizer (ASAN) on 32-bit
+       arm.
+     - Fix _dl_find_object when ld.so has LOAD segment gaps, causing wrong
+       backtrace unwinding. This affects at least arm64.
+     - Add GLIBC_ABI_DT_X86_64_PLT symbol version on amd64.
+     - Fix typo in wmemset ifunc selector that caused AVX2/AVX512 paths to be
+       skipped.
+     - Fix POWER optimized rawmemchr function on ppc64el.
+     - Optimize trylock for high cache contention workloads.
+     - Fix and integer overflow in _int_memalign leading to heap corruption
+       (CVE-2026-0861).  Closes: #1125678.
+     - Fix stack contents leak in getnetbyaddr (CVE-2026-0915).  Closes:
+       #1125748.
+     - Fix bug in wordexp, which could return uninitialized memory when using
+       WRDE_REUSE together with WRDE_APPEND (CVE-2025-15281).  Closes: #1126266.
+     - Fix invalid pointer arithmetic in ANSI_X3.110 iconv module
+     - Fix a typo preventing new tst-wordexp-reuse-mem to run
+     - Fix incorrect handling of DNS responses in gethostbyaddr and
+       gethostbyaddr_r (CVE-2026-4437).  Closes: #1131435.
+     - Fix invalid DNS hostnames returned by gethostbyaddr and
+       gethostbyaddr_r (CVE-2026-4438).  Closes: #1131887.
+     - Fix random failure of tst-link-map-contiguous-ldso.
+     - Fix a possible crash due to an assertion failure when converting
+       inputs from the IBM139x character sets (CVE-2026-4046).  Closes:
+       #1132499.
+   * d/p/amd64/local-revert-x86-64-add-GLIBC_ABI_DT_X86_64_PLT-version.diff:
+     revert addition of the GLIBC_ABI_DT_X86_64_PLT symbol version used as ABI
+     flag, as the dpkg-shlibdeps version in bookworm is not able to handle it
+     (see #1122107).
+ 
+  -- Aurelien Jarno <aurel32@debian.org>  Mon, 27 Apr 2026 22:14:33 +0200
  
  glibc (2.36-9+deb12u13) bookworm; urgency=medium
  

diff --cc debian/patches/series
index d2c74ead9fbb5d12e7fa01bf5eb809bc68506dd9,7217d7dcf6e1aea11b17546ead1e129d3385777c..76a01edd62bb9db70abe54f5c821399f458375ff
--- 1/debian/patches/series
--- 2/debian/patches/series
+++ b/debian/patches/series
@@@ -19,6 -20,9 +19,7 @@@ alpha/submitted-dl-support.dif
  alpha/local-string-functions.diff
  alpha/submitted-fts64.diff
  alpha/submitted-makecontext.diff
 -
+ amd64/local-revert-x86-64-add-GLIBC_ABI_DT_X86_64_PLT-version.diff
 -
  arm/local-sigaction.diff
  arm/unsubmitted-ldso-multilib.diff
  arm/local-arm-futex.diff