From: Raspbian automatic forward porter Date: Mon, 18 May 2026 21:53:49 +0000 (+0100) Subject: Merge version 2.36-9+rpi1+deb12u13 and 2.36-9+deb12u14 to produce 2.36-9+rpi1+deb12u14 X-Git-Tag: archive/raspbian/2.36-9+rpi1+deb12u14^0 X-Git-Url: https://dgit.raspbian.org/%22http://www.example.com/cgi/success//%22http:/www.example.com/cgi/success/?a=commitdiff_plain;h=42a7a1996ba2a529481751e3d60ef75c758a491a;p=glibc.git Merge version 2.36-9+rpi1+deb12u13 and 2.36-9+deb12u14 to produce 2.36-9+rpi1+deb12u14 --- 42a7a1996ba2a529481751e3d60ef75c758a491a diff --cc debian/changelog index fe556f21c,88dc46142..0b950772e --- a/debian/changelog +++ b/debian/changelog @@@ -1,12 -1,37 +1,47 @@@ - glibc (2.36-9+rpi1+deb12u13) bookworm-staging; urgency=medium ++glibc (2.36-9+rpi1+deb12u14) bookworm-staging; urgency=medium + + [changes brought forward from 2.25-2+rpi1 by Peter Michael Green at Wed, 29 Nov 2017 03:00:21 +0000] + * Disable testsuite. + + [changes brought forward from 2.35-1+rpi2 by Peter Michael Green at Sun, 02 Oct 2022 17:46:25 +0000] + * Remove valgrind breaks. + - -- Raspbian forward porter Thu, 11 Sep 2025 22:03:57 +0000 ++ -- Raspbian forward porter Mon, 18 May 2026 21:53:48 +0000 ++ + glibc (2.36-9+deb12u14) bookworm; urgency=medium + + * debian/patches/git-updates.diff: update from upstream stable branch: + - Fix a performance bottleneck with the Address Sanitizer (ASAN) on 32-bit + arm. + - Fix _dl_find_object when ld.so has LOAD segment gaps, causing wrong + backtrace unwinding. This affects at least arm64. + - Add GLIBC_ABI_DT_X86_64_PLT symbol version on amd64. + - Fix typo in wmemset ifunc selector that caused AVX2/AVX512 paths to be + skipped. + - Fix POWER optimized rawmemchr function on ppc64el. + - Optimize trylock for high cache contention workloads. + - Fix and integer overflow in _int_memalign leading to heap corruption + (CVE-2026-0861). Closes: #1125678. + - Fix stack contents leak in getnetbyaddr (CVE-2026-0915). Closes: + #1125748. + - Fix bug in wordexp, which could return uninitialized memory when using + WRDE_REUSE together with WRDE_APPEND (CVE-2025-15281). Closes: #1126266. + - Fix invalid pointer arithmetic in ANSI_X3.110 iconv module + - Fix a typo preventing new tst-wordexp-reuse-mem to run + - Fix incorrect handling of DNS responses in gethostbyaddr and + gethostbyaddr_r (CVE-2026-4437). Closes: #1131435. + - Fix invalid DNS hostnames returned by gethostbyaddr and + gethostbyaddr_r (CVE-2026-4438). Closes: #1131887. + - Fix random failure of tst-link-map-contiguous-ldso. + - Fix a possible crash due to an assertion failure when converting + inputs from the IBM139x character sets (CVE-2026-4046). Closes: + #1132499. + * d/p/amd64/local-revert-x86-64-add-GLIBC_ABI_DT_X86_64_PLT-version.diff: + revert addition of the GLIBC_ABI_DT_X86_64_PLT symbol version used as ABI + flag, as the dpkg-shlibdeps version in bookworm is not able to handle it + (see #1122107). + + -- Aurelien Jarno Mon, 27 Apr 2026 22:14:33 +0200 glibc (2.36-9+deb12u13) bookworm; urgency=medium diff --cc debian/patches/series index d2c74ead9,7217d7dcf..76a01edd6 --- a/debian/patches/series +++ b/debian/patches/series @@@ -19,6 -20,9 +19,7 @@@ alpha/submitted-dl-support.dif alpha/local-string-functions.diff alpha/submitted-fts64.diff alpha/submitted-makecontext.diff - + amd64/local-revert-x86-64-add-GLIBC_ABI_DT_X86_64_PLT-version.diff - arm/local-sigaction.diff arm/unsubmitted-ldso-multilib.diff arm/local-arm-futex.diff