glibc (2.41-12+deb13u2) trixie; urgency=medium
* debian/patches/git-updates.diff: update from upstream stable branch:
- Fix a null pointer dereference in <ctype.h> macros in multithreaded
programs with multiple libc.so.
- Fix _r_debug handling when interposed by the main executable, restoring
compatibility with Dyninst.
- Fix a null pointer dereference in symbol lookup when the symbol version
hash value is zero.
- Add a new test for dlopen (NULL, RTLD_LAZY) from an ELF constructor.
- Preserve vector registers in the i386 TLS slow path.
- Add GLIBC_ABI_GNU2_TLS and GLIBC_ABI_GNU_TLS symbol versions and i386.
- Add GLIBC_ABI_GNU2_TLS and GLIBC_ABI_DT_X86_64_PLT symbol versions on
amd64.
- Fix NSS group merge not reacting to ERANGE during merge.
- Detect Intel Nova and Wildcat processors and use the same ifunc
selection as for Intel Panther Lake.
- Fix typo in wmemset ifunc selector that caused AVX2/AVX512 paths to be
skipped.
- Fix incorrect return values and improve special case handling in arm64
SVE pow/powf and tanpi/tanpif implementations.
- Optimise SVE scalar callbacks on arm64.
- Correct SME handling on arm64 by disabling ZA state in setjmp and
sigsetjmp, clearing ZA state in clone/clone3.
- Fix conform tests on arm64 when the toolchain does not default to
-mbranch-protection=standard.
- Fix performance instability in AdvSIMD tan and sinh function on arm64
- Fix and restore POWER10 optimized strcmp/strncmp functions on ppc64el,
they got previously disabled 2.41-8 due to a security issue.
- Fix POWER optimized rawmemchr function on ppc64el.
- Validate pread size and offset for overflow when reading ELF
headers in the sprof utility.
- Minor fixes to testsuite support code.
- Optimize trylock for high cache contention workloads.
- Fix and integer overflow in _int_memalign leading to heap corruption
(CVE-2026-0861). Closes: #
1125678.
- Fix stack contents leak in getnetbyaddr (CVE-2026-0915). Closes:
#
1125748.
- Fix bug in wordexp, which could return uninitialized memory when using
WRDE_REUSE together with WRDE_APPEND (CVE-2025-15281). Closes: #
1126266.
- Switch currency symbol for the bg_BG locale to euro.
* Revert addition of symbol versions used as ABI flags, as the
dpkg-shlibdeps version in trixie is not able to handle them (see
#
1122107):
- local-revert-x86-64-add-GLIBC_ABI_DT_X86_64_PLT-version.diff
- local-revert-x86-64-add-GLIBC_ABI_GNU2_TLS-version.diff
- local-revert-i386-add-GLIBC_ABI_GNU2_TLS-version.diff
- local-revert-i386-add-GLIBC_ABI_GNU_TLS-version.diff
[dgit import unpatched glibc 2.41-12+deb13u2]
projects / glibc.git / log