From: Raspbian automatic forward porter Date: Wed, 4 Oct 2023 15:52:46 +0000 (+0100) Subject: Merge version 2.36-9+rpi1+deb12u1 and 2.36-9+deb12u3 to produce 2.36-9+rpi1+deb12u3 X-Git-Tag: archive/raspbian/2.36-9+rpi1+deb12u3^0 X-Git-Url: https://dgit.raspbian.org/?a=commitdiff_plain;h=8b05e769c443d7b42a1de1ba4aa1f6c2e036c656;p=glibc.git Merge version 2.36-9+rpi1+deb12u1 and 2.36-9+deb12u3 to produce 2.36-9+rpi1+deb12u3 --- 8b05e769c443d7b42a1de1ba4aa1f6c2e036c656 diff --cc debian/changelog index e2836cf2e,bfc0360fc..9b77ee91c --- a/debian/changelog +++ b/debian/changelog @@@ -1,12 -1,26 +1,36 @@@ - glibc (2.36-9+rpi1+deb12u1) bookworm-staging; urgency=medium ++glibc (2.36-9+rpi1+deb12u3) bookworm-staging; urgency=medium + + [changes brought forward from 2.25-2+rpi1 by Peter Michael Green at Wed, 29 Nov 2017 03:00:21 +0000] + * Disable testsuite. + + [changes brought forward from 2.35-1+rpi2 by Peter Michael Green at Sun, 02 Oct 2022 17:46:25 +0000] + * Remove valgrind breaks. + - -- Raspbian forward porter Sat, 29 Jul 2023 06:12:27 +0000 ++ -- Raspbian forward porter Wed, 04 Oct 2023 15:52:45 +0000 ++ + glibc (2.36-9+deb12u3) bookworm-security; urgency=medium + + * debian/patches/any/local-CVE-2023-4911.patch: Fix a buffer overflow in the + dynamic loader's processing of the GLIBC_TUNABLES environment variable + (CVE-2023-4911). + + -- Aurelien Jarno Sat, 30 Sep 2023 10:31:05 +0200 + + glibc (2.36-9+deb12u2) bookworm; urgency=medium + + * debian/patches/git-updates.diff: update from upstream stable branch: + - Fix the value of F_GETLK/F_SETLK/F_SETLKW with __USE_FILE_OFFSET64 on + ppc64el. Closes: #1050592. + - Fix a stack read overflow in getaddrinfo in no-aaaa mode + (CVE-2023-4527). Closes: #1051958. + - Fix use after free in getcanonname (CVE-2023-4806, CVE-2023-5156). + - Update the x86 cacheinfo code to look at the per-thread L3 cache to + determine the non-temporal threshold. This improves memory and string + functions on modern CPUs. + - Fix _dl_find_object to return correct values even during early startup. + - Always call destructors in reverse constructor order. + + -- Aurelien Jarno Thu, 28 Sep 2023 22:50:47 +0200 glibc (2.36-9+deb12u1) bookworm; urgency=medium diff --cc debian/patches/series index 6339bef11,56ec600c6..bbe8307fb --- a/debian/patches/series +++ b/debian/patches/series @@@ -105,4 -119,4 +105,5 @@@ any/local-test-install.dif any/local-cross.patch any/git-floatn-gcc-13-support.diff any/local-disable-tst-bz29951.diff + any/local-CVE-2023-4911.patch +auto-2.34-7+rpi1-de346af12a6cb5181ed2ab174fb35c88f3b64f4b-1663212931