-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 27 Apr 2026 22:14:33 +0200 Source: glibc Binary: libc-bin libc-bin-dbgsym libc-dev-bin libc-dev-bin-dbgsym libc-devtools libc-devtools-dbgsym libc6 libc6-dbg libc6-dev libc6-dev-dbgsym libc6-dev-s390 libc6-s390 libc6-s390-dbgsym libc6-udeb locales-all nscd nscd-dbgsym Architecture: s390x Version: 2.36-9+deb12u14 Distribution: bookworm Urgency: medium Maintainer: s390x Build Daemon (zani) Changed-By: Aurelien Jarno Description: libc-bin - GNU C Library: Binaries libc-dev-bin - GNU C Library: Development binaries libc-devtools - GNU C Library: Development tools libc6 - GNU C Library: Shared libraries libc6-dbg - GNU C Library: detached debugging symbols libc6-dev - GNU C Library: Development Libraries and Header Files libc6-dev-s390 - GNU C Library: 32bit Development Libraries for IBM zSeries libc6-s390 - GNU C Library: 32bit Shared libraries for IBM zSeries libc6-udeb - GNU C Library: Shared libraries - udeb (udeb) locales-all - GNU C Library: Precompiled locale data nscd - GNU C Library: Name Service Cache Daemon Closes: 1125678 1125748 1126266 1131435 1131887 1132499 Changes: glibc (2.36-9+deb12u14) bookworm; urgency=medium . * debian/patches/git-updates.diff: update from upstream stable branch: - Fix a performance bottleneck with the Address Sanitizer (ASAN) on 32-bit arm. - Fix _dl_find_object when ld.so has LOAD segment gaps, causing wrong backtrace unwinding. This affects at least arm64. - Add GLIBC_ABI_DT_X86_64_PLT symbol version on amd64. - Fix typo in wmemset ifunc selector that caused AVX2/AVX512 paths to be skipped. - Fix POWER optimized rawmemchr function on ppc64el. - Optimize trylock for high cache contention workloads. - Fix and integer overflow in _int_memalign leading to heap corruption (CVE-2026-0861). Closes: #1125678. - Fix stack contents leak in getnetbyaddr (CVE-2026-0915). Closes: #1125748. - Fix bug in wordexp, which could return uninitialized memory when using WRDE_REUSE together with WRDE_APPEND (CVE-2025-15281). Closes: #1126266. - Fix invalid pointer arithmetic in ANSI_X3.110 iconv module - Fix a typo preventing new tst-wordexp-reuse-mem to run - Fix incorrect handling of DNS responses in gethostbyaddr and gethostbyaddr_r (CVE-2026-4437). Closes: #1131435. - Fix invalid DNS hostnames returned by gethostbyaddr and gethostbyaddr_r (CVE-2026-4438). Closes: #1131887. - Fix random failure of tst-link-map-contiguous-ldso. - Fix a possible crash due to an assertion failure when converting inputs from the IBM139x character sets (CVE-2026-4046). Closes: #1132499. * d/p/amd64/local-revert-x86-64-add-GLIBC_ABI_DT_X86_64_PLT-version.diff: revert addition of the GLIBC_ABI_DT_X86_64_PLT symbol version used as ABI flag, as the dpkg-shlibdeps version in bookworm is not able to handle it (see #1122107). Checksums-Sha1: e26963df5276ac8dfa6451d16972eefac44fc5ec 14255 glibc_2.36-9+deb12u14_s390x-buildd.buildinfo 50b07b5d01047925869e0b44247d378c4171cab4 2308248 libc-bin-dbgsym_2.36-9+deb12u14_s390x.deb 5ca726f81d719eecfffab3704775dd5a37f76c16 544632 libc-bin_2.36-9+deb12u14_s390x.deb a879a69d5485453a39dcd481328596fbcc74e73d 28996 libc-dev-bin-dbgsym_2.36-9+deb12u14_s390x.deb 4207298af1f9c27e7d26766411190d63022a453d 47212 libc-dev-bin_2.36-9+deb12u14_s390x.deb 5e77e832ef18c829d265430ba0a746aadfb2ea5f 42964 libc-devtools-dbgsym_2.36-9+deb12u14_s390x.deb ffbbe810061a7e8a51d675a34759c19481916666 55268 libc-devtools_2.36-9+deb12u14_s390x.deb 8df608a89fc3039f1150e3e360cb95d26e6c30ee 7551572 libc6-dbg_2.36-9+deb12u14_s390x.deb 7fa3b2d176a230425a0e057afd8e6ef750e4d09a 14992 libc6-dev-dbgsym_2.36-9+deb12u14_s390x.deb e4052315fd910bfadb546c1cec332e0c4f8a3a8d 1048184 libc6-dev-s390_2.36-9+deb12u14_s390x.deb 2c9c4730dfd9024460c79fdf4d1ad8f83c3615ff 1406936 libc6-dev_2.36-9+deb12u14_s390x.deb c13d4a28f1123be43b95751990404555dddd9116 7865688 libc6-s390-dbgsym_2.36-9+deb12u14_s390x.deb d8e585f26a3837e0d810d94d45e5157ba01b16d6 2117856 libc6-s390_2.36-9+deb12u14_s390x.deb 88227db23835c547707cf6a14d414c998526347b 910032 libc6-udeb_2.36-9+deb12u14_s390x.udeb 7dd0b0eed2a6ceb1970f5a8da3228426ca27f4fd 2257116 libc6_2.36-9+deb12u14_s390x.deb ae663ab24567615371a73653269ad51fe1081428 11000096 locales-all_2.36-9+deb12u14_s390x.deb dd70feb6e830ac943100ec815db05f475a5dd506 269360 nscd-dbgsym_2.36-9+deb12u14_s390x.deb ddff31769c84b29880336ec225a7d5b7d5f958b1 99872 nscd_2.36-9+deb12u14_s390x.deb Checksums-Sha256: 61aeeb0f4287c5f05e9d1d2924a8c58320759c6e0b17f662291a7b2d2af74af2 14255 glibc_2.36-9+deb12u14_s390x-buildd.buildinfo 8a7c78f415c605fc00da6ddf4d52067ccb7717897bcdc7f017377270f0e70212 2308248 libc-bin-dbgsym_2.36-9+deb12u14_s390x.deb 6c663aeea7de0f5c6334ab1fc25f464de75cfd143608a1f47cad5416d06933e5 544632 libc-bin_2.36-9+deb12u14_s390x.deb 00d68676e9696ed5171606e2896d4fe8783a6012aaea03f397e4797613f9d5f2 28996 libc-dev-bin-dbgsym_2.36-9+deb12u14_s390x.deb 334659d9453ca6d0e57a4d1f1f36cb5ed0eb262f04aaefda22e4749637063ef4 47212 libc-dev-bin_2.36-9+deb12u14_s390x.deb 14c55cc57c1eb3e1178ae00dc9d6142a776d1f7eb1c966ab35627e2732bba988 42964 libc-devtools-dbgsym_2.36-9+deb12u14_s390x.deb d477838d3580dd8982b18a83a6de308a8326c96e16c51155eda8253d852fb91b 55268 libc-devtools_2.36-9+deb12u14_s390x.deb 52095758c662923686703f5ae7aa0eaec914f98695a464a15fb4c6fec59c8924 7551572 libc6-dbg_2.36-9+deb12u14_s390x.deb 2056e909644ef63b8853c03c14ca4aef4cba5acae1e79edcf62226db13468213 14992 libc6-dev-dbgsym_2.36-9+deb12u14_s390x.deb b2e387dc6d4972c4ac6f41bc8f7e02af4046e031ddf0213039a2b12ec1bd1999 1048184 libc6-dev-s390_2.36-9+deb12u14_s390x.deb 6f128e522bcd58281fcdb1c57952549ef818ebf22375ca2608126c01b3313607 1406936 libc6-dev_2.36-9+deb12u14_s390x.deb 856f96ddeffc979cc72bdd9da80c1a58dc8a3aa3cdc4523e72547fc34e46bea7 7865688 libc6-s390-dbgsym_2.36-9+deb12u14_s390x.deb 529792e15787f6528ce4d08c4fab6064a76a29eeb23889c3a3bfa8a3461e441c 2117856 libc6-s390_2.36-9+deb12u14_s390x.deb f42e89b2908fbbeb26a8f870f6cf2f8e5e5a24aa1216b10b58898f94ad502fde 910032 libc6-udeb_2.36-9+deb12u14_s390x.udeb bbca8c91bad7f799114fe865233af0018f58b903da11c1c58a7f2d2484103d45 2257116 libc6_2.36-9+deb12u14_s390x.deb bc3ab77b9611ed05e663f3efb848772adeed47b174c432dd350663f99a3d163a 11000096 locales-all_2.36-9+deb12u14_s390x.deb 2b3dedca5c895a4feca357f41cebb60b05cc1a99fc7c775207698238361cbd88 269360 nscd-dbgsym_2.36-9+deb12u14_s390x.deb 7cc656f9f3fc6f0e9df61fbba214a506cdf00806e74ea7f23097f0e2a67cfe80 99872 nscd_2.36-9+deb12u14_s390x.deb Files: f6f9376e62ec7efb547b3453f80ab38d 14255 libs required glibc_2.36-9+deb12u14_s390x-buildd.buildinfo 40a6cd1990156c56031a71c0acdba680 2308248 debug optional libc-bin-dbgsym_2.36-9+deb12u14_s390x.deb 937731ef89b035727a506cb6364da9cb 544632 libs required libc-bin_2.36-9+deb12u14_s390x.deb 73351da7e14b08fc6aa17b29fbbfb79d 28996 debug optional libc-dev-bin-dbgsym_2.36-9+deb12u14_s390x.deb 2fea47839737412b6865fc57951882eb 47212 libdevel optional libc-dev-bin_2.36-9+deb12u14_s390x.deb 51457353c4e925a98336fdf8785246e1 42964 debug optional libc-devtools-dbgsym_2.36-9+deb12u14_s390x.deb 05a92afc858f5e183083bbd2de1fe0de 55268 devel optional libc-devtools_2.36-9+deb12u14_s390x.deb 09bc450cbeaf91433d83eb83cbaf8e16 7551572 debug optional libc6-dbg_2.36-9+deb12u14_s390x.deb 051e3125ef241f489791eef29dc4c116 14992 debug optional libc6-dev-dbgsym_2.36-9+deb12u14_s390x.deb 01742c5e54a366c6d81cd50b366887d0 1048184 libdevel optional libc6-dev-s390_2.36-9+deb12u14_s390x.deb 00fea3564e2b83ef293e5f333dcc963a 1406936 libdevel optional libc6-dev_2.36-9+deb12u14_s390x.deb c58131175b0a7143621f28a3d902927a 7865688 debug optional libc6-s390-dbgsym_2.36-9+deb12u14_s390x.deb 676cd1bb574b04075eafebb1bf52c0c9 2117856 libs optional libc6-s390_2.36-9+deb12u14_s390x.deb 8145674c1610c61a016cd16b8ed398b8 910032 debian-installer optional libc6-udeb_2.36-9+deb12u14_s390x.udeb 0c6644bfe8289b4430d1acc4c0a35190 2257116 libs optional libc6_2.36-9+deb12u14_s390x.deb c8eaa338bda35eb4d587e03819a89f97 11000096 localization optional locales-all_2.36-9+deb12u14_s390x.deb 55a021940d38cb05a398aaddf32e9f97 269360 debug optional nscd-dbgsym_2.36-9+deb12u14_s390x.deb cc3851e6ed6050f92e54af8bf6b1c370 99872 admin optional nscd_2.36-9+deb12u14_s390x.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEgh4msZ+e2PZfd5KckaCrxAR3BY0FAmn3yN4ACgkQkaCrxAR3 BY088g//cYZE+VP+Ni78B3qcYskVyXtIzXinVk0MI8gh/2nIztndqul4UKxbKzd1 zAxB2NGeOgWOL/+mJKRNjLH1zs/I/owhP6kDHhLWUG9fMCcAFjXLd3+1HjrFY0HT 0mqpi7P5L9sRNdae780+Ldl8wA+1PnB8Q0nGVpj+ICZ9R5MkZL3KPxbyHmdLkanA 0QfWucZaCPuMcpP8lZwvx/8Mfvg3EFO+iNHC3r40vyUCR+EJSjQ8El01Yw/rn6jb m6vvQ0cDOyU4TFBJWWq5D7UMyYQRzA2uRrN/Qr0wi0c9XtWDMjm4ysrJP4LZVC1Q 6uuhSCBi/4P1reYVp4rbi2RtbaBsupQKDUteldN5pFYhxPliEU3MJJlUB9R2VouR cDiP+O3hi117nz5iPGDqOc3L+kvZBqrVH/sH0HiUC7xU0CVdHhDd6p8GEkIDrSoh qtLU1vqOfIPp7X7eLRYhw7ry1DiXiI2eZkbLUlj9rYFao8Z7iAUPXRTgn2ingacw n8ZZY7RrLk1mUYReDeKTllYPaUOXUESrdr3GQcspVTyKirm9Igi/CBFYcvJU1GNV meuMnKSkuOfS9Rk+WLp/5LuDIJso7XrxpY71avqOuFbsu29krNva75l/b39ze/fm CEhsGmxumDciUZGsWk0OZ4PEzIQI8qwti4YvfuG5CGLpNKRktGI= =OULv -----END PGP SIGNATURE-----