Arnaud Rebillout pushed to branch bullseye-security at GNU Libc Maintainers /
glibc
Commits:
01d6e1f0 by Arnaud Rebillout at 2026-05-27T11:48:08+07:00
debian/patches/git-updates.diff: update from upstream stable branch:
* debian/patches/git-updates.diff: update from upstream stable branch
(4 commits):
- aarch64: MTE compatible strncmp
- nptl: Optimize trylock for high cache contention workloads
- memalign: reinstate alignment overflow check (CVE-2026-0861)
- posix: Reset wordexp_t fields with WRDE_REUSE (CVE-2025-15281)
- - - - -
683cad98 by Arnaud Rebillout at 2026-05-28T17:06:55+07:00
Backport patches for CVE-2025-8058 CVE-2026-0915 CVE-2026-4046
CVE-2025-8058
- backported from 2.32 branch
- comes with unit tests
- apply with trivial adjustments
- replace `strerrorname_np` (since v2.32) with `strerror` in test
- changes from 2.31 -> 2.32:
- `posix/regcomp.c`: no change
CVE-2026-0915
- backported from 2.32 branch
- comes with unit tests
- apply as is
- changes from 2.31 -> 2.32:
- `resolv/nss_dns/dns-network.c`: 1 commit, addition of macro call
`NSS_DECLARE_MODULE_FUNCTIONS` at the begining of files, no impact
on the patch that we apply here
CVE-2026-4046
- backported from 2.36 branch
- comes with unit tests
- apply with trivial adjustments
- changes from 2.31 -> 2.36:
- `iconvdata/ibm1364.c`: no change
- - - - -
576f2fea by Arnaud Rebillout at 2026-05-28T17:06:55+07:00
Finalize changelog
- - - - -
442ce43c by Arnaud Rebillout at 2026-06-08T09:26:22+07:00
Add debian bug references in last changelog entry
- - - - -
6 changed files:
- debian/changelog
- + debian/patches/any/local-CVE-2025-8058.diff
- + debian/patches/any/local-CVE-2026-0915.diff
- + debian/patches/any/local-CVE-2026-4046.diff
- debian/patches/git-updates.diff
- debian/patches/series
View it on GitLab:
https://salsa.debian.org/glibc-team/glibc/-/compare/2109e7eee9e7a3f96fd4a248ab30e9891ef786ba...442ce43c60a8071ee771355da5efc92df53f2b57
--
View it on GitLab:
https://salsa.debian.org/glibc-team/glibc/-/compare/2109e7eee9e7a3f96fd4a248ab30e9891ef786ba...442ce43c60a8071ee771355da5efc92df53f2b57
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
