-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 10 Oct 2026 19:56:39 +0200
Source: glibc
Architecture: source
Version: 2.41-12+deb13u5
Distribution: trixie
Urgency: medium
Maintainer: GNU Libc Maintainers <debian-glibc@lists.debian.org>
Changed-By: Aurelien Jarno <aurel32@debian.org>
Closes: 1135230 1135231 1144252 1145880 1145891 1145987 1146721 1147395 1148168 1148727 1148728 1149647
Changes:
 glibc (2.41-12+deb13u5) trixie; urgency=medium
 .
   * debian/patches/git-updates.diff: update from upstream stable branch:
     - Cache cpuid results in ld.so for Intel CPUs.
     - Fix a buffer overread in ns_sprintrrf with corrupted RDATA field
       (CVE-2026-6238).  Closes: #1135231.
     - Fix an out-of-bounds write in ns_sprintrrf when printing TSIG records
       (CVE-2026-5435).  Closes: #1135230.
     - Fix stack overflow in wordexp tilde expansion (CVE-2026-6791).
     - Fix wordexp WRDE_APPEND to preserve state on non-NOSPACE errors
       (CVE-2026-6368).  Closes: #1144252.
     - Fix out-of-bounds stack array write in tdelete (CVE-2026-19542).
     - Fix a buffer overflow in strfmon right-justification padding
       (CVE-2026-19499).  Closes: #1145891.
     - Fix a hang when decoding SHIFT_JISX0213 to UTF-32 (CVE-2026-77117).
       Closes: #1145880.
     - Fix a hand when decoding EUC_JISX0213 to UTF-32 (CVE-2026-80489).
       Closes: #1145987.
     - Fix a heap buffer overlow in how fopen() parses the ,ccs= mode suffix
       (CVE-2026-18374).  Closes: #1146721.
     - Keep needed last transition to new type in TZif files generated by zic.
     - Fix an assertion failure in the DNS stub resolver with a long search
       domain (CVE-2026-8674).  Closes: #1148168.
     - Fix a stack overflow in nscd that can be triggered by large DNS responses
       from malicious servers (CVE-2026-89092).  Closes: #1147395.
     - Fix a TOCTOU race condition in the dynamic loader (CVE-2026-86805).
       Closes: #1148727.
     - Fix a stack overflow in the dynamic loader (CVE-2026-95818).  Closes:
       #1148728.
     - Fix one byte overread in POWER8 version of strncasecmp()
       (CVE-2026-97399).  Closes: #1149647
Checksums-Sha1:
 e1b49ff7000899a6f4ae20e6e5ff8e744407bb86 7576 glibc_2.41-12+deb13u5.dsc
 3ec1947518cd04a53d53f3464075227068017631 522972 glibc_2.41-12+deb13u5.debian.tar.xz
 ba2f2118eb97dac0cdd2b73bae75530516915f75 10013 glibc_2.41-12+deb13u5_source.buildinfo
Checksums-Sha256:
 eba607a62d96947f8b7dbef8606d2e0c87f115393105bcf0f5bc1cee882a1e63 7576 glibc_2.41-12+deb13u5.dsc
 9f2cc9eaafec40954c7120e593376d6c964f531d596005529409dbaffdba16a6 522972 glibc_2.41-12+deb13u5.debian.tar.xz
 7cb21520611a11a7b6e828007cda238ca4aee92b75009250f73adcdd9d9755cc 10013 glibc_2.41-12+deb13u5_source.buildinfo
Files:
 0016adbc58f8eb6f29ae5f56fd1f8aff 7576 libs required glibc_2.41-12+deb13u5.dsc
 adfb90be2dbd187ae7778afde832ce0f 522972 libs required glibc_2.41-12+deb13u5.debian.tar.xz
 7f4362919e587b2ed176a2ccf8072eb3 10013 libs required glibc_2.41-12+deb13u5_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=v6SG
-----END PGP SIGNATURE-----