-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 24 Mar 2024 13:07:31 +0100 Source: glibc Architecture: source Version: 2.36-9+deb12u5 Distribution: bookworm Urgency: medium Maintainer: GNU Libc Maintainers <debian-glibc@lists.debian.org> Changed-By: Aurelien Jarno <aurel32@debian.org> Changes: glibc (2.36-9+deb12u5) bookworm; urgency=medium . * debian/patches/git-updates.diff: update from upstream stable branch: - any/local-CVE-2023-4911.patch: upstreamed. - any/local-CVE-2023-6246.patch: upstreamed. - any/local-CVE-2023-6779.patch: upstreamed. - any/local-CVE-2023-6780.patch: upstreamed. - Revert fix to always call destructors in reverse constructor order due to unforeseen application compatibility issues. - Fix a DTV corruption due to a reuse of a TLS module ID following dlclose with unused TLS. - Fix the DTV field load on x32. - Fix the TCB field load on x32. Checksums-Sha1: 00abbbd322a3b21ebde83f9eb67655f1c3dead72 9761 glibc_2.36-9+deb12u5.dsc b8dad6893acb4dd0f992fcdbfd67ac9b5e8d4715 857156 glibc_2.36-9+deb12u5.debian.tar.xz 21288fac08a1a276802cdd0389e4e0e4594261f9 9699 glibc_2.36-9+deb12u5_source.buildinfo Checksums-Sha256: dbfc88d42db9e5693b454bc6986f3e8481647deac0cf78e8186b29b57d703ad8 9761 glibc_2.36-9+deb12u5.dsc 3f2e1be07abe92c376f3982243a44ddc5c95100dee704cf2f57784989f45df80 857156 glibc_2.36-9+deb12u5.debian.tar.xz c1b0ce8943f84a145e0309f9ac19d3050e1dd9e28f43f244447f41a25b5c3573 9699 glibc_2.36-9+deb12u5_source.buildinfo Files: 088342a6439e9a389a5b79ba2a99c986 9761 libs required glibc_2.36-9+deb12u5.dsc aa28dd1523b48107f58467f80642fc6b 857156 libs required glibc_2.36-9+deb12u5.debian.tar.xz f474100ddbdda8de5e9e763c310d88fc 9699 libs required glibc_2.36-9+deb12u5_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEUryGlb40+QrX1Ay4E4jA+JnoM2sFAmYAGIQACgkQE4jA+Jno M2tuPA//SzMYdgPaIMCThaqX9HlWliphb97ryKLAizcCqdpzdQJylTznQ2GjvAT6 6e+hSlzxoSuby9/9znj8SqVKmdcJK4qHrbbr1a6xghfJ39VPIE/NLHuVye8qeSUG +ykug04pq99pbba+QrzY2eWM0NXO735TT6vwG4t4dHMaowLcqazIUxVtCX/nnTQg ZhcMQQcTjVvvWMcJ8Sc96aj5lhDY7ReFmDMlmSphsFBQ1eQ6FSwLN1WaCa/OerfQ AJKuZO2MTbbzEplTJzXxUbhSKqmtLg8PITJbBFEaJbVSZsjrEqqu/aBI1Jkb/+qs FNWxaNNV2X/fNDbzaiR+jkOOWvD0DRGejKrag9edZwh38Wqdm7gXVjU8GTIHcy0c WnyziBv3IS3acpuyWv6HzZqQk+ZDfy1exVAHUvL9/hsCk4Zo4WbzdMuninWMIf8S h3Cm/UfgX//spDsnpMGf1tnc0qSxsiyqQ0Xs85Y4Tc5bXE8YdSc9Dii0KVZmS4FE mKqQIPZBLW7qYdYoPfeZgJgKxs5z/qRk6GzTGGp7bTpH8+jj3U5zMEl+wWClxHtr ajfR3PAu8zj6Hk6Y1p1/Xq1dUMq4D0uhaPl/MnTsHtBPX7A65H2pc83qH5pPR89R AhdVJefv/OysH3KkA9KVUahjhOCndL/jvxd/nFc2Nc0CwCv9PQc= =NwmX -----END PGP SIGNATURE-----