-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 27 May 2026 11:49:44 +0700
Source: glibc
Architecture: source
Version: 2.31-13+deb11u14
Distribution: bullseye-security
Urgency: medium
Maintainer: GNU Libc Maintainers <debian-glibc@lists.debian.org>
Changed-By: Arnaud Rebillout <arnaudr@debian.org>
Changes:
glibc (2.31-13+deb11u14) bullseye-security; urgency=medium
.
* Non-maintainer upload by the LTS Team.
* debian/patches/git-updates.diff: update from upstream stable branch
(4 commits total, including 2 CVE fixes):
- aarch64: MTE compatible strncmp
- nptl: Optimize trylock for high cache contention workloads
- memalign: reinstate alignment overflow check (CVE-2026-0861)
- posix: Reset wordexp_t fields with WRDE_REUSE (CVE-2025-15281)
* Backport patches to fix 3 CVEs:
- CVE-2025-8058: posix: Fix double-free after allocation failure in
regcomp
- CVE-2026-0915: resolv: Fix NSS DNS backend for getnetbyaddr
- CVE-2026-4046: iconvdata: Use pending character state in IBM1390,
IBM1399 character sets
Checksums-Sha1:
31391e93d1acb057954ec3e97b9e9107b0872f03 9444 glibc_2.31-13+deb11u14.dsc
026f14aa2836ff3a56b32d17e71f9ddb29a2b7ec 17254692 glibc_2.31.orig.tar.xz
d0038a157f9fd2ff9b2fc56ee6463e53ac55e06c 979876 glibc_2.31-13+deb11u14.debian.tar.xz
bee91d3cd53bfff34ce6782ac43bdf72deb9e83b 6065 glibc_2.31-13+deb11u14_source.buildinfo
Checksums-Sha256:
f3cb6255cbf60297fae7dfdb6f8c6f72b3692b89429fe2536f15fad238e10ec3 9444 glibc_2.31-13+deb11u14.dsc
3dc7704b6166839c37d7047626fd199f3d4c09aca0d90e48c51c31c967dce34e 17254692 glibc_2.31.orig.tar.xz
b173a5551de5c569738ee545beda2988769ed3f83c2b67def5cf862408bebe95 979876 glibc_2.31-13+deb11u14.debian.tar.xz
afe2bba14334c7777cfaa46748dbcf95006ec429e7275c9e71b38131baaf5339 6065 glibc_2.31-13+deb11u14_source.buildinfo
Files:
2e027cad49ea446ddaa7c730129cef59 9444 libs required glibc_2.31-13+deb11u14.dsc
b4cd4b8bb35536d6119ba5314662942c 17254692 libs required glibc_2.31.orig.tar.xz
1338eee4d6713cb76a0e35ed2cb48375 979876 libs required glibc_2.31-13+deb11u14.debian.tar.xz
6c751b716bb2208b899279b094930882 6065 libs required glibc_2.31-13+deb11u14_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=OdcM
-----END PGP SIGNATURE-----
