There are 7 open security issues in buster.
commit 2fbd60ae0f608e7e4725d2cbfc1611dbd8211fa3
Author: Samuel Thibault <samuel.thibault@ens-lyon.org>
Date: Sun Jan 11 01:05:08 2026 +0000
hurd: Fix sigreturn using xmm registers in the signal contention case.
* debian/patches/hurd-i386/git-sigreturn-xmm.diff
commit 66aedcc620fa80c88656f2d57a30c5fe6781578f
Author: Aurelien Jarno <aurelien@aurel32.net>
Date: Fri Jan 9 21:34:31 2026 +0100
Add changelog entries for previous commits
commit 58f5ca85a5bf9354300fd8c512c93ef9e8e7e620
Author: Helmut Grohne <helmut@subdivi.de>
Date: Sun Jan 4 17:24:14 2026 +0100
Don't build nscd in stage2
A stage2 glibc still Build-Depends on libaudit-dev, but that package is
only built after glibc stage2. The present cross bootstrap ignores this
dependency and somehow gets away with that.
Comparing a regular full build of glibc with one where the libaudit-dev
dependency is removed yields differences (observed with diffoscope) in
glibc-source (expected as debian/control is included) and nscd. Since
the stage2 does not need nscd, skipping it would help here.
Once nscd is skipped, libaudit-dev may still be used by the test suite.
Therefore, it is only dropped when combing nocheck with a stage profile.
commit d6fbaf75d7c8038c876ab802d193038f88cb0ef3
Author: Helmut Grohne <helmut@subdivi.de>
Date: Mon Jan 5 07:32:47 2026 +0100
Avoid g++ dependency in nocheck builds
A gcc stage1 build does not produce a C++ compiler. However, that's what
we use for building glibc stage2 (overriding its declared B-D).
Practically speaking, g++ is only required for running tests (thanks
Samuel). I verified this by comparing two builds modified to use gcc-14.
Such a full build exactly reproduces the artifacts of a nocheck build
where g++-14* is not installed.
commit d6c5f4aa14469a75639e6be4cebad7df6968b72c
Author: Aurelien Jarno <aurelien@aurel32.net>
Date: Fri Jan 9 19:23:27 2026 +0100
debian/rules.d/build.mk: do not write BUILD_CXX to configparms, it's unused.
Note however that we can't remove the BUILD_CXX definition without
coordination with cross-toolchain-base.
commit 4f7d11b257908935cb1683397b32abb06eafcac1
Author: Samuel Thibault <samuel.thibault@ens-lyon.org>
Date: Sun Jan 4 22:16:32 2026 +0100
debian/testsuite-xfail-debian.mk: Avoid running tst-writev on hurd-amd64
Among the 74 debian patches available in version 2.42-7 of the package, we noticed the following issues:
Automatic checks made by the Debian l10n team found some issues with the translations contained in this package. You should check the l10n status report for more information.
Issues can be things such as missing translations, problematic translated strings, outdated PO files, unknown languages, etc.
![[bug history graph]](https://qa.debian.org/data/bts/graphs/g/glibc.png){kind=link}