[Git][glibc-team/glibc][bullseye-security] 4 commits: debian/patches/git-updates.diff: update from upstream stable branch:

"Arnaud Rebillout (@arnaudr)" <[email protected]> Sun, 12 Jul 2026 17:45:39 +0000
Newsgroups	gmane.linux.debian.devel.glibc
Message-ID	<[email protected]>
----==_mimepart_6a53d2c38a084_5609ade4b41806518
Content-Type: text/plain;
 charset=UTF-8
Content-Transfer-Encoding: 7bit



Arnaud Rebillout pushed to branch bullseye-security at GNU Libc Maintainers / glibc


Commits:
01d6e1f0 by Arnaud Rebillout at 2026-05-27T11:48:08+07:00
debian/patches/git-updates.diff: update from upstream stable branch:

* debian/patches/git-updates.diff: update from upstream stable branch
  (4 commits):
  - aarch64: MTE compatible strncmp
  - nptl: Optimize trylock for high cache contention workloads
  - memalign: reinstate alignment overflow check (CVE-2026-0861)
  - posix: Reset wordexp_t fields with WRDE_REUSE (CVE-2025-15281)

- - - - -
683cad98 by Arnaud Rebillout at 2026-05-28T17:06:55+07:00
Backport patches for CVE-2025-8058 CVE-2026-0915 CVE-2026-4046

CVE-2025-8058
- backported from 2.32 branch
- comes with unit tests
- apply with trivial adjustments
  - replace `strerrorname_np` (since v2.32) with `strerror` in test
- changes from 2.31 -> 2.32:
  - `posix/regcomp.c`: no change

CVE-2026-0915
- backported from 2.32 branch
- comes with unit tests
- apply as is
- changes from 2.31 -> 2.32:
  - `resolv/nss_dns/dns-network.c`: 1 commit, addition of macro call
    `NSS_DECLARE_MODULE_FUNCTIONS` at the begining of files, no impact
    on the patch that we apply here

CVE-2026-4046
- backported from 2.36 branch
- comes with unit tests
- apply with trivial adjustments
- changes from 2.31 -> 2.36:
  - `iconvdata/ibm1364.c`: no change

- - - - -
576f2fea by Arnaud Rebillout at 2026-05-28T17:06:55+07:00
Finalize changelog

- - - - -
442ce43c by Arnaud Rebillout at 2026-06-08T09:26:22+07:00
Add debian bug references in last changelog entry

- - - - -


6 changed files:

- debian/changelog
- + debian/patches/any/local-CVE-2025-8058.diff
- + debian/patches/any/local-CVE-2026-0915.diff
- + debian/patches/any/local-CVE-2026-4046.diff
- debian/patches/git-updates.diff
- debian/patches/series


View it on GitLab: https://salsa.debian.org/glibc-team/glibc/-/compare/2109e7eee9e7a3f96fd4a248ab30e9891ef786ba...442ce43c60a8071ee771355da5efc92df53f2b57

-- 
View it on GitLab: https://salsa.debian.org/glibc-team/glibc/-/compare/2109e7eee9e7a3f96fd4a248ab30e9891ef786ba...442ce43c60a8071ee771355da5efc92df53f2b57
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help



----==_mimepart_6a53d2c38a084_5609ade4b41806518
Content-Type: text/html;
 charset=UTF-8
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www=
.w3.org/TR/REC-html40/loose.dtd">
<html lang=3D"en" style=3D'--code-editor-font: var(--default-mono-font, "=
GitLab Mono"), JetBrains Mono, Menlo, DejaVu Sans Mono, Liberation Mono, =
Consolas, Ubuntu Mono, Courier New, andale mono, lucida console, monospac=
e;'>
<head>
<meta content=3D"text/html; charset=3Dutf-8" http-equiv=3D"Content-Type">=

<title>
GitLab
</title>

<style data-premailer=3D"ignore" type=3D"text/css">
a { color: #1068bf; }
</style>


<style>img {
max-width: 100%; height: auto;
}
body {
font-size: .875rem;
}
body {
-webkit-text-shadow: hsla(0,0%,100%,.01) 0 0 1px;
}
body {
font-family: "GitLab Sans",-apple-system,BlinkMacSystemFont,"Segoe UI",Ro=
boto,"Noto Sans",Ubuntu,Cantarell,"Helvetica Neue",sans-serif,"Apple Colo=
r Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji"; font-size=
: inherit;
}
</style>
</head>
<body style=3D'font-size: inherit; -webkit-text-shadow: hsla(0,0%,100%,.0=
1) 0 0 1px; font-family: "GitLab Sans",-apple-system,BlinkMacSystemFont,"=
Segoe UI",Roboto,"Noto Sans",Ubuntu,Cantarell,"Helvetica Neue",sans-serif=
,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji=
";'>
<div class=3D"content">

<h3 style=3D"margin-top: 20px; margin-bottom: 10px;">
Arnaud Rebillout pushed to branch bullseye-security at <a href=3D"https:/=
/salsa.debian.org/glibc-team/glibc">GNU Libc Maintainers / glibc</a>
</h3>
<h4 style=3D"margin-top: 10px; margin-bottom: 10px;">
Commits:
</h4>
<ul>
<li>
<strong style=3D"font-weight: 600;"><a href=3D"https://salsa.debian.org/g=
libc-team/glibc/-/commit/01d6e1f0f47d725df69c322a432243d1f072a7fb">01d6e1=
f0</a></strong>
<div>
<span> by Arnaud Rebillout </span> <i> at 2026-05-27T11:48:08+07:00 </i>
</div>
<pre class=3D"commit-message" style=3D'white-space: pre-wrap; display: bl=
ock; font-size: 14px; color: #3a383f; position: relative; font-family: "G=
itLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation M=
ono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida co=
nsole", monospace; font-variant-ligatures: none; word-break: break-all; w=
ord-wrap: break-word; background-color: #fbfafd; border-radius: 2px; marg=
in: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>debian/patches/git-=
updates.diff: update from upstream stable branch:

* debian/patches/git-updates.diff: update from upstream stable branch
  (4 commits):
  - aarch64: MTE compatible strncmp
  - nptl: Optimize trylock for high cache contention workloads
  - memalign: reinstate alignment overflow check (CVE-2026-0861)
  - posix: Reset wordexp_t fields with WRDE_REUSE (CVE-2025-15281)
</pre>
</li>
<li>
<strong style=3D"font-weight: 600;"><a href=3D"https://salsa.debian.org/g=
libc-team/glibc/-/commit/683cad98963830e0c75dcdef65c1ef53bf9e9270">683cad=
98</a></strong>
<div>
<span> by Arnaud Rebillout </span> <i> at 2026-05-28T17:06:55+07:00 </i>
</div>
<pre class=3D"commit-message" style=3D'white-space: pre-wrap; display: bl=
ock; font-size: 14px; color: #3a383f; position: relative; font-family: "G=
itLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation M=
ono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida co=
nsole", monospace; font-variant-ligatures: none; word-break: break-all; w=
ord-wrap: break-word; background-color: #fbfafd; border-radius: 2px; marg=
in: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Backport patches fo=
r CVE-2025-8058 CVE-2026-0915 CVE-2026-4046

CVE-2025-8058
- backported from 2.32 branch
- comes with unit tests
- apply with trivial adjustments
  - replace `strerrorname_np` (since v2.32) with `strerror` in test
- changes from 2.31 -&gt; 2.32:
  - `posix/regcomp.c`: no change

CVE-2026-0915
- backported from 2.32 branch
- comes with unit tests
- apply as is
- changes from 2.31 -&gt; 2.32:
  - `resolv/nss_dns/dns-network.c`: 1 commit, addition of macro call
    `NSS_DECLARE_MODULE_FUNCTIONS` at the begining of files, no impact
    on the patch that we apply here

CVE-2026-4046
- backported from 2.36 branch
- comes with unit tests
- apply with trivial adjustments
- changes from 2.31 -&gt; 2.36:
  - `iconvdata/ibm1364.c`: no change
</pre>
</li>
<li>
<strong style=3D"font-weight: 600;"><a href=3D"https://salsa.debian.org/g=
libc-team/glibc/-/commit/576f2fea4e6a0046dbaf7df52374d0d12f662b6a">576f2f=
ea</a></strong>
<div>
<span> by Arnaud Rebillout </span> <i> at 2026-05-28T17:06:55+07:00 </i>
</div>
<pre class=3D"commit-message" style=3D'white-space: pre-wrap; display: bl=
ock; font-size: 14px; color: #3a383f; position: relative; font-family: "G=
itLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation M=
ono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida co=
nsole", monospace; font-variant-ligatures: none; word-break: break-all; w=
ord-wrap: break-word; background-color: #fbfafd; border-radius: 2px; marg=
in: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Finalize changelog
</pre>
</li>
<li>
<strong style=3D"font-weight: 600;"><a href=3D"https://salsa.debian.org/g=
libc-team/glibc/-/commit/442ce43c60a8071ee771355da5efc92df53f2b57">442ce4=
3c</a></strong>
<div>
<span> by Arnaud Rebillout </span> <i> at 2026-06-08T09:26:22+07:00 </i>
</div>
<pre class=3D"commit-message" style=3D'white-space: pre-wrap; display: bl=
ock; font-size: 14px; color: #3a383f; position: relative; font-family: "G=
itLab Mono", "JetBrains Mono", "Menlo", "DejaVu Sans Mono", "Liberation M=
ono", "Consolas", "Ubuntu Mono", "Courier New", "andale mono", "lucida co=
nsole", monospace; font-variant-ligatures: none; word-break: break-all; w=
ord-wrap: break-word; background-color: #fbfafd; border-radius: 2px; marg=
in: 0; padding: 8px 12px; border: 1px solid #dcdcde;'>Add debian bug refe=
rences in last changelog entry
</pre>
</li>
</ul>
<h4 style=3D"margin-top: 10px; margin-bottom: 10px;">
6 changed files:
</h4>
<ul>
<li class=3D"file-stats">
<a href=3D"https://salsa.debian.org/glibc-team/glibc/-/compare/2109e7eee9=
e7a3f96fd4a248ab30e9891ef786ba...442ce43c60a8071ee771355da5efc92df53f2b57=
#9c96da0e9f91d7d8937b69b524702c106258f0d1">
debian/changelog
</a>
</li>
<li class=3D"file-stats">
<a href=3D"https://salsa.debian.org/glibc-team/glibc/-/compare/2109e7eee9=
e7a3f96fd4a248ab30e9891ef786ba...442ce43c60a8071ee771355da5efc92df53f2b57=
#cf5fb0cb12b8fd9e7c4d85dfc3281beac673c09a">
<span class=3D"new-file">
+
debian/patches/any/local-CVE-2025-8058.diff
</span>
</a>
</li>
<li class=3D"file-stats">
<a href=3D"https://salsa.debian.org/glibc-team/glibc/-/compare/2109e7eee9=
e7a3f96fd4a248ab30e9891ef786ba...442ce43c60a8071ee771355da5efc92df53f2b57=
#087490a52b732769994a3b5c2e430dfa9b10d676">
<span class=3D"new-file">
+
debian/patches/any/local-CVE-2026-0915.diff
</span>
</a>
</li>
<li class=3D"file-stats">
<a href=3D"https://salsa.debian.org/glibc-team/glibc/-/compare/2109e7eee9=
e7a3f96fd4a248ab30e9891ef786ba...442ce43c60a8071ee771355da5efc92df53f2b57=
#fe9c6d2ae22d5b329a7225c2248fafc08ac12497">
<span class=3D"new-file">
+
debian/patches/any/local-CVE-2026-4046.diff
</span>
</a>
</li>
<li class=3D"file-stats">
<a href=3D"https://salsa.debian.org/glibc-team/glibc/-/compare/2109e7eee9=
e7a3f96fd4a248ab30e9891ef786ba...442ce43c60a8071ee771355da5efc92df53f2b57=
#8986bcca696e9550742f171cfe8fabfd25536db5">
debian/patches/git-updates.diff
</a>
</li>
<li class=3D"file-stats">
<a href=3D"https://salsa.debian.org/glibc-team/glibc/-/compare/2109e7eee9=
e7a3f96fd4a248ab30e9891ef786ba...442ce43c60a8071ee771355da5efc92df53f2b57=
#bc34014ab4b9a49dd7a27bdd8d352912607c3a96">
debian/patches/series
</a>
</li>
</ul>

</div>
<div class=3D"footer" style=3D"margin-top: 10px;">
<p style=3D"font-size: small; color: #626168;">
=E2=80=94
<br>
<a href=3D"https://salsa.debian.org/glibc-team/glibc/-/compare/2109e7eee9=
e7a3f96fd4a248ab30e9891ef786ba...442ce43c60a8071ee771355da5efc92df53f2b57=
">View it on GitLab</a>.
<br>
You're receiving this email because of your account on <a target=3D"_blan=
k" rel=3D"noopener noreferrer" href=3D"https://salsa.debian.org">salsa.de=
bian.org</a>. <a href=3D"https://salsa.debian.org/-/profile/notifications=
" target=3D"_blank" rel=3D"noopener noreferrer" class=3D"mng-notif-link">=
Manage all notifications</a> =C2=B7 <a href=3D"https://salsa.debian.org/h=
elp" target=3D"_blank" rel=3D"noopener noreferrer" class=3D"help-link">He=
lp</a>
<span style=3D"color: transparent; font-size: 0; display: none; overflow:=
 hidden; opacity: 0; width: 0; height: 0; max-width: 0; max-height: 0;">
Notification message regarding https://salsa.debian.org/glibc-team/glibc/=
-/compare/2109e7eee9e7a3f96fd4a248ab30e9891ef786ba...442ce43c60a8071ee771=
355da5efc92df53f2b57 at 1783878339
</span>



</p>
</div>
</body>
</html>

----==_mimepart_6a53d2c38a084_5609ade4b41806518--