Aurelien Jarno pushed to branch sid at GNU Libc Maintainers / glibc
Commits:
4fe56589 by Aurelien Jarno at 2026-10-03T11:26:44+02:00
debian/patches/git-updates.diff: update from upstream stable branch:
* debian/patches/git-updates.diff: update from upstream stable branch:
- Don't call clearenv() from __libc_setenv_freemem()
- Fixed a stack overflow in nscd that can be triggered by large DNS
responses from malicious servers (CVE-2026-89092). Closes: #1147395.
- Fix memory corruption on realloc with no mremap.
- Fix a TOCTOU race condition in the dynamic loader (CVE-2026-86805).
Closes: #1148727.
- Fix a stack overflow in the dynamic loader (CVE-2026-95818). Closes:
#1148728.
- Fix one byte overread in POWER8 version of strncasecmp()
(CVE-2026-97399). Closes: #1149647
- - - - -
4 changed files:
- debian/changelog
- debian/patches/git-updates.diff
- − debian/patches/hurd-i386/git-realloc-no-mremap.diff
- debian/patches/series
View it on GitLab:
https://salsa.debian.org/glibc-team/glibc/-/commit/4fe56589ebc08dc1540960fcde531a0937a08eda
--
View it on GitLab:
https://salsa.debian.org/glibc-team/glibc/-/commit/4fe56589ebc08dc1540960fcde531a0937a08eda
You're receiving this email because of your account on salsa.debian.org. Manage
all notifications: https://salsa.debian.org/-/profile/notifications | Help:
https://salsa.debian.org/help
