Control: tag -1 pending Hello,
Bug #1149647 in glibc reported by you has been fixed in the Git repository and is awaiting an upload. You can see the commit message below and you can check the diff of the fix at: https://salsa.debian.org/glibc-team/glibc/-/commit/4fe56589ebc08dc1540960fcde531a0937a08eda ------------------------------------------------------------------------ debian/patches/git-updates.diff: update from upstream stable branch: * debian/patches/git-updates.diff: update from upstream stable branch: - Don't call clearenv() from __libc_setenv_freemem() - Fixed a stack overflow in nscd that can be triggered by large DNS responses from malicious servers (CVE-2026-89092). Closes: #1147395. - Fix memory corruption on realloc with no mremap. - Fix a TOCTOU race condition in the dynamic loader (CVE-2026-86805). Closes: #1148727. - Fix a stack overflow in the dynamic loader (CVE-2026-95818). Closes: #1148728. - Fix one byte overread in POWER8 version of strncasecmp() (CVE-2026-97399). Closes: #1149647 ------------------------------------------------------------------------ (this message was generated automatically) -- Greetings https://bugs.debian.org/1149647
