#1141178 trixie-pu: package glibc/2.41-12+deb13u4

#1141178#5
Date:
2026-06-30 19:03:48 UTC
From:
To:
[ Reason ]
The upstream stable branch received fixes since the latest trixie point
release, and this update pulls them into the debian package.

This includes most notably 2 security fixes and one FTBFS when using a
kernel from trixie-backports.

[ Impact ]
In case the update isn't approved, systems will be left with a few
security issues, and the differences with upstream will increase.

[ Tests ]
The changes are covered by additional tests, with the exception of the
kernel header compatibility.

[ Risks ]
I believe the risks are low, as the changes do not touch the core part
of the library, and as all the changes are already in testing.

I also did manual test upgrading glibc with this version on an amd64
host. It rebooted fine and is still running fine.

[ Checklist ]
  [x] *all* changes are documented in the d/changelog
  [x] I reviewed all changes and I approve them
  [x] attach debdiff against the package in (old)stable
  [x] the issue is verified as fixed in unstable

[ Changes ]
The changes are summarized in the changelog, let me give you a few extra
details for some of them:

  - Fix build against linux 7.0 headers.  Closes: #1135405.

This fix an FTBFS with linux-libc-dev >= 7.0, which in trixie could
happen when users have installed a kernel from trixie-backports. Indeed
in that case apt ensure that all packages built from the same source are
at the same version.

  - Suppress iconv intermediate errors with //TRANSLIT.

This is the continuation of bug #1087670 for different cases.

#1141178#12
Date:
2026-06-30 21:38:47 UTC
From:
To:
Hi,

d-i ack needed for the udeb; please go ahead in the meantime.

Thanks

#1141178#19
Date:
2026-07-01 04:51:15 UTC
From:
To:
Hi,

Thanks for the prompt review. I have just uploaded it.

Regards
Aurelien

#1141178#24
Date:
2026-07-05 16:00:52 UTC
From:
To:
Hi,

Jonathan Wiltshire <jmw@debian.org> (2026-06-30):

No objections, thanks.


Cheers,

#1141178#31
Date:
2026-07-11 16:08:15 UTC
From:
To:
package release.debian.org
tags 1141178 = trixie pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian trixie.

Thanks for your contribution!

Upload details
==============

Package: glibc
Version: 2.41-12+deb13u4

Explanation: fix buffer overflow/underflow issues [CVE-2026-5928 CVE-2026-5450]; compatibility with linux 7.0 headers

#1141178#36
Date:
2026-07-11 16:08:15 UTC
From:
To:
package release.debian.org
tags 1141178 = trixie pending
thanks

Hi,

The upload referenced by this bug report has been flagged for acceptance into the proposed-updates queue for Debian trixie.

Thanks for your contribution!

Upload details
==============

Package: glibc
Version: 2.41-12+deb13u4

Explanation: fix buffer overflow/underflow issues [CVE-2026-5928 CVE-2026-5450]; compatibility with linux 7.0 headers