-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Mon, 27 Apr 2026 22:09:22 +0200
Source: glibc
Binary: glibc-doc glibc-source libc-l10n locales
Architecture: all
Version: 2.41-12+deb13u3
Distribution: trixie
Urgency: medium
Maintainer: all Build Daemon (x86-grnet-02) <buildd_all-x86-grnet-02@buildd.debian.org>
Changed-By: Aurelien Jarno <aurel32@debian.org>
Description:
 glibc-doc  - GNU C Library: Documentation
 glibc-source - GNU C Library: sources
 libc-l10n  - GNU C Library: localization files
 locales    - GNU C Library: National Language (locale) data [support]
Closes: 1131435 1131887 1132499
Changes:
 glibc (2.41-12+deb13u3) trixie; urgency=medium
 .
   * debian/control.in/libc: ensure that libdpkg-perl is fixed wrt symbol
     versions used as ABI flag.
   * Stop reverting the following patches now that dpkg-shlibdeps in trixie
     supports symbol versions used as ABI flag (see #1122107):
     - local-revert-x86-64-add-GLIBC_ABI_DT_X86_64_PLT-version.diff
     - local-revert-x86-64-add-GLIBC_ABI_GNU2_TLS-version.diff
     - local-revert-i386-add-GLIBC_ABI_GNU2_TLS-version.diff
     - local-revert-i386-add-GLIBC_ABI_GNU_TLS-version.diff
   * debian/symbols.wildcards: define the GLIBC_ABI_DT_X86_64_PLT,
     GLIBC_ABI_GNU_TLS and GLIBC_ABI_GNU2_TLS symbol versions.
   * debian/patches/git-updates.diff: update from upstream stable branch:
     - Fix a null pointer dereference in the nss_database_check_reload_and_get
       function.
     - Fix tst-preadvwritev2 and tst-preadvwritev64v2 with recent kernels.
     - Fix invalid pointer arithmetic in ANSI_X3.110 iconv module
     - Fix a typo preventing new tst-wordexp-reuse-mem to run
     - Fix incorrect handling of DNS responses in gethostbyaddr and
       gethostbyaddr_r (CVE-2026-4437).  Closes: #1131435.
     - Fix invalid DNS hostnames returned by gethostbyaddr and
       gethostbyaddr_r (CVE-2026-4438).  Closes: #1131887.
     - Fix random failure of tst-link-map-contiguous-ldso.
     - Fix tst-rseq with Linux 7.0.
     - Fix a possible crash due to an assertion failure when converting
       inputs from the IBM139x character sets (CVE-2026-4046).  Closes:
       #1132499.
Checksums-Sha1:
 2e0b805f972f89e0f3335de4d4fd5492c925d8f5 3829156 glibc-doc_2.41-12+deb13u3_all.deb
 9ef47f7ad2374f75d8e2916fbdccfd5d49b4a594 20925964 glibc-source_2.41-12+deb13u3_all.deb
 b1d5d6aae2f0327f7a72b4e04cc1e3c9c521935c 10675 glibc_2.41-12+deb13u3_all-buildd.buildinfo
 77a2b4f4cd9718181c42e3e6e26639ede2532199 740468 libc-l10n_2.41-12+deb13u3_all.deb
 65ffb3351c54e795a3e066e749566b9841b3c95d 3925180 locales_2.41-12+deb13u3_all.deb
Checksums-Sha256:
 91192b3d5938a8be1f4329aab94a716ba586452c4066e2ac98042cf2a7c0b80f 3829156 glibc-doc_2.41-12+deb13u3_all.deb
 ac3901cd9ac9edeb746a1a025cb95eedbdcb2777413eccdf9d20506cac4b3545 20925964 glibc-source_2.41-12+deb13u3_all.deb
 936dafb2ced6491d69472b52e071c3dfcae1a07d00ebe423b2862be4fb11ee99 10675 glibc_2.41-12+deb13u3_all-buildd.buildinfo
 b7ec1f67aed680a6829d1c3391e259980b223ca3df277dfdc2b788b3c95af0bd 740468 libc-l10n_2.41-12+deb13u3_all.deb
 3d22cf6f84e762b3efbb0ffb1f24123e92ad83dd2e1268320dd246688e535a5f 3925180 locales_2.41-12+deb13u3_all.deb
Files:
 9ea70f7a72b2fd11cab6f367cad2042f 3829156 doc optional glibc-doc_2.41-12+deb13u3_all.deb
 84eb2e59e0583eb13f4def956ef23342 20925964 devel optional glibc-source_2.41-12+deb13u3_all.deb
 acf112d674892ff1ab517787325bfa88 10675 libs required glibc_2.41-12+deb13u3_all-buildd.buildinfo
 490aad87e9d41a6444a7c3b9b89fcbbf 740468 localization standard libc-l10n_2.41-12+deb13u3_all.deb
 90f7a296b288ae2b19abc20824cad0bb 3925180 localization standard locales_2.41-12+deb13u3_all.deb

-----BEGIN PGP SIGNATURE-----

iQIzBAEBCgAdFiEE81O8NL+3kjBAqEvLmgPNRvTf/zcFAmn3wsYACgkQmgPNRvTf
/ze6kRAAmpePmpxfbI6lhvhu3HCuyHoE6MNtnA7rT4zVhARCoDUpsJtogkxqxQnK
R0mQ8g8pSRvuXv7+JG4fNE2YZ01FHevvfB6/ob0gRHItWPbJdhwfdlrFprY4MQFB
gVLzYjhuZ1ASFcMf2KBXBY7NVNM53nhfmZgz9XYAUR0tuBNySJR5nzoouWjtypfV
Xdw/AQx5E7n/f6yirPGmOQBTM4Knz15FYPQ1KUkAcqGhEn/VBEBZGycPNqvxd9dq
/2CV1Rqczalz7y/ooNayK04TvbcPE38WOBfVyGa8FOUotO5WPVaiHDdgpYzRU2WZ
sBzHmPSfK6OTo+Al3nWXAO/ENHXHWTv2E2ehHYe5Mt/m8G/spisRXaghicWJJ6+i
LaMymmOJTG0sWJ0dyeKQWy6IAQWVxnl/ar20Zgq1kBVtmRrCYitoHIj6B4QgfYhi
Ll0JvqhOmJaeXSqN0r+XdCm+j6Od5B+aWMSy3EHTH382wfdUqfeorgQ9j+UbbCnb
+H4wzg6BM9ayBmVlWQfNaGhMfZttRlk9Zj3svCw8QM49EVgBiwpOxcTztMTbe+IE
vlRLPZXHrmB7zEHDU6I0T7bQ0zbf2fPidWv1AaK9KHN+xcm5giSvbcM9/6URwetU
n32mp0MFJoM9zavLA//BbzYiLJwC5SMfHbLMMgbfNLiPdvZWU2c=
=rxBE
-----END PGP SIGNATURE-----