Change logs for glibc source package in Bionic

  • glibc (2.27-3ubuntu1.6) bionic; urgency=medium
    
      [ Gunnar Hjalmarsson ]
      * d/local/usr_sbin/update-locale: improve sanity checks. (LP: #1892825)
    
      [ Aurelien Jarno ]
      * debian/debhelper.in/libc.preinst: drop the check for kernel release
        > 255 now that glibc and preinstall script are fixed. (LP: #1962225)
    
     -- Michael Hudson-Doyle <email address hidden>  Tue, 03 May 2022 22:19:39 +1200
  • glibc (2.27-3ubuntu1.5) bionic-security; urgency=medium
    
      * SECURITY UPDATE: infinite loop in iconv
        - debian/patches/any/CVE-2016-10228-pre1.patch: add xsetlocale function
          in support/Makefile, support/support.h, support/xsetlocale.c.
        - debian/patches/any/CVE-2016-10228-1.patch: rewrite iconv option
          parsing in iconv/Makefile, iconv/Versions, iconv/gconv_charset.c,
          iconv/gconv_charset.h, iconv/gconv_int.h, iconv/gconv_open.c,
          iconv/iconv_open.c, iconv/iconv_prog.c, iconv/tst-iconv-opt.c,
          iconv/tst-iconv_prog.sh, intl/dcigettext.c.
        - debian/patches/any/CVE-2016-10228-2.patch: handle translation output
          codesets with suffixes in iconv/Versions, iconv/gconv_charset.c,
          iconv/gconv_charset.h, iconv/gconv_int.h, iconv/iconv_open.c,
          iconv/iconv_prog.c, intl/dcigettext.c, intl/tst-codeset.c.
        - CVE-2016-10228
      * SECURITY UPDATE: buffer over-read in iconv
        - debian/patches/any/CVE-2019-25013.patch: fix buffer overrun in EUC-KR
          conversion module in iconvdata/bug-iconv13.c, iconvdata/euc-kr.c,
          iconvdata/ksc5601.h.
        - CVE-2019-25013
      * SECURITY UPDATE: another infinite loop in iconv
        - debian/patches/any/CVE-2020-27618.patch: fix issue in
          iconvdata/ibm1364.c.
        - CVE-2020-27618
      * SECURITY UPDATE: DoS via assert in iconv
        - debian/patches/any/CVE-2020-29562.patch: fix incorrect UCS4 inner
          loop bounds in iconv/Makefile, iconv/gconv_simple.c,
          iconv/tst-iconv8.c.
        - CVE-2020-29562
      * SECURITY UPDATE: signed comparison issue in ARMv7 memcpy
        - debian/patches/any/CVE-2020-6096-3.patch: fix memcpy and memmove for
          negative length  in sysdeps/arm/memcpy.S, sysdeps/arm/memmove.S.
        - debian/patches/any/CVE-2020-6096-4.patch: fix multiarch memcpy for
          negative length in sysdeps/arm/armv7/multiarch/memcpy_impl.S.
        - CVE-2020-6096
      * SECURITY UPDATE: assertion fail in iconv
        - debian/patches/any/CVE-2021-3326.patch: fix assertion failure in
          ISO-2022-JP-3 module in iconvdata/Makefile, iconvdata/bug-iconv14.c,
          iconvdata/iso-2022-jp-3.c.
        - CVE-2021-3326
      * SECURITY UPDATE: overflow in wordexp via crafted pattern
        - debian/patches/any/CVE-2021-35942.patch: handle overflow in
          positional parameter number in posix/wordexp-test.c, posix/wordexp.c.
        - CVE-2021-35942
      * SECURITY UPDATE: Off-by-one buffer overflow/underflow in getcwd()
        - debian/patches/any/CVE-2021-3999.patch: set errno to ERANGE for
          size == 1 in sysdeps/posix/getcwd.c.
        - CVE-2021-3999
      * SECURITY UPDATE: DoS via long svcunix_create path argument
        - debian/patches/any/CVE-2022-23218-pre1.patch: add the
          __sockaddr_un_set function in include/sys/un.h, socket/Makefile,
          socket/sockaddr_un_set.c, socket/tst-sockaddr_un_set.c.
        - debian/patches/any/CVE-2022-23218.patch: fix buffer overflow in
          sunrpc/svc_unix.c.
        - CVE-2022-23218
      * SECURITY UPDATE: DoS via long clnt_create hostname argument
        - debian/patches/any/CVE-2022-23219.patch: fix buffer overflow in
          sunrpc/clnt_gen.c.
        - CVE-2022-23219
      * debian/patches/any/fix_test-errno-linux.patch: Handle EINVAL from
        quotactl in newer kernels in
        sysdeps/unix/sysv/linux/test-errno-linux.c.
    
     -- Marc Deslauriers <email address hidden>  Mon, 24 Jan 2022 07:53:44 -0500
  • glibc (2.27-3ubuntu1.4) bionic; urgency=medium
    
      [ Balint Reczey ]
      * tests: XFAIL new tst-support_descriptors on armel, too.
        The armhf build builds for armel, too, thus this fixes the armhf autopkgtest.
        (LP: #1895920)
    
      [ Adam Conrad ]
      * debian/patches/arm/unsubmitted-ldso-abi-check.diff: Fix rtld segv in dl_open()
        introduced via merge with upstream at 2.28 and when backporting upstream's
        2.27/master changes. (LP: #1821677)
    
     -- Balint Reczey <email address hidden>  Mon, 07 Dec 2020 17:38:09 +0100
  • glibc (2.27-3ubuntu1.3) bionic; urgency=medium
    
      [ Balint Reczey ]
      * debian/gbp.conf: Add initial configuration
      * debian/control.in/main: Add Vcs-* pointing to Ubuntu packaging repository
      * arm64: Enable searching shared libraries in atomics/ on LSE HW
      * Ship arm64 variant with LSE support in libc6-lse (LP: #1885012)
      * Run tests of libc6-lse on HW supporting LSE
      * debian/patches/git-updates.diff: update from upstream stable branch
        - pthread_cond_broadcast: Fix waiters-after-spinning case
        - Fix SSe2-based memmove corrupting memory (CVE-2017-18269)
        - Fix strstr() performance regression on Haswell processors
        - Support Japanese new era "令和 (Reiwa)"
        - io: Remove copy_file_range emulation
        (LP: #1851263, #1858203, #1838327, #1797335, #1756209, #1853193)
      * XFAIL stdlib/tst-getrandom (LP: #1891403)
      * debian/testsuite-xfail-debian.mk: XFAIL new tst-support_descriptors
    
      [ Thadeu Lima de Souza Cascardo ]
      * tests: Make preadwritev2 invalid flags tests unsupported (LP: #1770480)
    
      [ Andreas Hasenack ]
      * branch-pthread_rwlock_trywrlock-hang-23844.patch:
        nptl: Fix pthread_rwlock_try*lock stalls (Bug 23844) (LP: #1864864)
    
     -- Balint Reczey <email address hidden>  Wed, 02 Sep 2020 11:18:37 +0200
  • glibc (2.27-3ubuntu1.2) bionic-security; urgency=medium
    
      * SECURITY UPDATE: integer overflow in realpath
        - debian/patches/any/CVE-2018-11236.patch: fix path length overflow in
          realpath in stdlib/Makefile, stdlib/canonicalize.c,
          stdlib/test-bz22786.c.
        - CVE-2018-11236
      * SECURITY UPDATE: buffer overflow in __mempcpy_avx512_no_vzeroupper
        - debian/patches/any/CVE-2018-11237-1.patch: don't write beyond
          destination in string/test-mempcpy.c,
          sysdeps/x86_64/multiarch/memmove-avx512-no-vzeroupper.S.
        - debian/patches/any/CVE-2018-11237-2.patch: add a test case in
          string/test-memcpy.c.
        - CVE-2018-11237
      * SECURITY UPDATE: if_nametoindex() does not close descriptor
        - debian/patches/any/CVE-2018-19591.patch: fix descriptor for overlong
          name in sysdeps/unix/sysv/linux/if_index.c.
        - CVE-2018-19591
      * SECURITY UPDATE: heap over-read via regular-expression match
        - debian/patches/any/CVE-2019-9169.patch: fix read overrun in
          posix/regexec.c.
        - CVE-2019-9169
      * SECURITY UPDATE: ASLR bypass
        - debian/patches/any/CVE-2019-19126.patch: check __libc_enable_secure
          before honoring LD_PREFER_MAP_32BIT_EXEC in
          sysdeps/unix/sysv/linux/x86_64/64/dl-librecon.h.
        - CVE-2019-19126
      * SECURITY UPDATE: out-of-bounds write on PowerPC
        - debian/patches/any/CVE-2020-1751.patch: fix array overflow in
          backtrace on PowerPC in debug/tst-backtrace5.c,
          sysdeps/powerpc/powerpc32/backtrace.c,
          sysdeps/powerpc/powerpc64/backtrace.c.
        - CVE-2020-1751
      * SECURITY UPDATE: use-after-free via tilde expansion
        - debian/patches/any/CVE-2020-1752.patch: fix use-after-free in glob
          when expanding ~user in posix/glob.c.
        - CVE-2020-1752
      * SECURITY UPDATE: stack overflow via 80-bit long double function
        - debian/patches/any/CVE-2020-10029-1.patch: avoid ldbl-96 stack
          corruption from range reduction of pseudo-zero in
          sysdeps/ieee754/ldbl-96/Makefile,
          sysdeps/ieee754/ldbl-96/e_rem_pio2l.c,
          sysdeps/ieee754/ldbl-96/test-sinl-pseudo.c.
        - debian/patches/any/CVE-2020-10029-2.patch: use stack protector only
          if available in sysdeps/ieee754/ldbl-96/Makefile.
        - CVE-2020-10029
    
     -- Marc Deslauriers <email address hidden>  Thu, 04 Jun 2020 13:25:26 -0400
  • glibc (2.27-3ubuntu1) bionic; urgency=medium
    
      * Merge with Debian, with packaging tweaks and master updated to 2018-03-29.
      * testsuite-xfail-debian.mk: Allow tst-backtrace{4,5} and tst-cancelx{20,21}
        to fail on the 31-bit build of glibc on s390 (see upstream bug in comment)
    
    glibc (2.27-3) unstable; urgency=medium
    
      [ Samuel Thibault ]
      * hurd-i386/tg-NOFOLLOW.diff: Rename to hurd-i386/git-NOFOLLOW.diff.
      * hurd-i386/tg-NOFOLLOW-DIRECTORY.diff: Rename to
        hurd-i386/git-NOFOLLOW-DIRECTORY.diff.
      * hurd-i386/tg-_dl_random.diff: Rename to hurd-i386/git-_dl_random.diff.
      * hurd-i386/tg-exec-static.diff: Rename to hurd-i386/git-exec-static.diff.
      * hurd-i386/tg-futimens.diff: Rename to hurd-i386/git-futimens.diff.
      * hurd-i386/tg-gai_misc.diff: Rename to hurd-i386/git-gai_misc.diff.
      * hurd-i386/tg-grantpt.diff: Rename to hurd-i386/git-grantpt.diff.
      * hurd-i386/tg-gscope.diff: Rename to hurd-i386/git-gscope.diff.
      * hurd-i386/tg-libpthread-gsync-mutex.diff: Rename to
        hurd-i386/git-libpthread-gsync-mutex.diff.
      * hurd-i386/tg-libpthread-gsync-spin.diff: Rename to
        hurd-i386/git-libpthread-gsync-spin.diff.
      * hurd-i386/tg-mlockall.diff: Rename to hurd-i386/git-mlockall.diff.
      * hurd-i386/tg-pagesize.diff: Rename to hurd-i386/git-pagesize.diff.
      * hurd-i386/tg-reboot-startup.diff: Rename to
        hurd-i386/git-reboot-startup.diff.
      * hurd-i386/tg-thread-linkspace.diff: Rename to
        hurd-i386/git-thread-linkspace.diff.
      * hurd-i386/tg-timer_routines.diff: Rename to
        hurd-i386/git-timer_routines.diff.
      * hurd-i386/tg-tls-threadvar.diff: Rename to
        hurd-i386/git-tls-threadvar.diff.
      * hurd-i386/tg-tls.diff: Rename to hurd-i386/git-tls.diff.
      * hurd-i386/tg-tls_thread_leak.diff: Rename to
        hurd-i386/git-tls_thread_leak.diff.
      * hurd-i386/tg2.25-tls.diff: Rename to hurd-i386/git2.25-tls.diff.
      * hurd-i386/submitted-hurd-abilist.diff: Rename to
        hurd-i386/git-hurd-abilist.diff.
      * hurd-i386/local-libpthread-stacksize.diff: Rename to
        hurd-i386/git-libpthread-stacksize.diff.
    
      [ Aurelien Jarno ]
      * debian/patches/localedata/locales-fr.diff: fix conversion from <Uxxxx>
        format to ascii during the latest rebase.  Closes: bug#894078.
      * debian/patches/git-updates.diff: update from upstream stable branch:
        - Fix a missing reorder-end keyword in et_EE locale.  Closes: #894395.
    
    glibc (2.27-2) unstable; urgency=medium
    
      [ Samuel Thibault ]
      * debian/patches/hurd-i386/git-UTIME.diff: New patch.
      * debian/control: Bump hurd build dep accordingly.
      * debian/libc0.3.symbols.hurd-i386: Update accordingly.
    
      [ Aurelien Jarno ]
      * debian/control.in/main: drop the branch from Vcs-Git.
      * debian/patches/any/local-bootstrap-headers.diff: update to install
        gnu/lib-names-$abi.h.  Closes: #892126.
      * debian/patches/git-updates.diff: update from upstream stable branch:
        - Fix FTBFS on powerpcspe.
        - debian/patches/sparc/submitted-sparc32-makecontext.diff: upstreamed.
    
      [ Helmut Grohne ]
      * debian/rules: drop DEB_STAGE and DEB_BUILD_PROFILE support.
      * debian/rules: disable tests for stage1.
      * debian/control.in/*: drop libc*-dev -> libc* dependencies in stage1.
    
    glibc (2.27-1) unstable; urgency=medium
    
      [ Aurelien Jarno ]
      * debian/sysdeps/*.mk: install gnu/lib-names-*.h for multilib builds.
      * debian/patches/alpha/submitted-makecontext.diff: new patch to fix
        infinite backtrace within a context created by makecontext.
      * debian/patches/sparc/submitted-sparc32-makecontext.diff: new patch
        to fix infinite backtrace within a context created by makecontext.
    
     -- Adam Conrad <email address hidden>  Mon, 16 Apr 2018 14:14:20 -0600
  • glibc (2.27-0ubuntu3) bionic; urgency=medium
    
      * Cherry pick from the Debian packaging:
        - debian/sysdeps/*.mk: install gnu/lib-names-*.h for multilib builds.
        - debian/patches/any/local-bootstrap-headers.diff: update to install
          gnu/lib-names-$abi.h.  Closes: #892126.
      * d/p/git-updates.diff: update from upstream stable branch (taken from 2.27-3).
    
     -- Matthias Klose <email address hidden>  Mon, 02 Apr 2018 23:07:51 +0200
  • glibc (2.27-0ubuntu2) bionic; urgency=medium
    
      * debian/patches/git-updates.diff: Update to 2.27 master at 2018-02-16.
      * Replace ubuntu/localedata/pt_BR-d_fmt.diff with new git-pt-fmt.diff.
      * Drop ubuntu/lddebug-scopes.diff, no longer required with gdb >= 7.12.
    
    glibc (2.27-0ubuntu1) bionic; urgency=medium
    
      * Merge with current 2.27 from Debian experimental git, remaining changes:
        - Enable libc6{,-dev}-armel on armhf and libc6{-dev}-armhf on armel.
        - Heavily mangle the way we do service restarting on major upgrades.
        - Build i386 variants as -march=i686, build amd64 with -O3, and build
          ppc64 variants (both 64-bit and 32-bit) with -O3 -fno-tree-vectorize.
        - Build generic i386 flavour with -mno-tls-direct-seg-refs for Xen.
        - Drop the libc6-xen flavour, as the above change covers Xen's needs.
        - Enable systemtap support, which is currently disabled in Debian.
        - Don't build libc-l10n, its contents get stripped for language-packs.
        - Drop libc-bin manpages Recommends to Suggests to keep it in standard.
        - Revert dropping the ldconfig wrapper, xenial still has a lot of
          packages that don't ship a trigger but instead call in postinst.
        - Use DH_COMPAT=8 for dh_strip to fix debug sections for valgrind.
        - Mangle locales package to support Ubuntu language packs seamlessly.
      * Drop debian/patches/ubuntu/localedata/bn-language.diff: Fixed upstream.
      * Allow tst-ttyname to fail on armhf/armel, as it currently fails in lxc.
    
    glibc (2.27-0experimental1) UNRELEASED; urgency=medium
    
      [ Samuel Thibault ]
      * debian/patches/hurd-i386/git-test-atexit-race-common.diff: New patch,
        fixes hurd-i386 build.
    
      [ Aurelien Jarno ]
      * debian/patches/any/local-ldconfig-ignore-ld.so.diff: add riscv64 program
        interpreters.
      * debian/libc6.symbols.riscv64: add riscv64 symbols file.
      * debian/patches/git-updates.diff: update from upstream stable branch.
      * debian/testsuite-xfail-debian.mk: Allow tst-malloc-usable-tunables to fail
        on alpha, arm64, mips64el, ppc64el, ppc64, s390x and sparc64. The failure
        is due to a kernel bug.
      * debian/control: Update Vcs-Git and Vcs-Browser fields following the move
        to Salsa.
      * debian/control.in/main: do not build-depends on g++-7-multilib for the
        nobiarch build profile.  Closes: #890131.
      * debian/rules.d/build.mk: use the just built iconvconfig if not
        cross-compiling.  Closes: #890132.
      * debian/patches/any/local-ldconfig.diff: fix a typo.
      * debian/patches/hurd-i386/submitted-bind_umask2.diff: fix a typo.
      * debian/patches/hurd-i386/tg-hurdsig-global-dispositions.diff: fix a typo.
      * debian/control.in/libc, debian/rules.d/debhelper.mk: drop the version
        from the linux-libc-dev dependency, as the <bits/syscall.h> file is not
        generated anymore from the installed kernel headers.
    
    glibc (2.27-0experimental0) experimental; urgency=medium
    
      [ Samuel Thibault ]
      * debian/patches/hurd-i386/git-abilist.diff: Add ABI list.
      * debian/patches/hurd-i386/cvs-libpthread.abilist.diff: Add libpthread ABI
      list.
      * debian/patches/hurd-i386/libpthread_version.diff: Add compatibility ABI
      list.
      * debian/patches/hurd-i386/local-exec_filename.diff: Add compatibility ABI
      list.
      * debian/patches/hurd-i386/local-hurdsig-global-dispositions-version.diff:
      Add additional ABI list.
      * debian/patches/hurd-i386/local-mach_print.diff: Add local ABI list.
      * debian/patches/hurd-i386/local-usr.diff: Fix local ABI list.
      * debian/patches/hurd-i386/tg-gsync-libc.diff: Update ABI list.
      * debian/patches/hurd-i386/tg-extern_inline.diff: Update ABI list.
      * debian/patches/hurd-i386/local-versions.diff: Remove, merged upstream.
      * debian/testsuite-xfail-debian.mk: Remove ABI list blacklist.
    
      [ Aurelien Jarno ]
      * New upstream version:
        - debian/control: regenerate.
        - debian/symbols.wildcards: update for 2.27.
        - debian/patches/hurd-i386/tg-tls-threadvar.diff: refreshed.
        - debian/patches/hurd-i386/tg-tlsdesc.sym.diff: upstreamed.
        - debian/patches/hurd-i386/tg-no-hp-timing.diff: upstreamed.
        - debian/patches/hurd-i386/local-hurdsig-global-dispositions-version.diff:
          refreshed.
        - debian/patches/hurd-i386/unsubmitted-gnumach.defs.diff: upstreamed.
        - debian/patches/hurd-i386/tg-sigstate_thread_reference.diff: upstreamed.
        - debian/patches/hurd-i386/tg-allocalim.diff: upstreamed.
        - debian/patches/hurd-i386/tg-extern_inline.diff: upstreamed.
        - debian/patches/hurd-i386/tg-gsync-libc.diff: upstreamed.
        - debian/patches/hurd-i386/tg2.26-sigsetops.h.diff: upstreamed.
        - debian/patches/hurd-i386/submitted-net.diff: refreshed.
        - debian/patches/hurd-i386/local-clock_gettime_MONOTONIC.diff: refreshed.
        - debian/patches/hurd-i386/tg-fcntl-internal.h.diff: upstreamed.
        - debian/patches/hurd-i386/tg-pagesize.diff: refreshed.
      * debian/rules: tweak GCC garbage collector on 32-bit MIPS builders.
      * debian/rules.d/tarball.mk: do a local bare clone before using git archive
        as it doesn't support https.
      * debian/control.in/main, debian/sysdeps/{amd64,i386,x32}.mk: enable support
        for building static PIE.
    
    glibc (2.26.9000+20180127.7e23a7dd-0experimental0) experimental; urgency=medium
    
      [ Samuel Thibault ]
      * debian/patches/hurd-i386/local-exec_filename.diff: Add glibc 2.26
        _hurd_exec_paths compatibility symbol for now.
      * debian/patches/hurd-i386/tg-gsync-libc.diff: Update.
    
      [ Aurelien Jarno ]
      * New upstream snapshot from 20180127:
        - Fix stack corruption by __pthread_register_cancel.  Closes: #887078,
          #887886.
        - debian/patches/hurd-i386/local-hurdsig-global-dispositions-version.diff:
          rebased.
        - debian/patches/hurd-i386/git-exec_filename.diff: upstreamed.
        - debian/patches/hurd-i386/tg-faccessat.diff: upstreamed.
        - debian/patches/hurd-i386/local-exec_filename.diff: rebased.
    
    glibc (2.26.9000+20180108.401311cf-0experimental0) experimental; urgency=medium
    
      [ Samuel Thibault ]
      * debian/sysdeps/hurd.mk: Do not add libpthread add-on since add-ons
        mechanism is no more.
      * debian/patches/hurd-i386/submitted-net.diff: rebased.
      * debian/patches/hurd-i386/unsubmitted-prof-eintr.diff: rebased.
      * debian/patches/hurd-i386/libpthread_build.diff: Add more Implies to fix
        build.  Drop deprecated internal_function.
      * debian/patches/hurd-i386/libpthread_includes.diff: Move headers for
        sysdeps to find them.
      * debian/patches/hurd-i386/tg-gsync-libc.diff: Update.
      * debian/testsuite-xfail-debian.mk: Update for hurd-i386.
    
      [ Aurelien Jarno ]
      * New upstream snapshot from 20180108.
      * debian/control.in/main: Update Vcs-Git to point to the 2.27 branch.
      * debian/testsuite-xfail-debian.mk: update XFAILs for the mips*el Loongson 3
        FPU bug with the new tests.
      * debian/testsuite-xfail-debian.mk: the arm kernel also pulled the new pkey
        syscalls without real support, XFAIL the corresponding test.
      * debian/testsuite-xfail-debian.mk: remove two math XFAIL on armel now that
        GCC has been fixed.
      * debian/testsuite-xfail-debian.mk: update XFAILs for the mips* Octeon 3 FPU
        bug with the new tests.
      * debian/testsuite-xfail-debian.mk: update XFAILs on alpha, add new math
        tests only causing wrong exception flags, remove tests that have been
        fixed in this release.
    
    glibc (2.26.9000+20180105.a6d0afb5-0experimental0) experimental; urgency=medium
    
      * New upstream snapshot from 20180105:
        - debian/patches/git-updates.diff: remove and disable.
        - debian/patches/locale/preprocessor-collate-uli-sucks.diff: drop,
          obsolete.
        - debian/patches/locale/preprocessor-collate.diff: drop, obsolete.
        - debian/patches/locale/LC_IDENTIFICATION-optional-fields.diff: rebased.
        - debian/patches/locale/LC_COLLATE-keywords-ordering.diff: drop, obsolete.
        - debian/patches/locale/local-all-no-archive.diff: rebased.
        - debian/patches/localedata/sort-UTF8-first.diff: rebased.
        - debian/patches/localedata/supported.diff: rebased.
        - debian/patches/localedata/new-valencian-locale.diff: upstreamed.
        - debian/patches/localedata/locale-ku_TR.diff: rebased.
        - debian/patches/localedata/tl_PH-yesexpr.diff: upstreamed.
        - debian/patches/localedata/fo_FO-date_fmt.diff: rebased.
        - debian/patches/localedata/locales_CH.diff: rebased.
        - debian/patches/localedata/locales-fr.diff: rebased.
        - debian/patches/localedata/locale-en_DK.diff: rebased.
        - debian/patches/localedata/locale-zh_TW.diff: rebased.
        - debian/patches/localedata/tailor-iso14651_t1.diff: rebased, partly
          upstreamed.
        - debian/patches/localedata/locale-hsb_DE.diff: upstreamed.
        - debian/patches/localedata/tailor-iso14651_t1-common.diff: drop,
          obsolete.
        - debian/patches/localedata/submitted-bz9725-locale-sv_SE.diff: rebased.
        - debian/patches/localedata/locale-C.diff: add a LC_MONETARY section.
        - debian/patches/localedata/submitted-en_AU-date_fmt.diff: rebased.
        - debian/patches/localedata/submitted-es_MX-decimal_point.diff: rebased.
        - debian/patches/localedata/submitted-it_IT-thousands_sep.diff: rebased.
        - debian/patches/alpha/local-string-functions.diff: rebased.
        - debian/patches/alpha/submitted-fminmax.diff: upstreamed.
        - debian/patches/alpha/submitted-rlimit.diff: upstreamed.
        - debian/patches/arm/git-arm64-memcmp.diff: upstreamed.
        - debian/patches/hppa/local-elf-make-cflags.diff: upstreamed.
        - debian/patches/hppa/submitted-gmon-start.diff: upstreamed.
        - debian/patches/hurd-i386/tg-context_functions.diff: rebased.
        - debian/patches/hurd-i386/tg-tls-threadvar.diff: rebased.
        - debian/patches/hurd-i386/tg-faccessat.diff: rebased.
        - debian/patches/hurd-i386/tg-gsync-libc.diff: rebased.
        - debian/patches/hurd-i386/submitted-shm_open_pthread.diff: upstreamed.
        - debian/patches/hurd-i386/cvs-libc_init_secure.diff: upstreamed.
        - debian/patches/hurd-i386/local-nocheck-installed-headers.diff: rebased.
        - debian/patches/hurd-i386/git-bits-sysmacros.h.diff: upstreamed.
        - debian/patches/hurd-i386/git-stack_chk_fail_local.diff: upstreamed.
        - debian/patches/hurd-i386/git-stack-protect-static.diff: upstreamed.
        - debian/patches/hurd-i386/git-sigsetops.h.diff: upstreamed.
        - debian/patches/hurd-i386/git-sigsetops-2.h.diff: upstreamed.
        - debian/patches/hurd-i386/git-sigsetops-3.h.diff: upstreamed.
        - debian/patches/hurd-i386/git-bits_socket.h.diff: upstreamed.
        - debian/patches/hurd-i386/git-preadwritev2.diff: upstreamed.
        - debian/patches/hurd-i386/git-preadwritev2-2.diff: upstreamed.
        - debian/patches/hurd-i386/git-preadwritev2-3.diff: upstreamed.
        - debian/patches/hurd-i386/git-rtld-access.diff: upstreamed.
        - debian/patches/hurd-i386/git-rtld-sbrk.diff: upstreamed.
        - debian/patches/hurd-i386/git-rtld-sbrk-2.diff: upstreamed.
        - debian/patches/hurd-i386/git-divdi.diff: upstreamed.
        - debian/patches/hurd-i386/git-feraiseexcept.diff: upstreamed.
        - debian/patches/hurd-i386/git-x86-tunables.diff: upstreamed.
        - debian/patches/hurd-i386/git-i386-implies-x86.diff: upstreamed.
        - debian/patches/hurd-i386/git-rtld-strtoul_internal.diff: upstreamed.
        - debian/patches/hurd-i386/git-clone.diff: upstreamed.
        - debian/patches/hurd-i386/git-gethostname.diff: upstreamed.
        - debian/patches/hurd-i386/git-tst-udp-timeout.diff: upstreamed.
        - debian/patches/hurd-i386/git-tst-udp-nonblocking.diff: upstreamed.
        - debian/patches/hurd-i386/git-hidden-def.diff: upstreamed.
        - debian/patches/hurd-i386/git-hidden-def-2.diff: upstreamed.
        - debian/patches/hurd-i386/git-dl-sysdep-check.diff: upstreamed.
        - debian/patches/hurd-i386/git-socket-limit.diff: upstreamed.
        - debian/patches/hurd-i386/git-clock_gettime_gettimeofday.diff: upstreamed.
        - debian/patches/hurd-i386/git-sigsuspend_not_cancel.diff: upstreamed.
        - debian/patches/hurd-i386/git-dirfd-linknamespace.diff: upstreamed.
        - debian/patches/hurd-i386/git-revoke-linknamespace.diff: upstreamed.
        - debian/patches/hurd-i386/git-seekdir-linknamespace.diff: upstreamed.
        - debian/patches/hurd-i386/git-ifaddrs-linknamespace.diff: upstreamed.
        - debian/patches/hurd-i386/git-NO_HIDDEN.diff: upstreamed.
        - debian/patches/hurd-i386/git-mount_namespace.diff: upstreamed.
        - debian/patches/mips/git-syscalls5-7-unbound-stack.diff: upstreamed.
        - debian/patches/any/local-ld-multiarch.diff: rebased.
        - debian/patches/any/local-disable-libnss-db.diff: rebased.
        - debian/patches/any/local-cudacc-float128.diff: rebased.
        - debian/patches/any/submitted-ldconfig-c-collation.diff: upstreamed.
        - debian/patches/any/git-any-ld.so-newline.diff: upstreamed.
        - debian/control.in/main: add a Build-Depends on bison.
        - debian/symbols.wildcards: update for 2.26.9000.
        - debian/rules: do not remove po/*.mo* on cleanup, they are not built in
          the source directory anymore.
        - debian/debhelper.in/glibc-doc.install: rename into glibc-docs.docs and
          update to the new changelogs location.
        - debian/changelog.upstream: update changelogs size.
        - debian/debhelper.in/libc-dev{,-alt}.{install,lintian-overrides}: remove
          libieee.a.
        - debian/testsuite-xfail-debian.mk: rename math XFAILs: float -> float32,
          double -> float64, ldouble -> float128.
      * debian/testsuite-xfail-debian.mk: mark misc/tst-pkey as XFAIL on alpha,
        arm64 and mips*, as there is a disagreement between kernel and glibc how
        to report missing protection key support when the syscalls have been
        wired.
    
    glibc (2.26-7) UNRELEASED; urgency=medium
    
      [ Samuel Thibault ]
      * debian/patches/hurd-i386/tg-grantpt.diff: Update patch.
    
    glibc (2.26-6) unstable; urgency=medium
    
      [ Aurelien Jarno ]
      * debian/patches/git-updates.diff: update from upstream stable branch:
        - Fix build with binutils 2.30 on arm64.  Closes: #888477.
    
    glibc (2.26-5) unstable; urgency=medium
    
      [ Samuel Thibault ]
      * debian/patches/any/local-cudacc-float128.diff: Disable _Float128 for icc
        too.
    
      [ Aurelien Jarno ]
      * debian/control.in/libc: set the priority of the libc{0.1,0.3,0.6} packages
        to optional following the changes on the ftp-master side (see bug#846982).
      * debian/control.in/libc: build-depends on gcc-7 (>= 7.2.0-20) on amd64, i386
        and x32 to avoid a missed optimization causing SSE registers to be pushed
        on the stack.  Closes: #886447.
      * debian/patches/git-updates.diff: update from upstream stable branch:
        - debian/patches/hurd-i386/git-mount_namespace.diff: upstreamed.
      * debian/testsuite-xfail-debian.mk: update with new tests.
      * debian/debhelper.in/libc.NEWS: note that the minimum required Linux kernel
        is now 3.2 to avoid aborts in the middle of an upgrade.  Closes: #888183.
    
    glibc (2.26-4) unstable; urgency=medium
    
      [ Aurelien Jarno ]
      * debian/testsuite-xfail-debian.mk: since we now also run the testsuite for
        the multilib flavours, simplify the mips* entries into mips*, mips be and
        mips le, instead of trying to keep all the flavours in sync. Remove
        XFAILs for tests that have been fixed.
      * debian/patches/git-updates.diff: update from upstream stable branch:
        - Fix a buffer underflow in getcwd() (CVE-2018-1000001).  Closes:
          #887001.
      * debian/control.in/*: add conflicts to only allow one to install one set
        of multilib packages simultaneously.  Closes: #702962, #743618, #784015,
        #820826, #870257.
    
    glibc (2.26-3) unstable; urgency=medium
    
      [ Aurelien Jarno ]
      * debian/testsuite-xfail-debian.mk: the Loongson 3 FPU bug also applies
        to mips64el.
      * debian/patches/git-updates.diff: update from upstream stable branch:
        - Fix memchr pointer overflow on ia64.  Closes: #886840.
    
      [ Samuel Thibault ]
      * debian/patches/hurd-i386/submitted-malloc-setstate.diff: Disable for now, it
        actually introduces issues.
      * debian/patches/hurd-i386/submitted-exec_filename.diff: Update submitted
        patch into committed git-exec_filename.diff.
      * debian/patches/hurd-i386/local-exec_filename.diff: New patch to keep
        compatibility with previous submission.
      * debian/patches/hurd-i386/tg-io_select_timeout.diff: Refresh.
      * debian/control: Bump hurd-dev build-dependency to get exec_paths RPC
        definitions.
      * debian/libc0.3.symbols.hurd-i386: Update accordingly.
    
    glibc (2.26-2) unstable; urgency=medium
    
      [ Samuel Thibault ]
      * patches/hurd-i386/unsubmitted-mount_namespace.diff: Rename to
        git-mount_namespace.diff.
    
      [ Helmut Grohne ]
      * debian/rules.d/build.mk: Remove a left-over closing brace, breaking
        stage 1.  Closes: #886301.
    
      [ Aurelien Jarno ]
      * debian/sysdeps/hppa.mk: increase TIMEOUTFACTOR to 600 on HPPA.
    
    glibc (2.26-1) unstable; urgency=medium
    
      [ Samuel Thibault ]
      * patches/hurd-i386/unsubmitted-mount_namespace.diff: New patch to fix build
        of support/support_enter_mount_namespace.c on hurd-i386.
    
      [ Aurelien Jarno ]
      * debian/control.in/main: this upload targets unstable, update Vcs-Git
        accordingly.
    
    glibc (2.26-0experimental3) experimental; urgency=medium
    
      [ Aurelien Jarno ]
      * debian/patches/any/local-ldso-disable-hwcap.diff: Include <fcntl.h>
        before <not-errno.h>.
      * debian/rules, debian/rules.d/build.mk: stop logging build/check messages
        to files, both sbuild and debuild are able to do that.
      * debian/rules, debian/rules.d/build.mk: allow TIMEOUTFACTOR to be override
        per architecture.
      * debian/sysdeps/hppa.mk: set TIMEOUTFACTOR to 100 on HPPA.
      * debian/testsuite-xfail-debian.mk: remove tst-create-detached from XFAIL
        on HPPA.
      * debian/patches/git-updates.diff: update from upstream stable branch:
        - Fix tst-realloc when heap space is exhausted.
      * debian/testsuite-xfail-debian.mk: convert alpha math XFAILs into granular
        XFAILs.
      * debian/testsuite-xfail-debian.mk: remove tst-realloc from XFAIL on
        sparc64.
    
    glibc (2.26-0experimental2) experimental; urgency=medium
    
      [ Aurelien Jarno ]
      * debian/testsuite-xfail-debian.mk: move double-lround XFAILs from mips64el
        to mipsel.
      * debian/patches/git-updates.diff: update from upstream stable branch:
        - Fix malloc returning pointer from tcache_get when it should returns
          NULL (CVE-2017-17426).  Closes: #883729.
        - Drop debian/patches/ia64/git-ia64-crash-thread-exit.diff (merged
          upstream).
      * debian/control.in/libc: add a Breaks: libperl5.26 (<< 5.26.1-3) to
        @libc@-dev to handle the xlocale.h removal.  Closes: #883392.
      * debian/control.in/main: point the Vcs-Git field to the glibc-2.26 branch
        to shut up tracker.debian.org about missing commits.
      * debian/testsuite-xfail-debian.mk: x32: remove a bunch of conform issues,
        add tst-platform-1, as this test has x86-64 specific expectations.
      * debian/sysdeps/sparc64.mk: don't force -mcpu=ultrasparc as that
        miscompiles at least pthread_barrier_wait.c. Mark tst-realloc as XFAIL, as
        there are way to trigger the issue on older libc and/or other
        architectures.
      * debian/patches/locale/fix-LC_COLLATE-rules.diff: drop, not useful anymore
        and has side effects.
      * debian/patches/localedata/local-hu_HU-sort.diff: removed, the hu_HU
        collation is now the same than upstream.
    
    glibc (2.26-0experimental1) experimental; urgency=medium
    
      [ Samuel Thibault ]
      * debian/testsuite-xfail-debian.mk: Update hurd-i386 xfail with new test.
    
      [ Aurelien Jarno ]
      * Bump build-dependency on binutils to >= 2.25, as required by glibc 2.26.
      * debian/testsuite-xfail-debian.mk: re-add double-lround XFAILs for
        mips64el.
      * debian/patches/git-updates.diff: update from upstream stable branch.
    
     -- Adam Conrad <email address hidden>  Fri, 23 Feb 2018 06:01:23 -0700
  • glibc (2.26-0ubuntu4) bionic; urgency=medium
    
      * Merge from glibc-2.26-6:
        - debian/patches/git-updates.diff: update from upstream stable branch:
          - Fix build with binutils 2.30 on arm64.  Closes: #888477.
        - debian/testsuite-xfail-debian.mk: Update with changes from Debian.
      * Revert the previous upload, all applied upstream.
      * Stop applying the local-libgcc-compat-{abilists,main,ports} patches.
      * Build using GCC 7.
    
     -- Matthias Klose <email address hidden>  Tue, 30 Jan 2018 16:58:16 +0100
  • glibc (2.26-0ubuntu3) bionic; urgency=medium
    
      * SECURITY UPDATE: Memory leak in dynamic loader (ld.so)
        - debian/patches/any/cvs-compute-correct-array-size-in-_dl_init_paths.diff:
          Compute correct array size in _dl_init_paths
        - CVE-2017-1000408
      * SECURITY UPDATE: Buffer overflow in dynamic loader (ld.so)
        - debian/patches/any/cvs-count-components-of-expanded-path-in-_dl_init_paths.diff:
          Count components of the expanded path in _dl_init_path
        - CVE-2017-1000409
      * SECURITY UPDATE: One-byte overflow in glob
        - debian/patches/any/cvs-fix-one-byte-glob-overflow.diff: Fix one-byte
          overflow in glob
        - CVE-2017-15670
      * SECURITY UPDATE: Buffer overflow in glob
        - debian/patches/any/cvs-fix-glob-buffer-overflow.diff: Fix buffer overflow
          during GLOB_TILDE unescaping
        - CVE-2017-15804
      * SECURITY UPDATE: Local privilege escalation via mishandled RPATH / RUNPATH
        - debian/patches/any/cvs-elf-check-for-empty-tokens.diff: elf: Check for
          empty tokens before dynamic string token expansion
        - CVE-2017-16997
      * SECURITY UPDATE: Integer overflow in malloc()
        - debian/patches/any/cvs-fix-integer-overflow-in-malloc.diff: Fix integer
          overflow in malloc when tcache is enabled
        - CVE-2017-17426
      * SECURITY UPDATE: Buffer underflow in realpath()
        - debian/patches/any/cvs-make-getcwd-fail-if-path-is-no-absolute.diff:
          Make getcwd(3) fail if it cannot obtain an absolute path
        - CVE-2018-1000001
    
     -- Chris Coulson <email address hidden>  Fri, 12 Jan 2018 20:42:20 +0000
  • glibc (2.26-0ubuntu2.1) artful-security; urgency=medium
    
      * SECURITY UPDATE: Memory leak in dynamic loader (ld.so)
        - debian/patches/any/cvs-compute-correct-array-size-in-_dl_init_paths.diff:
          Compute correct array size in _dl_init_paths
        - CVE-2017-1000408
      * SECURITY UPDATE: Buffer overflow in dynamic loader (ld.so)
        - debian/patches/any/cvs-count-components-of-expanded-path-in-_dl_init_paths.diff:
          Count components of the expanded path in _dl_init_path
        - CVE-2017-1000409
      * SECURITY UPDATE: One-byte overflow in glob
        - debian/patches/any/cvs-fix-one-byte-glob-overflow.diff: Fix one-byte
          overflow in glob
        - CVE-2017-15670
      * SECURITY UPDATE: Buffer overflow in glob
        - debian/patches/any/cvs-fix-glob-buffer-overflow.diff: Fix buffer overflow
          during GLOB_TILDE unescaping
        - CVE-2017-15804
      * SECURITY UPDATE: Local privilege escalation via mishandled RPATH / RUNPATH
        - debian/patches/any/cvs-elf-check-for-empty-tokens.diff: elf: Check for
          empty tokens before dynamic string token expansion
        - CVE-2017-16997
      * SECURITY UPDATE: Integer overflow in malloc()
        - debian/patches/any/cvs-fix-integer-overflow-in-malloc.diff: Fix integer
          overflow in malloc when tcache is enabled
        - CVE-2017-17426
      * SECURITY UPDATE: Buffer underflow in realpath()
        - debian/patches/any/cvs-make-getcwd-fail-if-path-is-no-absolute.diff:
          Make getcwd(3) fail if it cannot obtain an absolute path
        - CVE-2018-1000001
    
     -- Chris Coulson <email address hidden>  Fri, 12 Jan 2018 20:42:20 +0000
  • glibc (2.26-0ubuntu2) artful; urgency=medium
    
      * Cherry-pick some changes from Debian git for a few pending Ubuntu bugfixes:
        - Update to master and drop redundant submitted-tst-tlsopt-powerpc.diff.
        - debian/patches/any/local-cudacc-float128.diff: Local patch to prevent
          defining __HAVE_FLOAT128 on NVIDIA's CUDA compilers (LP: #1717257)
        - debian/patches/arm/git-arm64-memcmp.diff: Backport optimized memcmp
          for AArch64, improving performance from 25% to 500% (LP: #1720832)
        - debian/patches/amd64/git-x86_64-search.diff: Backport upstream commit
          to put x86_64 back in the search path, like in 2.25 (LP: #1718928)
        - debian/rules.d/debhelper.mk: Filter python hooks in stage1 (LP: #1715366)
    
     -- Adam Conrad <email address hidden>  Wed, 11 Oct 2017 14:21:40 -0600