Change logs for glibc source package in Xenial

  • glibc (2.23-0ubuntu11.3) xenial-security; urgency=medium
    
      * SECURITY UPDATE: DoS via regular expression
        - debian/patches/CVE-2009-5155.patch: diagnose invalid back-reference
          in posix/regcomp.c, remove invalid test in posix/PCRE.tests.
        - CVE-2009-5155
      * SECURITY UPDATE: signed comparison vulnerability exists in ARM memcpy
        - debian/patches/CVE-2020-6096-1.patch: fix multiarch memcpy for
          negative length in sysdeps/arm/armv7/multiarch/memcpy_impl.S.
        - debian/patches/CVE-2020-6096-2.patch: fix memcpy and memmove for
          negative length in sysdeps/arm/memcpy.S, sysdeps/arm/memmove.S.
        - CVE-2020-6096
    
     -- Marc Deslauriers <email address hidden>  Tue, 20 Apr 2021 14:52:26 -0400
  • glibc (2.23-0ubuntu11.2) xenial-security; urgency=medium
    
      * SECURITY UPDATE: Use-after-free in clntudp_call
        - debian/patches/CVE-2017-12133.patch: avoid use-after-free read access
          in sunrpc/Makefile, sunrpc/clnt_udp.c, sunrpc/tst-udp-error.c.
        - CVE-2017-12133
      * SECURITY UPDATE: overlap in SSE2-optimized memmove implementation
        - debian/patches/CVE-2017-18269.patch: fixed branch conditions in
          string/test-memmove.c,
          sysdeps/i386/i686/multiarch/memcpy-sse2-unaligned.S.
        - CVE-2017-18269
      * SECURITY UPDATE: integer overflow in posix_memalign
        - debian/patches/CVE-2018-6485.patch: fix integer overflows in internal
          memalign and malloc in malloc/Makefile, malloc/malloc.c,
          malloc/tst-malloc-too-large.c.
        - CVE-2018-6485
      * SECURITY UPDATE: integer overflow in realpath
        - debian/patches/any/CVE-2018-11236.patch: fix path length overflow in
          realpath in stdlib/Makefile, stdlib/canonicalize.c,
          stdlib/test-bz22786.c.
        - CVE-2018-11236
      * SECURITY UPDATE: buffer overflow in __mempcpy_avx512_no_vzeroupper
        - debian/patches/any/CVE-2018-11237.patch: don't write beyond
          destination in string/test-mempcpy.c,
          sysdeps/x86_64/multiarch/memcpy-avx512-no-vzeroupper.S.
        - CVE-2018-11237
      * SECURITY UPDATE: heap over-read via regular-expression match
        - debian/patches/any/CVE-2019-9169.patch: fix read overrun in
          posix/regexec.c.
        - CVE-2019-9169
      * SECURITY UPDATE: ASLR bypass
        - debian/patches/any/CVE-2019-19126.patch: check __libc_enable_secure
          before honoring LD_PREFER_MAP_32BIT_EXEC in
          sysdeps/unix/sysv/linux/x86_64/64/dl-librecon.h.
        - CVE-2019-19126
      * SECURITY UPDATE: out-of-bounds write on PowerPC
        - debian/patches/any/CVE-2020-1751.patch: fix array overflow in
          backtrace on PowerPC in debug/tst-backtrace5.c,
          sysdeps/powerpc/powerpc32/backtrace.c,
          sysdeps/powerpc/powerpc64/backtrace.c.
        - CVE-2020-1751
      * SECURITY UPDATE: use-after-free via tilde expansion
        - debian/patches/any/CVE-2020-1752.patch: fix use-after-free in glob
          when expanding ~user in posix/glob.c.
        - CVE-2020-1752
      * SECURITY UPDATE: stack overflow via 80-bit long double function
        - debian/patches/any/CVE-2020-10029.patch: avoid ldbl-96 stack
          corruption from range reduction of pseudo-zero in
          sysdeps/ieee754/ldbl-96/e_rem_pio2l.c,
        - CVE-2020-10029
    
     -- Marc Deslauriers <email address hidden>  Thu, 04 Jun 2020 13:56:35 -0400
  • glibc (2.23-0ubuntu11) xenial; urgency=medium
    
      * debian/patches/ubuntu/xsave-part1.diff and
        debian/patches/ubuntu/xsave-part2.diff: Fix a serious performance
        regression when mixing SSE and AVX code on certain processors.
        The patches are from the upstream 2.23 stable branch. (LP: #1663280)
    
     -- Daniel Axtens <email address hidden>  Thu, 04 Oct 2018 10:29:55 +1000
  • glibc (2.23-0ubuntu10) xenial-security; urgency=medium
    
      * SECURITY UPDATE: Memory leak in dynamic loader (ld.so)
        - debian/patches/any/cvs-compute-correct-array-size-in-_dl_init_paths.diff:
          Compute correct array size in _dl_init_paths
        - CVE-2017-1000408
      * SECURITY UPDATE: Buffer overflow in dynamic loader (ld.so)
        - debian/patches/any/cvs-count-components-of-expanded-path-in-_dl_init_paths.diff:
          Count components of the expanded path in _dl_init_path
        - CVE-2017-1000409
      * SECURITY UPDATE: One-byte overflow in glob
        - debian/patches/any/cvs-fix-one-byte-glob-overflow.diff: Fix one-byte
          overflow in glob
        - CVE-2017-15670
      * SECURITY UPDATE: Buffer overflow in glob
        - debian/patches/any/cvs-fix-glob-buffer-overflow.diff: Fix buffer overflow
          during GLOB_TILDE unescaping
        - CVE-2017-15804
      * SECURITY UPDATE: Local privilege escalation via mishandled RPATH / RUNPATH
        - debian/patches/any/cvs-elf-check-for-empty-tokens.diff: elf: Check for
          empty tokens before dynamic string token expansion
        - CVE-2017-16997
      * SECURITY UPDATE: Buffer underflow in realpath()
        - debian/patches/any/cvs-make-getcwd-fail-if-path-is-no-absolute.diff:
          Make getcwd(3) fail if it cannot obtain an absolute path
        - CVE-2018-1000001
    
     -- Chris Coulson <email address hidden>  Sun, 14 Jan 2018 20:06:26 +0000
  • glibc (2.23-0ubuntu9) xenial-security; urgency=medium
    
      * SECURITY UPDATE: LD_LIBRARY_PATH stack corruption
        - debian/patches/any/CVE-2017-1000366.patch: Completely ignore
          LD_LIBRARY_PATH for AT_SECURE=1 programs
        - CVE-2017-1000366
      * SECURITY UPDATE: LD_PRELOAD stack corruption
        - debian/patches/any/upstream-harden-rtld-Reject-overly-long-LD_PRELOAD.patch:
          Reject overly long names or names containing directories in
          LD_PRELOAD for AT_SECURE=1 programs.
      * debian/patches/any/cvs-harden-glibc-malloc-metadata.patch: add
        additional consistency check for 1-byte overflows
      * debian/patches/any/cvs-harden-ignore-LD_HWCAP_MASK.patch: ignore
        LD_HWCAP_MASK for AT_SECURE=1 programs
    
     -- Steve Beattie <email address hidden>  Fri, 16 Jun 2017 12:04:15 -0700
  • glibc (2.23-0ubuntu7) xenial-security; urgency=medium
    
      * REGRESSION UPDATE: Previous update introduced ABI breakage in
        internal glibc query ABI
        - Revert patches/any/CVE-2015-5180-regression.diff
          (LP: #1674532)
    
     -- Steve Beattie <email address hidden>  Tue, 21 Mar 2017 08:54:23 -0700
  • glibc (2.23-0ubuntu6) xenial-security; urgency=medium
    
      * SECURITY UPDATE: DNS resolver NULL pointer dereference with
        crafted record type
        - patches/any/CVE-2015-5180.diff: use out of band signaling for
          internal queries
        - CVE-2015-5180
      * Rebuild to get the following fixes into the xenial-security pocket:
        - SECURITY UPDATE: stack-based buffer overflow in the glob
          implementation
          + patches/git-updates.diff: Simplify the interface for the
            GLOB_ALTDIRFUNC callback gl_readdir
          + CVE-2016-1234
        - SECURITY UPDATE: getaddrinfo: stack overflow in hostent
          conversion
          + patches/git-updates.diff: Use a heap allocation instead
          + CVE-2016-3706:
        - SECURITY UPDATE: stack exhaustion in clntudp_call
          + patches/git-updates.diff: Use malloc/free for the error
            payload.
          + CVE-2016-4429
        - SECURITY UPDATE: memory exhaustion DoS in libresolv
          + patches/git-updates.diff: Simplify handling of nameserver
            configuration in resolver
          + CVE-2016-5417
        - SECURITY UPDATE: ARM32 backtrace infinite loop (DoS)
          + patches/git-updates.diff: mark __startcontext as .cantunwind
          + CVE-2016-6323
    
     -- Steve Beattie <email address hidden>  Mon, 06 Mar 2017 16:47:32 -0800
  • glibc (2.23-0ubuntu5) xenial; urgency=medium
    
      * Disable lock-elision on all targets to avoid regressions (LP: #1642390)
    
     -- Adam Conrad <email address hidden>  Wed, 16 Nov 2016 13:53:50 -0700
  • glibc (2.23-0ubuntu4) xenial; urgency=medium
    
      * debian/rules.d/tarball.mk: Apply --no-renames to make the diff readable.
      * debian/patches/git-updates.diff: Update from release/2.23/master branch:
        - Include fix for potential makecontext() hang on ARMv7 (CVE-2016-6323)
        - Include fix for SEGV in sock_eq with nss_hesiod module (LP: #1571456)
        - Include malloc fixes, addressing multithread deadlocks (LP: #1630302)
        - debian/patches/hurd-i386/cvs-libpthread.so.diff: Dropped, upstreamed.
        - debian/patches/any/submitted-argp-attribute.diff: Dropped, upstreamed.
        - debian/patches/hurd-i386/tg-hurdsig-fixes-2.diff: Rebased to upstream.
      * debian/patches/ubuntu/local-altlocaledir.diff: Updated to latest version
        from Martin that limits scope to LC_MESSAGES, fixing segv (LP: #1577460)
      * debian/patches/any/cvs-cos-precision.diff: Fix cos() bugs (LP: #1614966)
      * debian/testsuite-xfail-debian.mk: Allow nptl/tst-signal6 to fail on ARM.
    
     -- Adam Conrad <email address hidden>  Fri, 14 Oct 2016 00:00:34 -0600
  • glibc (2.23-0ubuntu3) xenial; urgency=medium
    
      * Merge with 2.23 from experimental, bringing in upstream updates:
        - Save/restore fprs/vrs while resolving symbols (LP: #1564918)
        - Fix _nss_dns_getnetbyname_r() stack overflow (CVE-2016-3075)
        - Merge libnss-dns-udeb and libnss-files-udeb into libc6-udeb.
      * Tidy up locale-gen, thanks to Gunnar Hjalmarsson (LP: #1560577):
        - Fix thinko that broke handling of multiple locale arguments.
        - Recognize UTF-8 locales without charset suffix in SUPPORTED.
        - Fix bug that led to the unsupported message not being shown.
      * Show reboot-required notification for all updates (LP: #1546457)
    
     -- Adam Conrad <email address hidden>  Thu, 14 Apr 2016 10:26:16 -0600
  • glibc (2.23-0ubuntu2) xenial; urgency=medium
    
      * Merge with 2.23 from experimental, bringing in upstream updates.
      * Revert dropping the ldconfig wrapper, xenial still has a lot of
        packages that don't ship a trigger but instead call in postinst.
      * Add more belocs options to locale-gen to appease our installers.
      * Use DH_COMPAT=8 for dh_strip to fix debug sections for valgrind.
      * Tweak locales.config to allow langpacks for /etc/default/locale.
    
     -- Adam Conrad <email address hidden>  Tue, 22 Mar 2016 15:10:45 -0600
  • glibc (2.23-0ubuntu1) xenial; urgency=medium
    
      * Merge with 2.23 from experimental (LP: #1521172), remaining changes:
        - Remove the libc6 recommends on libc6-i686, which we don't build.
        - Enable libc6{,-dev}-armel on armhf and libc6{-dev}-armhf on armel.
        - Ship update-locale and validlocale in /usr/sbin in libc-bin.
        - Don't build locales or locales-all in Ubuntu, we rely on langpacks.
        - Heavily mangle the way we do service restarting on major upgrades.
        - Build i386 variants as -march=i686, build amd64 with -O3, and build
          ppc64 variants (both 64-bit and 32-bit) with -O3 -fno-tree-vectorize.
        - Build generic i386/i686 flavour with -mno-tls-direct-seg-refs.
        - Drop the libc6-xen flavour, as the above change covers Xen's needs.
        - Enable systemtap support, which is currently disabled in Debian.
        - debian/patches/ubuntu/local-warn-bsd-source.diff: Don't warn on
          _BSD_SOURCE || _SVID_SOURCE, so we don't have to fix everything
          that might define them and build with -Werror, drop after xenial.
        - Don't build libc-l10n, its contents get stripped for language-packs.
        - debian/control.in/libc: Remove a Breaks on s390x against a binary
          NMU version of check that will never exist in the Ubuntu archive.
      * Drop libc-bin manpages Recommends to Suggests to keep it in standard.
      * Build with -fno-pie and -no-pie on s390x, upstream isn't PIE-ready.
      * debian/testsuite-xfail-debian.mk: XFAIL tst-malloc-thread-{fail,exit}.
      * debian/patches/any/cvs-netinet-in-4.2.diff: Dropped, merged upstream.
      * debian/patches/any/cvs-netinet-tcp-4.2.diff: Dropped, merged upstream.
      * debian/patches/any/cvs-selinux-nscd.diff: Dropped, merged upstream.
      * debian/patches/powerpc/local-tune-power8.diff: Dropped, we build for P8.
      * debian/patches/ubuntu/submitted-no-stack-backtrace.diff: Rebase patch.
      * debian/patches/ubuntu/unsubmitted-increase-dtv-surplus.diff: Dropped.
    
      * Evaluate and merge/drop/rebase localedata patches from langpack-locales.
        - debian-*patch: Drop all langpack-locales patches copied from Debian.
        - ubuntu/localedata/bn-language.patch: Rebase for glibc.
        - ubuntu/localedata/ce_RU-new_locale.patch: Drop, merged upstream.
        - ubuntu/localedata/ckb_IQ-new_locale.patch: Rebase for glibc.
        - ubuntu/localedata/de_AT-february.patch: Drop, merged upstream.
        - ubuntu/localedata/en_CA-dateformat.patch: Rebase for glibc.
        - ubuntu/localedata/en_IE-am_pm.patch: Rebase for glibc.
        - ubuntu/localedata/eo_US.patch: Rebase for glibc.
        - ubuntu/localedata/es-decimal_point-thousands_sep.patch: Drop, merged.
        - ubuntu/localedata/es_DO-am_pm.patch: Rebase for glibc.
        - ubuntu/localedata/es_EV.patch: Drop, merged upstream.
        - ubuntu/localedata/gd_GB-days-months.patch: Drop, merged upstream.
        - ubuntu/localedata/it_IT-thousands_sep.patch: Drop, also in Debian.
        - ubuntu/localedata/ln_CD-new_locale.patch: Rebase for glibc.
        - ubuntu/localedata/lt_LT-currency.patch: Drop, merged upstream.
        - ubuntu/localedata/lv_LV-currency.patch: Rebase for glibc.
        - ubuntu/localedata/pt_BR-d_fmt.patch: Rebase for glibc.
        - ubuntu/localedata/sd_PK.patch: Rebase for glibc.
        - ubuntu/localedata/tr_TR-currency_symbol.patch: Drop, merged upstream.
        - ubuntu/localedata/ug_CN.patch: Drop, merged upstream.
        - <email address hidden>: Rebase for glibc.
    
      * Merge locales back into glibc and provide locales-all (LP: #1394929):
        - debian/control.in/*: Reinstate all locales{,-all} Breaks from Debian.
        - debian/control.in/main: Let locales overwrite files from old libc-bin.
        - debian/debhelper.in/libc.postinst: Move locale-gen purge to locales.
        - debian/debhelper.in/locales.{config,postinst}: Upgrade local locales.
        - debian/debhelper.in/locales.install: Install our language-pack hooks.
        - debian/rules.d/debhelper.mk: Mark our language-pack hooks executable.
        - debian/local/usr_sbin/locale-gen: Add support for langpack snippets.
        - debian/rules: Reinstate building locales and locales-all for Ubuntu.
    
    glibc (2.23-0experimental1) UNRELEASED; urgency=medium
    
      [ Aurelien Jarno ]
      * debian/testsuite-xfail-debian.mk (powerpc) really mark
        tst-malloc-thread-exit as xfail.
      * debian/testsuite-xfail-debian.mk (ppc64) mark tst-malloc-thread-exit
        test as xfail, it is a known issue and not a regression.
    
      [ Samuel Thibault ]
      * hurd-i386/cvs-libpthread.diff: More updates to glibc-2.23.
      * hurd-i386/cvs-openat.diff: Fix __openat prototype.
      * hurd-i386/cvs-gai_sigqueue.diff: Fix gai_sigqueue prototype.
      * hurd-i386/cvs-aio_sigqueue.diff: Fix aio_sigqueue prototype.
      * hurd-i386/cvs-libpthread.diff: Separate 2.23 changes to...
      * hurd-i386/cvs-libpthread-2.23.diff: ... separate patch.
      * hurd-i386/unsubmitted-libpthread.so.diff: Fix building malloc tests.
      * testsuite-xfail-debian.mk: Skip test which just overflows memory.
    
      [ Adam Conrad ]
      * debian/patches/any/cvs-tst-malloc-thread-exit.diff: Backport fix from
        upstream to make tst-malloc-thread-exit use fewer system resources.
      * debian/patches/any/cvs-resolver-leak.diff: Backport upstream patch by
        Andreas Schwab to fix a memory leak in the resolver (Closes: #818178)
      * debian/glibc-source.filelist: Refresh list of source files and sort.
      * debian/control.in/i386: Remove list of Breaks that predate oldstable.
      * debian/control.in/*: Drop long obsolete file overlap Breaks/Replaces.
    
    glibc (2.23-0experimental0) experimental; urgency=medium
    
      [ Aurelien Jarno ]
      * New upstream release: version 2.23, with git updates up to 2016-03-12:
        - Fix German translation of "Alarm clock".  Closes: #291293.
        - Fix strtol in Turkish locales.  Closes: #458611.
        - Add LFS support for fts functions.  Closes: #534521.
        - Fix build with GCC 6.  Closes: #811574.
        - Fix unbounded stack allocation in nan* functions (CVE-2014-9761).
          Closes: #813187.
        - debian/patches/localedata/locale-ku_TR.diff: rebased.
        - debian/patches/localedata/fix-lang.diff: upstreamed.
        - debian/patches/localedata/first_weekday.diff: rebased.
        - debian/patches/localedata/locale-nb_NO.diff: upstreamed.
        - debian/patches/localedata/cvs-bg_BG-t_fmt.diff: upstreamed.
        - debian/patches/alpha/local-string-functions.diff: rebased.
        - debian/patches/amd64/local-blacklist-for-Intel-TSX.diff: rebased.
        - debian/patches/arm/local-ioperm.diff: dropped.
        - debian/patches/hppa/cvs-allocatestack-stacktop.diff: upstreamed.
        - debian/patches/hppa/local-pthread_spin_unlock.diff: upstreamed.
        - debian/patches/hppa/submitted-mathdef.diff: upstreamed.
        - debian/patches/hppa/cvs-update-mman.h.diff: upstreamed.
        - debian/patches/hppa/submitted-dladdr.diff: upstreamed.
        - debian/patches/hurd-i386/local-enable-ldconfig.diff: rebased.
        - debian/patches/hurd-i386/tg-tls.diff: rebased.
        - debian/patches/hurd-i386/tg-tls-threadvar.diff: rebased.
        - debian/patches/hurd-i386/tg-hurdsig-fixes.diff: rebased.
        - debian/patches/hurd-i386/tg-hurdsig-global-dispositions.diff: rebased.
        - debian/patches/hurd-i386/cvs-libpthread.diff: updated.
        - debian/patches/hurd-i386/unsubmitted-gnumach.defs.diff: rebased.
        - debian/patches/hurd-i386/submitted-fork_port_leak.diff: upstreamed.
        - debian/patches/hurd-i386/tg-libc_getspecific.diff: rebased.
        - debian/patches/hurd-i386/cvs-libpthread-libc-lockP.diff: upstreamed.
        - debian/patches/hurd-i386/tg-mmap32th_bit.diff: upstreamed.
        - debian/patches/hurd-i386/tg-sysheaders.diff: upstreamed.
        - debian/patches/hurd-i386/cvs-bootstrap.diff: upstreamed.
        - debian/patches/hurd-i386/cvs-cache-mach_host_self.diff: upstreamed.
        - debian/patches/hurd-i386/cvs-csu_crt0.diff: upstreamed.
        - debian/patches/hurd-i386/cvs-s_scalbn.diff: upstreamed.
        - debian/patches/hurd-i386/local-mach_print.diff: rebased.
        - debian/patches/hurd-i386/cvs-hidden.diff: rebased.
        - debian/patches/hurd-i386/cvs-O_DIRECTORY.diff: upstreamed.
        - debian/patches/hurd-i386/cvs-raise-longjump.diff: upstreamed.
        - debian/patches/i386/local-i386-ulps.diff: dropped.
        - debian/patches/kfreebsd/local-scripts.diff: rebased.
        - debian/patches/m68k/submitted-gcc34-seccomment.diff: rebased.
        - debian/patches/mips/cvs-testsuite-o32-fp.diff: upstreamed.
        - debian/patches/powerpc/local-powerpc8xx-dcbz.diff: rebased.
        - debian/patches/sh4/local-fpscr_values.diff: rebased.
        - debian/patches/any/local-bindresvport_blacklist.diff: rebased.
        - debian/patches/any/local-libgcc-compat-main.diff: rebased.
        - debian/patches/any/local-libgcc-compat-abilists.diff: rebased.
        - debian/patches/any/local-mktemp.diff: upstreamed.
        - debian/patches/any/cvs-stdio-lock.diff: upstreamed.
        - debian/patches/any/local-tcsetaddr.diff: rebased.
        - debian/patches/any/local-tst-mktime2.diff: rebased.
        - debian/patches/any/submitted-nis-netgrp.diff: upstreamed.
        - debian/patches/any/submitted-longdouble.diff: rebased.
        - debian/patches/any/local-dynamic-resolvconf.diff: rebased.
        - debian/patches/any/local-static-dlopen-search-path.diff: upstreamed.
        - debian/patches/any/local-math-logb.diff: upstreamed.
        - debian/patches/any/cvs-gawk-gensub.diff: upstreamed.
        - debian/patches/any/cvs-grantpt-namespace.diff: upstreamed.
        - debian/patches/any/cvs-grantpt-pty-owner.diff: upstreamed.
        - debian/patches/any/cvs-bits-libc-stdio-lock.diff: upstreamed.
        - debian/patches/any/submitted-hle-checking-mutex.diff: upstreamed.
        - debian/{control,symbols.wildcards,copyright}: Updated strings for 2.23.
        - debian/patches/kfreebsd/local-undef-glibc.diff: rebased.
        - debian/patches/kfreebsd/local-tst-malloc-backtrace.diff: rebased,
          renamed into local-tst-malloc-fbtl.diff.
        - debian/patches/hurd-i386/submitted-net.diff: rebased.
        - debian/patches/hurd-i386/tg-bits_atomic.h_multiple_threads.diff:
          rebased.
        - debian/patches/hurd-i386/submitted-handle-eprototype.diff: dropped.
      * debian/testsuite-xfail-debian.mk (powerpc) mark tst-malloc-thread-fail
        test as xfail, it is a known issue and not a regression.
      * debian/testsuite-xfail-debian.mk (mipsel): mark a few math tests are
        failing, due to a bug in the Loongson 3 FPU.
      * patches/kfreebsd/local-fbtl.diff: update to revision 5940 (from
        glibc-bsd).
    
    glibc (2.22-3) unstable; urgency=medium
    
      * Update from upstream stable branch:
        - Fix linking shared objects that use libmvec.so functions.  Closes:
          #817879.
      * debian/sysdeps/sh4.mk: build with -fno-delete-null-pointer-checks to
        workaround a missing SH4 specific __builtin_trap implementation in GCC.
      * debian/patches/localedata/locale-C.diff: fix LC_TIME week and d_t_fmt
        fields in C.UTF-8 locale.  Closes: #817895.
      * debian/sysdeps/powerpcspe.mk: pass --without-fp to the configure script
        on powerpcspe.  Closes: #817926.
      * debian/rules.d/control.mk: add nios2 architecture.  Closes: #817944.
      * debian/patches/any/submitted-dlopen-noload.diff: new patch to fix a crash
        in dlopen() with RTLD_NOLOAD.  Closes: #817900.
    
    glibc (2.22-2) unstable; urgency=medium
    
      [ Aurelien Jarno ]
      * Update from upstream stable branch:
        - Fix pow() precision on CPUs with fma4, and the corresponding testsuite
          failures.
        - debian/patches/s390/submitted-socketcall.diff: drop, merged upstream.
      * debian/libc6{,-mips32,-mipsn32}.symbols.mips64el: add symbols for files for
        mips64el.
      * patches/kfreebsd/local-sysdeps.diff: update to revision 5932 (from
        glibc-bsd):
        - Fix consistency check for PIC code when built with GCC 5.  Closes:
          #817207.
      * debian/rules, debian/rules.d/build.mk, debian/rules.d/debhelper.mk: define
        the mvec variable per flavour and not per platform.
      * sysdeps/*mk: enable libmvec only on amd64 and x32 flavours.
      * debian/debhelper.in/libc-dev-alt.install: install libmvec_nonshared.a also
        for alternative builds.
      * debian/debhelper.in/libc-dev{,-alt}.install: install libmvec.a.
    
    glibc (2.22-1) unstable; urgency=medium
    
      [ Aurelien Jarno ]
      * debian/testsuite-xfail-debian.mk (alpha): mark a few failures which
        are not a regression compared to 2.21 as xfail.
      * debian/testsuite-xfail-debian.mk (hurd): mark another failure which
        is not a regression compared to 2.21 as xfail.
      * debian/control.in/main: avoid experimental versions, use versions that
        went through unstable instead.
    
      [ Samuel Thibault ]
      * control: Accept hurd-headers-dev and libihash-dev as alternatives to
        hurd-dev for bootstrapping.
    
    glibc (2.22-0experimental3) experimental; urgency=medium
    
      [ Aurelien Jarno ]
      * Update from upstream stable branch:
        - debian/patches/any/local-CVE-2015-7547.diff: drop, merged upstream.
      * debian/testsuite-xfail-debian.mk (hurd): correctly detect Hurd. Mark tests
        failing to build as unsupported. Update for glibc 2.22.
      * debian/patches/hurd-i386/submitted-hurd-abilist.diff: new patch to get the
        abilist tests buildable on Hurd.
      * debian/testsuite-xfail-debian.mk (mips): correctly detect 64-bit mips
        flavours.
      * debian/testsuite-xfail-debian.mk (hppa): mark new tests which fail as
        xfail.
      * debian/testsuite-xfail-debian.mk (alpha): mark new tests which fail as
        xfail.
      * control.in/main: Bump Standards-Version to 3.9.7 (no changes).
      * debian/patches/sparc/submitted-sparc64-socketcall.diff: new patch to fix
        bind(), listen() and setsockopt()when built against 4.4+ kernel headers.
      * Update German debconf translation, by Helge Kreutzman.  Closes: #815697.
      * Update Japanese debconf translation, by Takuma Yamada.  Closes: #815858.
    
    glibc (2.22-0experimental2) experimental; urgency=medium
    
      [ Aurelien Jarno ]
      * debian/patches/m68k/local-fpic.diff: drop, obsolete.
      * debian/patches/m68k/local-mathinline_h.diff: drop, not applied for a
        lot of time, obsolete.
      * debian/patches/sparc/submitted-timing.diff: drop, obsolete, not
        needed anymore since libc6-sparcv9 has been removed.
      * debian/patches/any/local-no-malloc-backtrace.diff: drop, the real bug
        has been fixed upstream.
      * debian/patches/any/local-no-SOCK_NONBLOCK.diff: drop, both GNU/Hurd
        and GNU/kFreeBSD now support SOCK_NONBLOCK.
      * debian/patches/any/local-libgcc-compat-ports.diff: refresh.
      * debian/patches/any/local-disable-test-tgmath2.diff: drop, 8 years have
        passed, the build daemons should now have enough resources to build
        and run this test.
      * debian/patches/s390/submitted-nexttowardf.diff: drop, fixed upstream
        another way.
      * debian/patches/alpha/submitted-rtld-fPIC.diff: drop, fixed upstream
        another way.
      * debian/patches/any/unsubmitted-scanf-includes.diff: replace the hack by
        the upstream fix patches/any/cvs-bits-libc-stdio-lock.diff. This also
        stop installing <bits/libc-lock.h> and <bits/stdio-lock.h>.  Closes:
        #404532, #639697.
      * debian/control, debian/rules.d/control.mk, debian/sysdeps/arm.mk: remove
        support for the ARM old-ABI architecture, it is not supported upstream
        anymore.
      * debian/sysdeps/*.mk: cleanup and homogenize:
        - define options common to all flavours using the non-flavour specific
          variable.
        - reorganize to not mix generic variables with flavour specific variables.
        - move -march and -mtune options from extra_cflags to CC and CXX as they
          might slightly change the ABI and the configure script needs to detect
          that.
      * debian/testsuite-checking/expected-results-sparc64-linux-gnu-libc: allow
        new tests to fail, cleanup resolved issues.
      * Replace debian/patches/i386/submitted-i586-ulps.diff by
        debian/patches/i386/local-i386-ulps.diff. The actual math precision
        depends on the CPU manufacturer and on the ability to use SSE2
        instructions or not. Change the i386 ULPs to the lowest precision
        produced by AMD and Intel CPU with and without SSE2 until upstream can
        figure out a better solution.
      * debian/testsuite-checking/expected-results-powerpc64le-linux-gnu-libc:
        allow nptl/tst-cancel17 and nptl/tst-cancelx17, this is a know upstream
        race condition.
      * debian/testsuite-checking/*, debian/testsuite-xfail-debian.mk,
        debian/rules.d/build.mk: rework testsuite system by extending upstream.
      * debian/debhelper.in/libc{,-alt,otherbuild).install: stop shipping
        testsuite results as it make the package build non-reproducible in case
        of different kernels and race conditions in the testsuite.
      * debian/testsuite-xfail-debian.mk: allow stdlib/tst-makecontext to fail
        on armel and armhf, as it is a new test introduced with glibc 2.22 and
        not a regression.
      * debian/patches/git-updates.diff: update to the latest commit of the
        2.22 branch.
      * debian/patches/alpha/submitted-abilist.diff: drop, merged upstream.
      * debian/patches/hppa/cvs-inline-syscall.diff: drop, merged upstream.
      * debian/patches/hppa/cvs-start.diff: drop, merged upstream.
      * debian/control.in/main: update VCS fields to the canonical location.
      * debian/control.in/{libc,libnss-dns-udeb,libnss-files-udeb}: rename
        XC-Package-Type into Package-Type.
      * debian/control.in/libc: drop conflicts on prelink (<= 0.0.20090311-1) as
        we don't support Lenny to Stretch upgrades.
      * debian/debhelper.in/libc-bin.{postinst,lintian-overrides},
        debian/rules.d/debhelper.mk, debian/local/sbin/ldconfig: remove ldconfig
        wrapper as new debhelper versions use the trigger instead of an explicit
        call to ldconfig.
      * debian/testsuite-xfail-debian.mk: allow POSIX2008/netdb.h/linknamespace
        and -XOPEN2K/netdb.h/linknamespace to fail on kfreebsd-* (new tests).
      * debian/testsuite-xfail-debian.mk: allow tst-setcontext2 to fail on
        kfreebsd-* (new test also failing on native FreeBSD).
    
      [ Adam Conrad ]
      * debian/patches/any/cvs-gawk-gensub.diff: Fix scary output from newer gawk.
      * debian/debhelper.in/libc-bin.postinst: Call ldconfig during configure as
        well, or major version upgrades will leave us without due to dep ordering.
    
    glibc (2.22-0experimental1) experimental; urgency=medium
    
      [ Aurelien Jarno ]
      * debian/debhelper.in/libc-dev.install: install libmvec_nonshared.a.
        Closes: #806910.
      * debian/control.in/main, debian/rules: build with gcc-5.
      * patches/kfreebsd/local-sysdeps.diff, patches/kfreebsd/local-fbtl.diff:
        update to revision 5856 (from glibc-bsd):
        - Update to glibc 2.22.
      * debian/patches/kfreebsd/local-tst-malloc-backtrace.diff: new patch to fix
        tst-malloc-backtrace on GNU/kFreeBSD.
      * debian/sysdeps/ppc64el.mk: default to POWER8 and use default gcc options.
      * debian/rules.d/build.mk: explicitly disable mathvec when mvec=no.
      * debian/testsuite-checking/expected-results-s390x-linux-gnu-libc:
        allow elf/tst-protected1a and elf/tst-protected1b to fail as they are
        new tests. Cleanup resolved issues.
      * debian/testsuite-checking/expected-results-aarch64-linux-gnu-libc:
        cleanup resolved issues.
      * debian/rules.d/build.mk: abort if the log file does not contain any
        testsuite result.
      * debian/patches/localedata/submitted-locale-bo.diff: drop, now useless.
      * debian/patches/any/submitted-resolv-ipv6-nameservers.diff: drop, now
        useless.
      * debian/testsuite-checking/expected-results-powerpc-linux-gnu-libc,
        debian/testsuite-checking/expected-results-powerpc64-linux-gnu-ppc64:
        cleanup resolved issues.
      * debian/testsuite-checking/expected-results-powerpc-linux-gnu-powerpc,
        debian/testsuite-checking/expected-results-powerpc64-linux-gnu-libc:
        new files.
      * debian/patches/i386/submitted-i586-ulps.diff: new patch to provide
        i586 ULPs.
      * debian/patches/git-updates.diff: update to the latest commit of the
        2.22 branch.
      * debian/testsuite-checking/expected-results-i?86-linux-gnu-*: cleanup
        resolved issues.
      * debian/testsuite-checking/expected-results-x86_64-linux-gnu-*: cleanup
        resolved issues.
      * debian/testsuite-checking/expected-results-x86_64-linux-gnux32-*:
        update and cleanup resolved issues.
      * debian/testsuite-checking/expected-results-powerpc64le-linux-gnu-libc:
        update and cleanup resolved issues.
      * debian/testsuite-checking/expected-results-mips*: update and cleanup
        resolved issues.
      * debian/testsuite-checking/expected-results-*kfreebsd-gnu*: update and
        cleanup resolved issues.
      * debian/patches/mips/local-r10k.diff: dropped, we don't support systems
        with a MIPS R10K CPU since the ISA has been switched to MIPS R2.
      * debian/patches/mips/cvs-testsuite-o32-fp.diff: new patch to fix testsuite
        build on pre-R2 ISA.
      * debian/patcheS/any/cvs-grantpt-namespace.diff: new patch to fix the
        grantpt link namespace when built without pt_chown.
      * debian/patches/alpha/submitted-abilist.diff: new patch to fix alpha ABI
        baseline sorting.
      * debian/patches/alpha/submitted-fegetenv-namespace.diff: new patch to fix
        the fegetenv link namespace on alpha.
      * debian/patches/alpha/submitted-termios_h.diff: new patch to fix
        visibility issues in termios.h on alpha.
    
    glibc (2.22-0ubuntu1) wily; urgency=medium
    
      * Merge with 2.22 from experimental (LP: #1497473), remaining changes:
        - Drop the Breaks line from libc which refers to a Debian transition.
        - Remove the libc6 recommends on libc6-i686, which we don't build.
        - Enable libc6{,-dev}-armel on armhf and libc6{-dev}-armhf on armel.
        - Ship update-locale and validlocale in /usr/sbin in libc-bin.
        - Don't build locales or locales-all in Ubuntu, we rely on langpacks.
        - Heavily mangle the way we do service restarting on major upgrades.
        - Build i386 variants as -march=i686, build amd64 with -O3, and build
          ppc64 variants (both 64-bit and 32-bit) with -O3 -fno-tree-vectorize.
        - Build generic i386/i686 flavour with -mno-tls-direct-seg-refs.
        - Drop the libc6-xen flavour, as the above change covers Xen's needs.
        - Enable systemtap support, which is currently disabled in Debian.
        - debian/patches/ubuntu/local-warn-bsd-source.diff: Don't warn on
          _BSD_SOURCE || _SVID_SOURCE, so we don't have to fix everything
          that might define them and build with -Werror, drop after wily.
        - Force tuning POWER7 builds to POWER8, as POWER7 is just a stopgap.
      * debian/patches/any/cvs-netinet-in-4.2.diff: Pull patch from git that
        updates netinet/in.h to match the kernel UAPI header's values in 4.2.
      * debian/patches/any/cvs-netinet-tcp-4.2.diff: Ditto for netinet/tcp.h.
      * debian/rules: Don't build libc-l10n, its contents get stripped and put
        in language-packs in Ubuntu, so the package would be completely empty.
    
    glibc (2.22-0experimental0) experimental; urgency=medium
    
      [ Adam Conrad ]
      * New upstream release: version 2.22, with git updates up to 2015-11-27:
        - debian/patches/all/local-alias-UTF-8.diff: Fixed upstream.
        - debian/patches/any/cvs-ldconfig-aux-cache.diff: Upstreamed.
        - debian/patches/any/cvs-localplt-new-readelf.diff: Upstreamed.
        - debian/patches/any/cvs-logbl-accuracy.diff: Upstreamed.
        - debian/patches/any/cvs-vismain-pie.diff: Upstreamed.
        - debian/patches/any/local-xfail-stdlib-linkns.diff: Dropped.
        - debian/patches/any/local-tester-gcc-4.9.diff: Dropped.
        - debian/patches/arm/cvs-arm-sfi_breg.diff: Upstreamed.
        - debian/patches/arm/cvs-memcpy-memmove-always-bx.diff: Upstreamed.
        - debian/patches/hppa/cvs-alloca-werror.diff: Upstreamed.
        - debian/patches/hppa/cvs-fpu-r2.diff: Upstreamed.
        - debian/patches/hppa/cvs-fpu2.diff: Upstreamed.
        - debian/patches/hppa/local-fcntl-osync.diff: Fixed upstream.
        - debian/patches/hppa/local-setcontext.diff: Fixed upstream.
        - debian/patches/powerpc/cvs-power7-strncpy.diff: Upstreamed.
        - debian/patches/powerpc/cvs-ppc-feraiseexcept.diff: Upstreamed.
        - debian/patches/powerpc/cvs-ppc-pow.diff: Upstreamed.
        - debian/patches/powerpc/cvs-ppc-sqrt.diff: Upstreamed.
        - debian/patches/powerpc/cvs-ppc-sqrtf.diff: Upstreamed.
        - debian/patches/powerpc/cvs-ppc-tabort-le.diff: Upstreamed.
        - debian/patches/all/local-alias-et_EE.diff: Rebased.
        - debian/patches/amd64/local-blacklist-for-Intel-TSX.diff: Rebased.
        - debian/patches/any/local-libgcc-compat-ports.diff: Rebased.
        - debian/patches/any/local-libpic.diff: Rebased.
        - debian/patches/any/local-no-pagesize.diff: Rebased.
        - debian/patches/any/submitted-longdouble.diff: Rebased.
        - debian/patches/any/submitted-missing-etc-hosts.diff: Rebased.
        - debian/patches/any/submitted-resolv-ipv6-nameservers.diff: Rebased.
        - debian/patches/i386/submitted-i686-timing.diff: Rebased.
        - debian/patches/localedata/local-all-no-archive.diff: Rebased.
        - debian/patches/localedata/submitted-locale-bo.diff: Rebased.
        - debian/patches/mips/submitted-rld_map.diff: Rebased.
      * debian/{control,symbols.wildcards,copyright}: Updated strings for 2.22.
      * debian/libc6*.symbols: Add libmvec.so.1 to the amd64/x32 symbols files.
      * debian/*: Conditionally add libmvec to libc-udeb only on amd64 and x32.
    
      [ Samuel Thibault ]
      * debian/patches/hurd-i386/tg-tls.diff: Rebased.
      * debian/patches/hurd-i386/tg-tls-threadvar.diff: Rebased.
      * debian/patches/hurd-i386/tg-ioctl-base-types.diff: Upstreamed.
      * debian/patches/hurd-i386/tg-extern_inline.diff: Rebased.
      * debian/patches/hurd-i386/tg-aio_misc.diff: Upstreamed.
      * debian/patches/hurd-i386/tg-chflags.diff: Upstreamed.
      * debian/patches/hurd-i386/tg-select-EINTR.diff: Upstreamed.
      * debian/patches/hurd-i386/tg-af_local_strlen.diff: Upstreamed.
      * debian/patches/hurd-i386/tg-nice.diff: Upstreamed.
      * debian/patches/hurd-i386/tg-nfds-poll.diff: Upstreamed.
      * debian/patches/hurd-i386/tg-sigstate_locking.diff: Upstreamed.
      * debian/patches/hurd-i386/tg-mmap_file_prot_none_fix.diff: Upstreamed.
      * debian/patches/hurd-i386/cvs-unwind-resume.diff: Upstreamed.
      * debian/patches/hurd-i386/cvs-libc-modules.h.diff: Upstreamed.
      * debian/patches/hurd-i386/cvs-warnings.diff: Upstreamed.
      * debian/patches/hurd-i386/cvs-check-local-headers.diff: Upstreamed.
      * debian/patches/hurd-i386/cvs-mlock.diff: Upstreamed.
      * debian/patches/hurd-i386/cvs-csu_crt0.diff: New patch, fixes gcrt0.o
        build.
      * debian/patches/hurd-i386/cvs-s_scalbn.diff: New patch, fixes s_scalbn.S
        build.
      * debian/patches/hurd-i386/tg-tls-threadvar.diff: Update.
      * patches/hurd-i386/tg-posix_thread.diff: Update, to define
        _POSIX_THREAD_KEYS_MAX, _POSIX_THREAD_DESTRUCTOR_ITERATIONS and
        _POSIX_THREAD_THREADS_MAX.
    
      [ Aurelien Jarno ]
      * debian/patches/hppa/cvs-atomic.diff: Upstreamed.
      * debian/patches/hppa/cvs-sysdep-errno.diff: Upstreamed.
      * debian/patches/hppa/cvs-inline-syscall-rewrite.diff: Upstreamed.
      * debian/patches/any/cvs-mangle-tls_dtor_list.diff: Rebased.
      * debian/patches/any/cvs-tls-dtv.diff: Upstreamed.
      * debian/patches/any/cvs-rfc3542-advanced-api.diff: Upstreamed.
      * debian/patches/any/cvs-check-localplt.diff: Upstreamed.
      * debian/patches/any/cvs-ld_pointer_guard.diff: Upstreamed.
      * debian/patches/any/cvs-mangle-tls_dtor_list.diff: Upstream.
    
    glibc (2.21-9) unstable; urgency=medium
    
      [ Aurelien Jarno ]
      * Update from upstream stable branch:
        - Fixes bug18240 failing with a timeout on machines with a lot of swap.
          Closes: #814958.
    
    glibc (2.21-8) unstable; urgency=critical
    
      * Update from upstream stable branch:
        - Fix an integer overflow in hcreate() and hcreate_r() (CVE-2015-8778).
          Closes: #812441.
      * patches/any/local-CVE-2015-7547.diff: new patch to fix glibc getaddrinfo
        stack-based buffer overflow (CVE-2015-7547).
    
    glibc (2.21-7) unstable; urgency=medium
    
      [ Aurelien Jarno ]
      * patches/localedata/cvs-bg_BG-t_fmt.diff: new patch from upstream to
        use colon as time separator in the Bulgarian locale.  Closes:
        #808143.
      * Update French debconf translation, by Christian Perrier.  Closes:
        #809636.
      * Update Brazilian Portuguese debconf translation, by Adriano Rafael
        Gomes.  Closes: #809741.
      * patches/hppa/cvs-update-mman.h.diff: new patch from upstream to add huge
        pages support on hppa.  Closes: #809776.
      * patches/hppa/submitted-dladdr.diff: new patch from John David Anglin to
        fix dladdr issues on hppa.  Closes: #810053.
      * sysdeps/armel.mk, sysdeps/armhf.mk: re-enable IFUNC support now that
        binutils has been fixed.
      * debian/control.in/main: update Vcs-* fields to point to the new git
        repository.
      * Update Dutch debconf translation, by Frans Spiesschaert.  Closes: #812351.
      * Update from upstream stable branch:
        - Fix segmentation fault caused by passing out-of-range data to strftime()
          (CVE-2015-8776).  Closes: #812445.
        - Fix multiple unbounded stack allocations in catopen() (CVE-2015-8779).
          Closes: #812455.
      * patches/any/submitted-hle-checking-mutex.diff: add proposed patch to fix
        a wrong assertion in pthread_mutex_unlock() on systems with hardware lock
        elision.  Closes: #810322.
    
      [ Samuel Thibault ]
      * patches/hurd-i386/cvs-libpthread-sigstate.diff: New patch to fix spurious
        signal blocking leading to sigill.  Fixes rsyslog tests.
      * patches/hurd-i386/cvs-raise-longjump.diff: New patch to fix longjump from
        signal handler.  Closes: #800900.
      * patches/hurd-i386/cvs-O_DIRECTORY.diff: New patch to fix O_DIRECTORY lookup
        on trivial translators.  Closes: #785404.
    
    glibc (2.21-6) unstable; urgency=medium
    
      [ Aurelien Jarno ]
      * sysdeps/kfreebsd.mk: test if the header directory exists before
        trying to link directories from there. Fixes FTBFS on GNU/kFreeBSD.
      * patches/s390/submitted-socketcall.diff: new patch to fix broken
        socketcall related function on s390x when built against 4.3+ kernel
        headers.
    
    glibc (2.21-5) unstable; urgency=medium
    
      [ Samuel Thibault ]
      * Team upload.
      * patches/hurd-i386/cvs-libpthread-api.diff: Update patch, add missing throw
        specifications.
      * patches/any/local-stdio-lock.diff: Update to git commit, and
        rename into patches/any/cvs-stdio-lock.diff.
      * debhelper.in/libc.lintian-overrides: Override error about the embedded
        libidn.
    
      [ Aurelien Jarno ]
      * sysdeps/armel.mk, sysdeps/armhf.mk: pass --disable-multi-arch on armel and
        armhf as IFUNC support is broken in binutils (see #807974).
    
    glibc (2.21-4) unstable; urgency=medium
    
      [ Aurelien Jarno ]
      * debian/debhelper.in/libc.{preinst,prerm}: remove code handling the
        upgrade from squeeze to wheezy, as we don't support squeeze to stretch
        upgrades. Move tests which might exit with a failure at the beginning.
      * debian/sysdeps/amd64.mk, debian/sysdeps/i386.mk: downgrade the minimal
        Linux kernel version to 2.6.32 to support RHEL6 kernels.
      * debhelper.in/libc.preinst: add a note explainling that pre-3.2 kernel
        are not officially supported.
      * debhelper.in/libc.preinst, debhelper.in/libc.templates, po/*: display
        kernel related notes using debconf if available.
      * patches/any/cvs-grantpt-pty-owner.diff: new patch from upstream to
        improve granpt when /dev/pts is not mounted with the correct options.
        Closes: #806882.
    
      [ Samuel Thibault ]
      * patches/hurd-i386/cvs-libpthread-api.diff: New patch, cleans libpthread
        API. Fixes conflicting declarations between pthread.h and sigthread.h.
    
    glibc (2.21-3) unstable; urgency=medium
    
      [ Aurelien Jarno ]
      * debian/control.in/opt: drop libc0.3-i686 and libc0.3-xen entries.
    
    glibc (2.21-2) unstable; urgency=medium
    
      [ Aurelien Jarno ]
      * debhelper.in/libc.preinst: drop outdated code about pre-2.6 kernels.
      * rules.d/debhelper.mk: prefix calls to objcopy and strip with
        $(DEB_HOST_GNU_TYPE)-.
      * testsuite-checking/expected-results-hppa-linux-gnu-libc: update testsuite
        result, from John David Anglin.  Closes: #806839.
      * debhelper.in/libc.NEWS: add an entry about the required minimum kernel.
      * rules.d/debhelper.mk: strip *crt*.o files.
      * patches/any/cvs-tls-dtv.diff: update with a new patch from upstream
        changing the IE model for static variables.  Closes: #806971.
    
    glibc (2.21-1) unstable; urgency=medium
    
      [ Aurelien Jarno ]
      * testsuite-checking/expected-results-mips64el-linux-gnu-*: allow
        nptl/tst-cancel24-static to fail on mips64el.  It's an upstream regression
        only affecting static binaries currently under investigation.
      * patches/hppa/submitted-mathdef.diff: update to include the ABI baseline
        changes.
      * testsuite-checking/expected-results-*kfreebsd-gnu-*: re-add rt/tst-shm as
        it seems it can still occasionally fail on the buildds.
    
    glibc (2.21-0experimental4) experimental; urgency=medium
    
      [ Aurelien Jarno ]
      * testsuite-checking/expected-results-*kfreebsd-gnu-*: re-add tst-getpid1
        and tst-getpid2 as it seems they can still occasionally fail on the
        buildds.
      * testsuite-checking/expected-results-mips64el-linux-gnu-libc: rename into
        testsuite-checking/expected-results-mips64el-linux-gnuabi64-libc.
      * testsuite-checking/expected-results-{arm,mips}*: allow nptl/tst-stack4 to
        fail. It's a new test which fails intermitently on the buildds and a known
        upstream problem.
      * patches/hppa/submitted-mathdef.diff: new patch from John David Anglin to
        define __NO_LONG_DOUBLE_MATH on hppa.  Closes: #805836.
      * patches/hppa/cvs-inline-syscall-rewrite.diff: new patch backported from
        upstream as requested by John David Anglin.
      * patches/hppa/cvs-sysdep-errno.diff: new patch backported from upstream as
        requested by John David Anglin.
      * testsuite-checking/expected-results-hppa-linux-gnu-libc: update testsuite
        result, from John David Anglin.
      * testsuite-checking/*{arm,mips,hppa}*: allow nptl/tst-cancel24-static to
        fail on armel, armhf, hppa, mips, mipsel. It's an upstream regression
        only affecting static binaries currently under investigation.
    
      [ Samuel Thibault ]
      * patches/hurd-i386/tg-tls-threadvar.diff: Update, to fix recursion while
        accessing TLS while locking for accessing TLS.
      * patches/hurd-i386/tg-context_functions.diff: Update, to fix sigprocmask
        visibility.
      * patches/hurd-i386/cvs-hidden.diff: New patch, to fix build with hidden
        support.
      * sysdeps/hurd-i386.mk: Disable libc0.3-i686 and libc0.3-xen build for now,
        to get 2.21 out against the binutils version which broke them.
    
    glibc (2.21-0experimental3) experimental; urgency=medium
    
      [ Aurelien Jarno ]
      * patches/hppa/cvs-allocatestack-stacktop.diff: new patch from upstream
        to fix a set-but-unused warning in nptl/allocatestack.c, causing a
        build failure.
      * patches/hppa/local-stack-grows-up.diff: rebase.
      * patches/any/cvs-tls-dtv.diff: new patch from upstream to fix DTV race,
        assert, and DTV_SURPLUS Static TLS limit.  This also reduces the failure
        rate of nptl/tst-stack4.  Closes: #793641.
      * Add expected testsuite result for mips64el:
        - testsuite-checking/expected-results-mips64el-linux-gnu-libc
        - testsuite-checking/expected-results-mips64el-linux-gnuabin32-mipsn32
        - testsuite-checking/expected-results-mipsel-linux-gnu-mips32
      * patches/kfreebsd/local-sysdeps.diff, patches/kfreebsd/local-fbtl.diff:
        update to revision 5844 (from glibc-bsd):
        - Update to glibc 2.21.
        - Define F_DUP2FD_CLOEXEC.  Closes: #712074.
        - Define SOCK_CLOEXEC and SOCK_NONBLOCK.
        - Wire-up accept4.  Closes: #722885.
      * sysdeps/kfreebsd-{amd64,i386}.mk: configure with --disable-werror.
      * patches/kfreebsd/local-nscd-no-sockcloexec.diff: Drop.
      * patches/kfreebsd/local-getaddrinfo-freebsd-kernel.diff: improve and remove
        a warning.
      * patches/kfreebsd/local-tst-auxv.diff: new patch to disable AT_EXECFN
        testing in tst-auxv when it is not defined.
      * patches/any/cvs-rfc3542-advanced-api.diff: new patch from usptream to
        add missing Advanced API (RFC3542) (1) defines.  Closes: #753909.
      * debian/rules: don't put debug files from libc0.1-i386 and libc6-mips32
        into libc0.1-dbg or libc6-dbg.
      * patches/hppa/cvs-atomic.diff, patches/hppa/cvs-inline-syscall.diff: new
        patches from upstream to improve atomic and inline syscalls on HPPA
        (closes: #799478).
      * rules.d/build.mk: don't run the testsuite with make -k, as a build
        failure in the testsuite, otherwise build failures cause the regression
        comparison to be entirely skipped.
      * testsuite-checking/expected-results-*kfreebsd-gnu-*: update testsuite
        results.
      * patches/any/cvs-check-localplt.diff: new patch from upstream to fix
        check-localplt test with recent binutils version on x86.
      * patches/hppa/submitted-gmon-start.diff: new patch from upstream to
        fix __gmon_start__ symbol proliferation on hppa.  Closes: #805730.
      * Update from upstream stable branch:
        - patches/any/cvs-make-typo.diff: Merged.
        - Fix FTBFS with libselinux 2.4.
    
      [ Samuel Thibault ]
      * patches/hurd-i386/tg-pagesize.diff: Refresh.
      * patches/hurd-i386/submitted-handle-eprototype.diff: Refresh.
      * patches/hurd-i386/tg-posix_thread.diff: Update, to define
        _POSIX_THREAD_KEYS_MAX, _POSIX_THREAD_DESTRUCTOR_ITERATIONS and
        _POSIX_THREAD_THREADS_MAX.
    
    glibc (2.21-0experimental2) experimental; urgency=medium
    
      [ Samuel Thibault ]
      * Symbol versions which contain _DEBIAN_ are unexpected by upstream scripts.
        Add hurd-i386-only patches/hurd-i386/local-versions-hack.diff to work
        around the issue.  Also take the opportunity of the upstream version bump
        to bump the versions to GLIBC_2_21, which will allow one to remove the
        _DEBIAN_ hacks once packages are rebuilt.
      * patches/hurd-i386/unsubmitted-libpthread-semaphore.h.diff: Remove
        libpthread/sysdeps/i386/bits/semaphore.h, now that hurd Implies
        libpthread/sysdeps/generic. Move libpthread/include/semaphore.h into
        libpthread/sysdeps/pthread/semaphore.h instead of the latter just
        including the former, since the latter is what gets installed.
      * patches/hurd-i386/cvs-cache-mach_host_self.diff: New patch to avoid port
        count issue on the host port.
      * patches/hurd-i386/unsubmitted-gnumach.defs.diff: Also build
        task_notify.defs stubs.  Drop unneeded change.
      * libc0.3.symbols.hurd-i386: Update.
      * patches/hurd-i386/local-mach_print.diff: New patch to export mach_print.
    
      [ Aurelien Jarno ]
      * rules.d/debhelper.mk: replace GLIBC_VERSION before LIBC.  Closes:
        #797538.
      * Drop loongson-2f flavour on mipsel as this machine is not supported
        anymore (default to R2 ISA).
      * kfreebsd/local-sysdeps.diff: update to revision 5772 (from glibc-bsd).
        Closes: #764692, #785796.
      * testsuite-checking/expected-results-mips*: allow the new tst-audit9
        fail, like the others tst-auditX.
      * testsuite-checking/expected-results-mips(el)-linux-gnu-libc: allow
        conformtest for sys/stat.h to fail for O32 ABI. They were previously
        under the failing test run-conformtest.out, but it has been lost in
        the conversion to the new format.
      * testsuite-checking/expected-results-mips*: sort the files. Remove
        failures due to old kernel now that all buildds run jessie.
      * debhelper.in/locales-all.prerm: do not specify a path to check for
        locale-gen.
      * libc6.1.symbols.alpha: remove invoke_dynamic_linker from libpcprofile.so.
        It has disappeared, but it is a private library.
      * Remove debver2localesdep.pl, it is unused since 2.19-16.
      * Use $(GLIBC_VERSION) for shlib, instead of defining the version in a
        separate shlibver file.
      * Remove completely outdated README, README.source and TODO files.
      * rules.d/debhelper.mk: use the default compression format for libc6,
        libc-bin and multiarch-support. Nowadays deboostrap is able to handle
        the xz format and modern distributions also support it. Anyway almost
        all packages installed by debootstrap are now using the xz format.
      * Bump debhelper compatibility to level 9. This brings compressed debug
        file using the build-id instead of a fixed path. This is much more
        multiarch friendly.
      * control.in/*: remove pre-squeeze conflicts.
      * libc-bin, libc-dev-bin: Recommends the manpages package and add lintian
        override for missing manpages.
      * sysdeps/s390x.mk: --enable-lock-elision.
      * testsuite-checking/expected-results-x86_64-linux-gnux32-*: allow
        conformtest for headers with tv_nsec to fail for x32. The type
        non-compliance is intentional. These tests were previously marked as
        failing under the run-conformtest.out, but they have been lost during
        the conversion to the new format.
      * testsuite-checking/compare.sh: re-enable failures in case of regressions.
      * rules.d/build.mk: don't require flavours to be tested before being
        installed. They are still tested when calling the build-arch or
        binary-arch targets, but not anymore when calling the build-indep or
        binary-indep targets.
      * patches/hppa/cvs-alloca-werror.diff: new patch from upstream to fix a
        build failure.
      * debhelper.in/libc.preinst: fix up error message for too old Linux
        kernels.  Closes: #800846.
      * patches/any/cvs-ld_pointer_guard.diff: new patch from upstream to
        unconditionally disable LD_POINTER_GUARD.  Closes: #798316, #801691.
      * patches/any/cvs-mangle-tls_dtor_list.diff: new patch from upstream to
        mangle function pointers in tls_dtor_list.  Closes: #802256.
      * Update Brazilian Portuguese debconf translation, by Adriano Rafael
        Gomes.  Closes: #799418.
    
      [ Steven Chamberlain ]
      * sysdeps/kfreebsd.mk: find kfreebsd-kernel-headers in multiarch path.
        Closes: #672774, #798064.
    
      [ Helmut Grohne ]
      * Fix some issues with stage 1.  Closes: #797831.
    
      [ Adam Conrad ]
      * debian/patches/arm/local-arm-futex.diff: Lie about the minimum kernel
        support for futex_atomic_cmpxchg_inatomic to restore the  previous state
        and fix the pulsesink (and others) regression on ARM (closes: #788799)
    
      [ Henrique de Moraes Holschuh ]
      * Replace patches/amd64/local-blacklist-on-TSX-Haswell.diff by
        local-blacklist-for-Intel-TSX.diff also blacklisting some Broadwell
        models.  Closes: #800574.
    
     -- Adam Conrad <email address hidden>  Thu, 17 Mar 2016 05:18:44 -0600
  • glibc (2.21-0ubuntu6) xenial; urgency=medium
    
      * SECURITY UPDATE: glibc getaddrinfo stack-based buffer overflow
        - debian/patches/any/CVE-2015-7547.diff: fix buffer handling in
          resolv/nss_dns/dns-host.c, resolv/res_query.c, resolv/res_send.c.
        - CVE-2015-7547
    
     -- Marc Deslauriers <email address hidden>  Tue, 16 Feb 2016 16:42:23 -0500
  • glibc (2.21-0ubuntu5) xenial; urgency=medium
    
      * debian/patches/any/cvs-selinux-nscd.diff: Fix build with selinux.
      * debian/control.in/libc: Remove a Breaks on s390x against a binary
        NMU version of check that will never exist in the Ubuntu archive.
      * debian/control: Regenerate for the above s390x-vs-binNMU changes.
    
     -- Adam Conrad <email address hidden>  Thu, 03 Dec 2015 13:24:51 -0700
  • glibc (2.21-0ubuntu4) vivid; urgency=medium
    
      * debian/patches/arm/local-arm-futex.diff: Lie about the minimum
        kernel support for futex_atomic_cmpxchg_inatomic to restore the
        previous state and make pulsesink happier on ARM (LP: #1436162)
      * debian/debhelper.in/libc.preinst: Wipe ld.so.cache on upgrades.
     -- Adam Conrad <email address hidden>   Wed, 25 Mar 2015 14:31:51 -0600