Public bug reported:
A new release of glibc is available for merging from Debian.
Ubuntu: 2.44-1ubuntu2
Debian Experimental: 2.44-3
Debian Unstable: 2.43-7
### New Debian Changes ###
glibc (2.44-3) experimental; urgency=medium
[ Aurelien Jarno ]
* debian/rules.d/build.mk: only pass --enable-cet=permissive on Linux.
* debian/patches/git-updates.diff: update from upstream stable branch:
- Remove POSIX aliases to some spawn functions added in the initial
2.44 release.
- Fix intermittent nptl/tst-cancel32 failure on LoongArch.
[ Samuel Thibault ]
* debian/patches/hurd-i386/git-xfail-setpshared.diff: Fix xfailing tests
using setpshared.
-- Aurelien Jarno <[email protected]> Sun, 04 Oct 2026 14:05:32 +0200
glibc (2.44-2) experimental; urgency=medium
[ Samuel Thibault ]
* debian/testsuite-xfail-debian.mk: Update hurd results.
* debian/patches/hurd-i386/git-tst-backtrace.diff: Fix tst-backtrace[56].
[ Aurelien Jarno ]
* debian/patches/git-updates.diff: update from upstream stable branch:
- Do not load cache extensions from an old-format ld.so.cache
- Drop nonnull attribute for fchmodat, faccessat, fchownat, openat,
openat2's path argument
- Fix tst-shstk-legacy-1{f,g} with a toolchain defaulting to --as-needed
* debian/rules.d/build.mk: configure with --enable-cet=permissive when
dpkg-buildflags has -fcf-protection. Closes: #1114518.
-- Aurelien Jarno <[email protected]> Sun, 20 Sep 2026 15:39:36 +0200
### Old Ubuntu Delta ###
glibc (2.44-1ubuntu2) stonking; urgency=medium
* fixes gettext ftbfs. (LP: #2167365)
* d/p/git-updates.diff: pull upstream stable branch
- powerpc: Fix one byte overread in strncasecmp (bug 34683, CVE-2026-97399)
- realloc: Fix mmap non-mremap reallocation case [BZ #34697]
- CVE-2026-89092: nscd: replace alloca with malloc in aicache, hstcache
- Revert "posix: Add POSIX aliases to some spawn functions" (BZ 34437)
- stdlib: Don't call clearenv from __libc_setenv_freemem
- elf: Open the normalized $ORIGIN rpath in AT_SECURE programs (BZ 34360)
- resolv: Fix assertion failure on search list truncation [BZ 31026,
CVE-2026-8674]
- fcntl: drop nonnull attribute for openat, openat2's path argument [BZ
#34313]
- io: drop nonnull attribute for fchmodat, faccessat, fchownat's path
argument [BZ #34313]
- Revert "io: drop nonnull attribute for fchmodat, faccessat, fchownat's
path argument [BZ #34313]"
- x86-64: Link tst-shstk-legacy-1{f,g} with -Wl,--no-as-needed
- io: drop nonnull attribute for fchmodat, faccessat, fchownat's path
argument [BZ #34313]
- elf: Do not load cache extensions from an old-format ld.so.cache [BZ
#34600]
- libio: Fix CVE-2026-18374 heap buffer overflow in ccs= handling
- powerpc: Fix preprocessor conditional in soft-float __longjmp (bug 34530)
- powerpc: Fix non-atomic stack pointer update in fortified longjmp (bug
34530)
- iconvdata: EUC_JISX0213 decoding lacks pending character reset
(CVE-2026-80489)
- iconvdata: SHIFT_JISX0213 decoding lacks pending character reset
(CVE-2026-77117)
- stdlib: Fix right-justification in strfmon (bug 34510, CVE-2026-19499)
- posix: Remove unnecessary overflow check in wordexp (BZ 34090)
- misc: Fix out-of-bounds array write n tdelete (bug 34506)
-- Simon Poirier <[email protected]> Tue, 06 Oct 2026
10:18:36 -0400
glibc (2.44-1ubuntu1) stonking; urgency=medium
* Merge from Debian experimental (LP: #2163528)
Delta dropped:
- Revert "debian/rules.d/build.mk: add a makefile function to filter out
dpkg build flags incompatible with glibc and define CFLAGS from dpkg
build flags. Closes: #1129746."
- fix ftbfs: backport OPEN_TREE conditional define (LP #2145679)
[fixed upstream in 2.44]
- debian/patches/CVE-2026-4046.patch
[fixed in 2.43-3]
- debian/patches/CVE-2026-5435.patch
[fixed in 2.43-3]
- debian/patches/CVE-2026-5450.patch
[fixed in 2.42-17]
- debian/patches/CVE-2026-5928.patch
[fixed in 2.42-17]
- debian/patches/CVE-2026-6238-*.patch
[fixed in 2.43-3]
* Delta added:
- filter -flto=auto from dpkg-buildflags to fix build
- fix tst-spawn-chdir with coreutils-rs due to invalid link name
- xfail tst-nscd-basic tstptrguard-static-dlopen (LP #2164576)
- d/tests: fix gcc dependency cross conflict on i386 autopkgtest
-- Simon Poirier <[email protected]> Tue, 11 Aug 2026
18:48:32 -0400
** Affects: glibc (Ubuntu)
Importance: Wishlist
Status: New
** Tags: dcr-merge
** Changed in: glibc (Ubuntu)
Importance: Undecided => Wishlist
** Changed in: glibc (Ubuntu)
Milestone: None => ubuntu-26.11
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2171212
Title:
Merge glibc 2.44-3 from Debian for tenacious cycle
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/glibc/+bug/2171212/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
