commit 2b179153ea3516adb8cb09717a080725ae6d2858 (HEAD -> gentoo/2.43, gentoo/gentoo/2.43)
Author:     H.J. Lu <hjl.tools@gmail.com>
AuthorDate: Mon Apr 13 10:46:42 2026 +0800
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Wed May 6 10:47:28 2026 +0200

    abilist.awk: Handle weak unversioned defined symbols
    
    After
    
    commit f685e3953f9a38a41bbd0a597f9882870cee13d5
    Author: H.J. Lu <hjl.tools@gmail.com>
    Date:   Wed Oct 29 09:49:57 2025 +0800
    
        elf: Don't set its DT_VERSYM entry for unversioned symbol
    
    ld no longer assigns version index 1 to unversioned defined symbol.
    For libmachuser.so, "objdump --dynamic-syms" reports:
    
    0000dd30  w   DF .text  000000f8              processor_start
    
    instead of
    
    0000dd30  w   DF .text  000000f8 (Base)       processor_start
    
    Also allow NF == 6 for weak unversioned dynamic symbols.  This fixes BZ
    33650.
    
    Signed-off-by: H.J. Lu <hjl.tools@gmail.com>
    Reviewed-by: Sam James <sam@gentoo.org>
    (cherry picked from commit ee5d1db2a81468413fbf7c82779ffa782f429d1a)
    (cherry picked from commit e9517114acc77c0b8af9da6700107df16882b701)

 scripts/abilist.awk | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

commit b8408369b86b283743fa0fc08637733952f1c89e
Author:     Florian Weimer <fweimer@redhat.com>
AuthorDate: Wed Mar 4 18:32:36 2026 +0100
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Wed May 6 10:47:06 2026 +0200

    Linux: Only define OPEN_TREE_* macros in <sys/mount.h> if undefined (bug 33921)
    
    There is a conditional inclusion of <linux/mount.h> earlier in the file.
    If that defines the macros, do not redefine them.  This addresses build
    problems as the token sequence used by the UAPI macro definitions
    changes between Linux versions.
    
    Reviewed-by: Adhemerval Zanella  <adhemerval.zanella@linaro.org>
    (cherry picked from commit d12b017cddfeb9fe9920ba054ae3dfcb8e9238b8)
    (cherry picked from commit 1634cc11a5a54efcd542f468cf2efa5cdfc65194)

 sysdeps/unix/sysv/linux/sys/mount.h | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

commit 1f41c59d327b2111d749005dc95644fcc69a345d
Author:     DJ Delorie <dj@redhat.com>
AuthorDate: Mon Jan 26 22:24:42 2026 -0500
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Wed May 6 10:46:35 2026 +0200

    include: isolate __O_CLOEXEC flag for sys/mount.h and fcntl.h
    
    Including sys/mount.h should not implicitly include fcntl.h
    as that causes namespace pollution and conflicts with kernel
    headers.  It only needs O_CLOEXEC for OPEN_TREE_CLOEXEC
    (although it shouldn't need that, but it's defined that way)
    so we provide that define (via a private version) separately.
    
    Reviewed-by: Adhemerval Zanella  <adhemerval.zanella@linaro.org>
    Tested-by: Florian Weimer <fweimer@redhat.com>
    (cherry picked from commit 419245719ccbc7dad6a97f24465e7f09c090327a)
    (cherry picked from commit d1d8d27164e9682e467b55a7b56bd6229b7beef2)

 io/fcntl.c                                   | 4 ++++
 sysdeps/unix/sysv/linux/Makefile             | 1 +
 sysdeps/unix/sysv/linux/alpha/bits/cloexec.h | 1 +
 sysdeps/unix/sysv/linux/bits/cloexec.h       | 1 +
 sysdeps/unix/sysv/linux/bits/fcntl-linux.h   | 4 +---
 sysdeps/unix/sysv/linux/hppa/bits/cloexec.h  | 1 +
 sysdeps/unix/sysv/linux/sparc/bits/cloexec.h | 1 +
 sysdeps/unix/sysv/linux/sys/mount.h          | 6 +++++-
 sysdeps/unix/sysv/linux/tst-mount.c          | 1 +
 9 files changed, 16 insertions(+), 4 deletions(-)

commit e0a7106a8df284ef459f977bfe818f4aaea7348f
Author:     Florian Weimer <fweimer@redhat.com>
AuthorDate: Thu Apr 16 19:13:43 2026 +0200
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Wed May 6 10:46:00 2026 +0200

    Use pending character state in IBM1390, IBM1399 character sets (CVE-2026-4046)
    
    Follow the example in iso-2022-jp-3.c and use the __count state
    variable to store the pending character.  This avoids restarting
    the conversion if the output buffer ends between two 4-byte UCS-4
    code points, so that the assert reported in the bug can no longer
    happen.
    
    Even though the fix is applied to ibm1364.c, the change is only
    effective for the two HAS_COMBINED codecs for IBM1390, IBM1399.
    
    The test case was mostly auto-generated using
    claude-4.6-opus-high-thinking, and composer-2-fast shows up in the
    log as well.  During review, gpt-5.4-xhigh flagged that the original
    version of the test case was not exercising the new character
    flush logic.
    
    This fixes bug 33980.
    
    Assisted-by: LLM
    Reviewed-by: Carlos O'Donell <carlos@redhat.com>
    (cherry picked from commit d6f08d1cf027f4eb2ba289a6cc66853722d4badc)
    (cherry picked from commit 8362e8ce10b24068bacc19552c128dd10e082fd9)

 iconvdata/Makefile       |   4 +-
 iconvdata/ibm1364.c      |  70 +++++++++++++++++-----
 iconvdata/tst-bug33980.c | 153 +++++++++++++++++++++++++++++++++++++++++++++++
 3 files changed, 211 insertions(+), 16 deletions(-)

commit b180ac98abd038b038c72d414dbc07e1ee1f6031
Author:     Michael Jeanson <mjeanson@efficios.com>
AuthorDate: Fri Feb 20 11:01:00 2026 -0500
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Wed May 6 10:45:40 2026 +0200

    tests: fix tst-rseq with Linux 7.0
    
    A sub-test of tst-rseq is to validate the return code and errno of the
    rseq syscall when attempting to register the exact same rseq area as was
    done in the dynamic loader.
    
    This involves finding the rseq area address by adding the
    '__rseq_offset' to the thread pointer and calculating the area size from
    the AT_RSEQ_FEATURE_SIZE auxiliary vector. However the test currently
    calculates the size of the rseq area allocation in the TLS block which
    must be a multiple of AT_RSEQ_ALIGN.
    
    Up until now that happened to be the same value since the feature size
    and alignment exposed by the kernel were below the minimum ABI size of
    32. Starting with Linux 7.0 the feature size has reached 33 while the
    alignment is now 64.
    
    This results in the test trying to re-register the rseq area with a
    different size and thus not getting the expected errno value.
    
    Signed-off-by: Michael Jeanson <mjeanson@efficios.com>
    Reviewed-by: Mathieu Desnoyers <mathieu.desnoyers@efficios.com>
    (cherry picked from commit 67f303b47dc584f204e3f2441b9832082415eebc)
    (cherry picked from commit ce1013a197eb4a3b8ff2b07e0672f4d0b976ce7c)

 sysdeps/unix/sysv/linux/tst-rseq.c | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

commit 971bff92c6d373f0de3b5309a909e8aff691ac5e
Author:     Adhemerval Zanella Netto <adhemerval.zanella@linaro.org>
AuthorDate: Sat Mar 21 08:11:06 2026 -0600
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Wed May 6 10:45:20 2026 +0200

    riscv: Resolve calls to memcpy using memcpy-generic in early startup
    
    This patch from Adhemerval sets up the ifunc redirections so that we
    resolve memcpy to memcpy_generic in early startup.  This avoids infinite
    recursion for memcpy calls before the loader is fully initialized.
    
    Tested-by: Jeff Law <jeffrey.law@oss.qualcomm.com>
    (cherry picked from commit 0a9e54d40a4321ebf7d87cdbc0868c43d1e8a657)
    (cherry picked from commit 60cabd0464c6722d4e1f13bbbeef191ea40ef2ef)

 elf/dl-reloc-static-pie.c                        | 1 +
 sysdeps/riscv/multiarch/dl-symbol-redir-ifunc.h  | 1 +
 sysdeps/unix/sysv/linux/riscv/multiarch/Makefile | 1 +
 3 files changed, 3 insertions(+)

commit a254024c437ccd71eb70c0df29f3783b569e1238
Author:     Adhemerval Zanella <adhemerval.zanella@linaro.org>
AuthorDate: Thu Feb 12 09:48:53 2026 -0300
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Wed May 6 10:45:03 2026 +0200

    elf: Use dl-symbol-redir-ifunc.h instead _dl_strlen
    
    Also replace the loop with strlen And remove
    -fno-tree-loop-distribute-patterns usage.
    
    It requires redirect the strlen to the baseline implementation
    for x86_64, aarch64, and loongarch64.
    
    Checked on x86_64-linux-gnu{-v2,v3} and aarch64-linux-gnu with
    both gcc-15 and clang-21.
    
    Reviewed-by: DJ Delorie <dj@redhat.com>
    (cherry picked from commit 15cc350e507101ac7b01e1343ac55087a6cd9317)
    (cherry picked from commit 02ffd413cf83c07c5c419b5cba72990e1ed140ca)

 elf/Makefile                                             |  6 ------
 elf/dl-tunables.c                                        | 14 +-------------
 string/Makefile                                          |  1 +
 sysdeps/aarch64/multiarch/dl-symbol-redir-ifunc.h        |  1 +
 sysdeps/aarch64/multiarch/strlen_generic.S               |  4 ++++
 sysdeps/loongarch/lp64/multiarch/dl-symbol-redir-ifunc.h |  1 +
 sysdeps/unix/sysv/linux/riscv/multiarch/Makefile         |  2 ++
 sysdeps/x86_64/multiarch/dl-symbol-redir-ifunc.h         | 10 ++++++++++
 8 files changed, 20 insertions(+), 19 deletions(-)

commit 6622325eb8a56671ff3f145e7759964b296807a7
Author:     Xi Ruoyao <xry111@xry111.site>
AuthorDate: Tue Feb 3 16:20:12 2026 +0800
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Wed May 6 10:44:41 2026 +0200

    elf: parse /proc/self/maps as the last resort to find the gap for tst-link-map-contiguous-ldso
    
    The initialization process of libc.so calls mmap() several times and the
    kernel may lay the maps into the gap.  If all pages in the gap are
    occupied, the test would not be able to find the gap with mmap() and the
    test would fail.
    
    The failure reproduces most frequently on LoongArch because with the
    commonly used page size (16 KiB) the gap only contains 4 pages and the
    probability they are all occupied is not near to zero.
    
    With the changes in the patch, a test run may output:
    
        info: ld.so link map is not contiguous
        info: object "/dev/zero" found at 0x7ffff1fe0000 - 0x7ffff1fe4000
        info: anonymous mapping found at 0x7ffff1fe4000 - 0x7ffff1fec000
    
    Also take the chance to fix a mistake in the "object found at" message
    which has puzzled me during the initial debug session.
    
    Signed-off-by: Xi Ruoyao <xry111@xry111.site>
    Reviewed-by: Adhemerval Zanella  <adhemerval.zanella@linaro.org>
    (cherry picked from commit aed8390a6a22e5751fc12704c0c5f2a8271fc286)
    (cherry picked from commit 26953143787bf2f7e9a0bf88749f547efe029e67)

 elf/tst-link-map-contiguous-ldso.c | 64 ++++++++++++++++++++++++++++++++++++--
 1 file changed, 62 insertions(+), 2 deletions(-)

commit e89f91b763e532533c25f72f3e040cb1a2462d2b (tag: gentoo/glibc-2.43-2)
Author:     Carlos O'Donell <carlos@redhat.com>
AuthorDate: Fri Mar 20 17:14:33 2026 -0400
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Fri Mar 27 17:22:29 2026 +0100

    resolv: Check hostname for validity (CVE-2026-4438)
    
    The processed hostname in getanswer_ptr should be correctly checked to
    avoid invalid characters from being allowed, including shell
    metacharacters. It is a security issue to fail to check the returned
    hostname for validity.
    
    A regression test is added for invalid metacharacters and other cases
    of invalid or valid characters.
    
    No regressions on x86_64-linux-gnu.
    
    Reviewed-by: Adhemerval Zanella  <adhemerval.zanella@linaro.org>
    (cherry picked from commit e10977481f4db4b2a3ce34fa4c3a1e26651ae312)
    (cherry picked from commit dd9945c0ba40d2dbc9eb7c99291ba6b69bd66718)

 resolv/Makefile                 |   3 +
 resolv/nss_dns/dns-host.c       |   2 +-
 resolv/tst-resolv-invalid-ptr.c | 255 ++++++++++++++++++++++++++++++++++++++++
 3 files changed, 259 insertions(+), 1 deletion(-)

commit 19cf43a95ca4f98bbd329628b51b55f08f399003
Author:     Carlos O'Donell <carlos@redhat.com>
AuthorDate: Fri Mar 20 16:43:33 2026 -0400
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Fri Mar 27 17:22:10 2026 +0100

    resolv: Count records correctly (CVE-2026-4437)
    
    The answer section boundary was previously ignored, and the code in
    getanswer_ptr would iterate past the last resource record, but not
    beyond the end of the returned data.  This could lead to subsequent data
    being interpreted as answer records, thus violating the DNS
    specification.  Such resource records could be maliciously crafted and
    hidden from other tooling, but processed by the glibc stub resolver and
    acted upon by the application.  While we trust the data returned by the
    configured recursive resolvers, we should not trust its format and
    should validate it as required.  It is a security issue to incorrectly
    process the DNS protocol.
    
    A regression test is added for response section crossing.
    
    No regressions on x86_64-linux-gnu.
    
    Reviewed-by: Collin Funk <collin.funk1@gmail.com>
    (cherry picked from commit 9f5f18aab40ec6b61fa49a007615e6077e9a979b)
    (cherry picked from commit 5c6fca0c62ce5bd6e68e259f138097756cbafd4d)

 resolv/Makefile                 |   4 +
 resolv/nss_dns/dns-host.c       |   2 +-
 resolv/tst-resolv-dns-section.c | 162 ++++++++++++++++++++++++++++++++++++++++
 3 files changed, 167 insertions(+), 1 deletion(-)

commit 102c0f14d6ee5e3b35d2b33dc2d1a4c0c571b5bb
Author:     Florian Weimer <fweimer@redhat.com>
AuthorDate: Mon Jan 26 17:12:37 2026 +0100
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Fri Mar 27 17:21:50 2026 +0100

    posix: Run tst-wordexp-reuse-mem test
    
    The test was not properly scheduled for execution with a Makefile
    dependency.
    
    Fixes commit 80cc58ea2de214f85b0a1d902a3b668ad2ecb302 ("posix: Reset
    wordexp_t fields with WRDE_REUSE (CVE-2025-15281 / BZ 33814").
    
    (cherry picked from commit bed2db02f3183e93f21d506786c5f884a1dec9e7)
    (cherry picked from commit 2be6cf2e75d091f2aef606af4ddd876855b77abb)

 posix/Makefile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

commit 035a3b754a61cc2917795a039f20804949590eb6
Author:     Jeff Bailey <jbailey@nisa.net>
AuthorDate: Fri Apr 25 03:40:46 2003 +0000
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Fri Mar 27 17:14:28 2026 +0100

    hurd: enable ldconfig
    
    DP: Description: Enable ldconfig and such on hurd-i386
    DP: Author: Jeff Bailey <jbailey@nisa.net>
    DP: Upstream status: Not submitted
    DP: Status Details: Upstream disagrees with this patch, but I'm
    DP: putting it in so that we have expected Debian behaviour on the
    DP: Hurd.  We should review this when the ELF standard supports runpath.
    DP: Date: 08 Apr 2003
    Imported-from: https://salsa.debian.org/glibc-team/glibc/-/blob/93d5069240943c4dcc950f6255028f7d1fcc2df0/debian/patches/hurd-i386/local-enable-ldconfig.diff

 sysdeps/mach/hurd/configure    | 3 ++-
 sysdeps/mach/hurd/configure.ac | 2 ++
 2 files changed, 4 insertions(+), 1 deletion(-)

commit d249c8ba42db184abfe3a9c32e453fe2424da92f
Author:     Samuel Thibault <samuel.thibault@ens-lyon.org>
AuthorDate: Sun Mar 22 22:24:48 2026 +0100
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sun Mar 22 22:24:48 2026 +0100

    Add -lmachuser -lhurduser to libc.so on GNU/Hurd.
    
    http://lists.gnu.org/archive/html/bug-hurd/2011-03/msg00112.html
    
    2011-03-29  Samuel Thibault  <samuel.thibault@ens-lyon.org>
    
            * Makerules ($(inst_libdir)/libc.so): Add -lmachuser -lhurduser to
            libc.so on GNU/Hurd.
    
    It's still unclear what we want to aim for.

 Makerules | 3 +++
 1 file changed, 3 insertions(+)

commit d93a22d2c89abce2c7ba9bbd294b0cd4b712b0ec
Author:     Yury Khrustalev <yury.khrustalev@arm.com>
AuthorDate: Tue Feb 3 15:51:11 2026 +0000
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sun Mar 22 00:14:22 2026 +0100

    aarch64: Tests for locking GCS
    
    Check that GCS is locked properly based on the value of the
    glibc.cpu.aarch64_gcs tunable.
    
    Test tst-gcs-execv checks that a child process can be spawned correctly
    when GCS is locked for the parent process.
    
    Test tst-gcs-fork checks that if GCS is not locked for the parent
    process, the forked child can disable GCS.
    
    Tests tst-gcs-lock and tst-gcs-lock-static check that GCS is locked
    for dynamic and static executables when run with aarch64_gcs=1.
    
    Tests tst-gcs-unlock and tst-gcs-unlock-static check that GCS is not
    locked for dynamic and static executables when run with aarch64_gcs=0.
    
    Test tst-gcs-lock-ptrace checks via ptrace that when GCS is locked,
    all GCS features are locked.
    
    Reviewed-by: Adhemerval Zanella  <adhemerval.zanella@linaro.org>
    (cherry picked from commit ad9784419e274cef9ba7152d7cd2490d291f837b)
    (cherry picked from commit 305ce0b58809869295e62c3caa7eda4c8e41134f)

 sysdeps/unix/sysv/linux/aarch64/Makefile           |  25 ++++
 sysdeps/unix/sysv/linux/aarch64/tst-gcs-execv.c    |  91 +++++++++++
 sysdeps/unix/sysv/linux/aarch64/tst-gcs-fork.c     |  75 ++++++++++
 sysdeps/unix/sysv/linux/aarch64/tst-gcs-helper.h   |   8 +-
 .../unix/sysv/linux/aarch64/tst-gcs-lock-ptrace.c  | 166 +++++++++++++++++++++
 .../unix/sysv/linux/aarch64/tst-gcs-lock-static.c  |   1 +
 sysdeps/unix/sysv/linux/aarch64/tst-gcs-lock.c     |  58 +++++++
 .../sysv/linux/aarch64/tst-gcs-unlock-static.c     |   2 +
 sysdeps/unix/sysv/linux/aarch64/tst-gcs-unlock.c   |   2 +
 9 files changed, 427 insertions(+), 1 deletion(-)

commit b745cf6dd2ade70b0aa9521bb78e52db8134e758
Author:     Yury Khrustalev <yury.khrustalev@arm.com>
AuthorDate: Mon Feb 2 18:27:53 2026 +0000
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sun Mar 22 00:13:55 2026 +0100

    aarch64: Lock GCS status at startup
    
    If GCS is enabled (see tunable glibc.cpu.aarch64_gcs), we lock all GCS
    operations (including status, write on shadow stack, and push to shadow
    stack) unless OPTIONAL policy is used.
    
    Reviewed-by: Adhemerval Zanella  <adhemerval.zanella@linaro.org>
    (cherry picked from commit 5061f524a2976daf3062dd34beae1d7d15502770)
    (cherry picked from commit 2ee41ba6ecd34bf7e5c4f90fdfa20376c1dcecb0)

 manual/tunables.texi                         | 54 +++++++++++++++++-----------
 sysdeps/aarch64/dl-gcs.c                     |  6 ++++
 sysdeps/aarch64/dl-start.S                   | 21 +++++++++--
 sysdeps/unix/sysv/linux/aarch64/libc-start.h | 29 ++++++++++++---
 4 files changed, 82 insertions(+), 28 deletions(-)

commit 1bb8c9a05c5703bce57dd59136dce7a9acb1c7b8
Author:     Yury Khrustalev <yury.khrustalev@arm.com>
AuthorDate: Mon Feb 16 12:46:39 2026 +0000
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sun Mar 22 00:13:39 2026 +0100

    tests: aarch64: fix makefile dependencies for dlopen tests for BTI
    
    Some BTI tests in the sysdeps/aarch64 directory use
    test shared objects via dlopen. Due to lack of direct makefile level
    dependencies on these modules these tests could be run before the
    required .so files would be created. This could lead to flaky test
    results when running make check with -j flag. This commit fixes it.
    
    Reviewed-by: Wilco Dijkstra  <Wilco.Dijkstra@arm.com>
    (cherry picked from commit 4db97f4d04cd2ad87f75b7219de2cb851fc62ebd)
    (cherry picked from commit fa4a40c7d497fa99e578495f02b5ad5e449c72b1)

 sysdeps/aarch64/Makefile | 6 ++++++
 1 file changed, 6 insertions(+)

commit 522abb88a3afb3c81b736fdd360527634993bbbd
Author:     Wilco Dijkstra <wilco.dijkstra@arm.com>
AuthorDate: Fri Feb 27 20:20:45 2026 +0000
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sun Mar 22 00:13:17 2026 +0100

    malloc: Avoid accessing /sys/kernel/mm files
    
    On AArch64 malloc always checks /sys/kernel/mm/transparent_hugepage/enabled to
    set the THP mode.  However this check is quite expensive and the file may not
    be accessible in containers. If DEFAULT_THP_PAGESIZE is non-zero, use
    malloc_thp_mode_madvise so that we take advantage of THP in all cases.  Since
    madvise is a fast systemcall, it adds only a small overhead compared to the
    cost of mmap and populating the pages.
    
    Reviewed-by: Aurelien Jarno <aurelien@aurel32.net>
    (cherry picked from commit 2e8a940df14e9e03fd5bd01015ebbd00c1a5e9b4)
    (cherry picked from commit 9898ea58b538e325a25f53bde021d0ca07d0a1c0)

 malloc/arena.c  |  9 +++++++++
 malloc/malloc.c | 18 ------------------
 2 files changed, 9 insertions(+), 18 deletions(-)

commit ac1d318aa2c34c8e95225e3b96f83120c64bc238
Author:     Adhemerval Zanella <adhemerval.zanella@linaro.org>
AuthorDate: Thu Feb 26 10:21:24 2026 -0300
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sun Mar 22 00:13:00 2026 +0100

    Add BZ 33904 entry to NEWS
    
    (cherry picked from commit c3ceb93dc4f67253037644dc8f194831e27f3160)

 NEWS | 1 +
 1 file changed, 1 insertion(+)

commit b2e0ebc3ba64ad34ad31c933513f564fe34f781b
Author:     Adhemerval Zanella <adhemerval.zanella@linaro.org>
AuthorDate: Thu Feb 26 09:49:19 2026 -0300
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sun Mar 22 00:12:41 2026 +0100

    debug: Fix build with --enable-fortify-source=1 (BZ 33904)
    
    The libio/bits/stdio2-decl.h only defined the prototypes for
    __vasprintf_chk and __vfprintf_chk for __USE_FORTIFY_LEVEL > 1.
    Also defined them for the internal header regardless.
    
    Checked with a build with --enable-fortify-source=1 and
    --enable-fortify-source=2 for all afftected ABIs.
    
    (cherry picked from commit f96e9bd2fecce3f0284479a5c0dac6989736c8c8)
    (cherry picked from commit 911bd469f80c6378da9319fe7508d012f95fc20c)

 include/bits/stdio2-decl.h | 2 ++
 1 file changed, 2 insertions(+)

commit eaa36e569aa493b488fc31b6f3ae0a4ffc708498
Author:     Florian Weimer <fweimer@redhat.com>
AuthorDate: Fri Feb 13 09:02:07 2026 +0100
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Mon Feb 23 15:54:32 2026 +0100

    nss: Missing checks in __nss_configure_lookup, __nss_database_get (bug 28940)
    
    This avoids a null pointer dereference in the
    nss_database_check_reload_and_get function, and assertion failures.
    
    Reviewed-by: Sam James <sam@gentoo.org>
    (cherry picked from commit 5b713b49443eb6a4e54e50e2f0147105f86dab02)
    (cherry picked from commit 48f5a05a7a1eeb9e0567ab429f654648f831307f)

 nss/Makefile                            |   1 +
 nss/nss_database.c                      |   7 +-
 nss/tst-nss-malloc-failure-getlogin_r.c | 345 ++++++++++++++++++++++++++++++++
 3 files changed, 352 insertions(+), 1 deletion(-)

commit 7d1e5974764b9938e25d08bf189293332eba1401
Author:     Florian Weimer <fweimer@redhat.com>
AuthorDate: Fri Feb 13 09:02:07 2026 +0100
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Mon Feb 23 15:54:17 2026 +0100

    Linux: In getlogin_r, use utmp fallback only for specific errors
    
    Most importantly, if getwpuid_r fails, it does not make sense to retry
    via utmp because the user ID obtained from there is less reliable than
    the one from /proc/self/loginuid.
    
    Reviewed-by: Sam James <sam@gentoo.org>
    (cherry picked from commit 28660f4b45afa8921c2faebaec2846f95f670ba0)
    (cherry picked from commit d6cb7ce0e98b2c16df5b2f5b9693d0130ccb8af5)

 sysdeps/unix/sysv/linux/getlogin_r.c | 21 +++++++++++++++++----
 1 file changed, 17 insertions(+), 4 deletions(-)

commit c19373bd7256e5317a03594a36191418a25a6246
Author:     Florian Weimer <fweimer@redhat.com>
AuthorDate: Fri Feb 13 09:02:07 2026 +0100
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Mon Feb 23 15:54:02 2026 +0100

    nss: Introduce dedicated struct nss_database_for_fork type
    
    The initialized field in struct nss_database_data is rather confusing
    because it is not used by the regular NSS code, only by the fork
    state synchronization code.  Introduce a separate type and place
    the initialized field there.
    
    Reviewed-by: Sam James <sam@gentoo.org>
    (cherry picked from commit 7bb859f4198d0be19c31a9937eae4f6c2c9a079e)
    (cherry picked from commit 140c760d711d03c0230dff218b5268b11935f92e)

 nss/nss_database.c | 14 +++++++-------
 nss/nss_database.h | 12 +++++++++---
 posix/fork.c       |  2 +-
 3 files changed, 17 insertions(+), 11 deletions(-)

commit 4e7a1009c70108befdec7dfd3215c9e1cda2485f
Author:     Andreas Schwab <schwab@suse.de>
AuthorDate: Tue Feb 3 12:41:23 2026 +0100
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Mon Feb 23 15:53:45 2026 +0100

    Don't include <bits/openat2.h> directly (bug 33848)
    
    Headers from bits directories should never be included directly, only via
    the official headers.
    
    (cherry picked from commit 0e47414ce87f3b088ff454fc6c7d1129ff9617ec)
    (cherry picked from commit 856c426a753450b8c6861a5b994a564f4fc16d4b)

 NEWS                              | 2 ++
 sysdeps/unix/sysv/linux/openat2.c | 1 -
 2 files changed, 2 insertions(+), 1 deletion(-)

commit d9f7d850fd362e3ce01c1d3a2f39fd95e773fcee
Author:     Andreas K. Hüttel <dilfridge@gentoo.org>
AuthorDate: Mon Jan 26 01:29:30 2026 +0100
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Mon Feb 23 15:53:29 2026 +0100

    po: Incorporate translatins (nl updated, ar new)
    
    Signed-off-by: Andreas K. Hüttel <dilfridge@gentoo.org>
    (cherry picked from commit bad2da7f779dbabb0e2e2c73037489e9f161183e)
    (cherry picked from commit 144ba302089cff5a2f2e1c9e1280faea9da9f8cc)

 po/ar.po | 7168 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 po/nl.po |   71 +-
 2 files changed, 7232 insertions(+), 7 deletions(-)

commit efbd0cfd3bcfd0a9986dc047ebdb71729d55c68d
Author:     Aurelien Jarno <aurelien@aurel32.net>
AuthorDate: Tue Jan 20 18:25:08 2026 +0100
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Mon Feb 23 15:53:14 2026 +0100

    Fix ldbl-128ibm ceill, floorl, roundl and truncl zero-sign handling
    
    When the result of ceill, floorl, roundl and truncl is zero, the sign of
    the result must match the sign of the input. For the IBM 128-bit long
    double format, the sign is determined by the high part.
    
    Ensure the correct sign when the high part is the result of
    computations, by copying the sign from the input high part to the output
    high part. On POWER, this conveniently maps to the fcpsgn instruction.
    
    In addition add test for the values provided in BZ #33623, and for the
    opposite value when the result is 0.
    
    Fixes: BZ #33623
    
    Reviewed-by: Adhemerval Zanella  <adhemerval.zanella@linaro.org>
    (cherry picked from commit 6f4b28b20aa9161aeb42a7f34f4d3b96194e5666)
    (cherry picked from commit 022abaeacbc85d8409bad22375b16a8c07d3ae39)

 NEWS                                   | 2 ++
 math/libm-test-ceil.inc                | 3 +++
 math/libm-test-floor.inc               | 3 +++
 math/libm-test-round.inc               | 4 ++++
 math/libm-test-trunc.inc               | 4 ++++
 sysdeps/ieee754/ldbl-128ibm/s_ceill.c  | 3 +++
 sysdeps/ieee754/ldbl-128ibm/s_floorl.c | 3 +++
 sysdeps/ieee754/ldbl-128ibm/s_roundl.c | 3 +++
 sysdeps/ieee754/ldbl-128ibm/s_truncl.c | 3 +++
 9 files changed, 28 insertions(+)

commit 52e48a32b5ad70e2611c3d05db44ae074f62c7f6 (tag: gentoo/glibc-2.43-1)
Author:     Ludwig Rydberg <ludwig.rydberg@gaisler.com>
AuthorDate: Fri Jun 13 12:22:41 2025 +0200
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sat Jan 24 02:33:51 2026 +0100

    sparc: Fix argument passing to __libc_start_main on SPARC32
    
    Use a custom __libc_start_main function so the highest stack address can
    be provided to __libc_start_main_impl without altering the content of
    the stack (as there is no room for adding arguments to the stack).
    
    The __libc_stack_end was written to [%sp+23*4] but that address is
    already in use (holds the pointer to argv) which led to corruption.
    
    Fixes: d952c6efaa87 ("sparc: Fix argument passing to __libc_start_main (BZ 32981)")
    Signed-off-by: Ludwig Rydberg <ludwig.rydberg@gaisler.com>
    (cherry picked from commit c8305ccf787df8b16a5db18254a3737069a390b7)

 sysdeps/sparc/sparc32/start.S                      |  6 ++---
 sysdeps/unix/sysv/linux/sparc/sparc32/libc-start.c | 30 ++++++++++++++++++++++
 2 files changed, 32 insertions(+), 4 deletions(-)

commit b2c1e1f8ab6adb672d606ac8b141279916cebd9b
Author:     Andreas K. Hüttel <dilfridge@gentoo.org>
AuthorDate: Mon Dec 1 23:53:01 2025 -0300
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sat Jan 24 02:33:48 2026 +0100

    Revert "sparc: Fix sparc32 Fix argument passing to __libc_start_main (BZ 32981)"
    
    This reverts commit 8b37c99ef19c79b2bfe84be3b5a4348ef09b0d76.
    
    (cherry picked from commit 1edc76ee1fb1e9d9a300bd0439580de91bea92e8)

 sysdeps/sparc/sparc32/start.S | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

commit 621dad6de91f5a355f8e8577715979f2cd304b0a
Author:     Adhemerval Zanella <adhemerval.zanella@linaro.org>
AuthorDate: Mon Apr 13 18:09:20 2020 -0300
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sat Jan 24 02:33:45 2026 +0100

    linux: Set internal DIR filepos as off64_t (BZ #23960, BZ #24050)
    
    It allows to obtain the expected entry offset on telldir and set
    it correctly on seekdir on platforms where long int is smaller
    than off64_t.
    
    On such cases opendir creates a map entry between the DIR d_off
    offset and the returned long int (the telldir return value).
    seekdir will then set the correct offset from the internal list
    using the telldir as the list key.
    
    It also removes the overflow check on readdir and the returned value
    will be truncated by the non-LFS off_t size.  As Joseph has noted
    in BZ #23960 comment #22, d_off is an opaque value and since
    telldir/seekdir works regardless of the returned dirent d_off value.
    
    Finally it removes the requirement to check for overflow values on
    telldir (BZ #24050).
    
    Checked on x86_64-linux-gnu, i686-linux-gnu, powerpc-linux-gnu,
    and arm-linux-gnueabihf.
    
    Rebased for glibc-2.41 by Andreas K. Hüttel <dilfridge@gentoo.org>

 include/dirent.h                            |   2 +-
 sysdeps/unix/sysv/linux/Makefile            |   2 +
 sysdeps/unix/sysv/linux/alpha/bits/dirent.h |   3 +
 sysdeps/unix/sysv/linux/bits/dirent.h       |   4 +
 sysdeps/unix/sysv/linux/closedir.c          |   4 +
 sysdeps/unix/sysv/linux/dirstream.h         |   9 +-
 sysdeps/unix/sysv/linux/opendir.c           |   3 +
 sysdeps/unix/sysv/linux/readdir.c           |  21 ++--
 sysdeps/unix/sysv/linux/readdir64.c         |  11 +++
 sysdeps/unix/sysv/linux/rewinddir.c         |   5 +
 sysdeps/unix/sysv/linux/seekdir.c           |  30 +++++-
 sysdeps/unix/sysv/linux/telldir.c           |  36 +++++++
 sysdeps/unix/sysv/linux/telldir.h           |  70 ++++++++++++++
 sysdeps/unix/sysv/linux/tst-opendir-lfs.c   |   2 +
 sysdeps/unix/sysv/linux/tst-opendir.c       | 145 ++++++++++++++++++++++++++++
 15 files changed, 329 insertions(+), 18 deletions(-)

commit 3e65f71ea0b9268c38e6d4e933b3395cbf9d5b23
Author:     Adhemerval Zanella <adhemerval.zanella@linaro.org>
AuthorDate: Wed Mar 1 14:41:23 2023 -0300
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sat Jan 24 02:33:42 2026 +0100

    support: Add xreallocarray
    
    As a wrapper over reallocarray.

 support/Makefile        |  1 +
 support/support.h       |  2 ++
 support/xreallocarray.c | 29 +++++++++++++++++++++++++++++
 3 files changed, 32 insertions(+)

commit 922ab844d8a64a1381a79e0239c0290eb51c1833
Author:     Adhemerval Zanella <adhemerval.zanella@linaro.org>
AuthorDate: Tue Oct 20 13:37:15 2020 -0300
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sat Jan 24 02:33:39 2026 +0100

    linux: Use getdents64 on non-LFS readdir
    
    It is similar to what non-LFS getdents do (including overflow check).
    
    Checked on x86_64-linux-gnu and i686-linux-gnu.

 sysdeps/unix/sysv/linux/readdir.c | 97 +++++++++++++++++++++++++++++----------
 1 file changed, 73 insertions(+), 24 deletions(-)

commit e0a6115f92d4723761954f3d6ded6f5496ee111d
Author:     Andreas K. Hüttel <dilfridge@gentoo.org>
AuthorDate: Fri Dec 14 20:43:04 2018 +0100
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sat Jan 24 02:33:37 2026 +0100

    Force -O0 in conform tests to survive $CC changes
    
    In bug #659030 Gentoo started passing user's CFLAGS via $CC variable.
    conform tests should but are not ready to handle -O1/-O2 yet.
    Tests fail to validate headers due to inlining of weak symbol aliases
    and other problems. Let's force it back to -O0 until it's fixed upstream.
    
    Original patch by Sergei, ported to the new python test framework by Andreas
    
    Bug: https://bugs.gentoo.org/659030
    Signed-off-by: Sergei Trofimovich <slyfox@gentoo.org>
    Signed-off-by: Andreas K. Hüttel <dilfridge@gentoo.org>

 conform/conformtest.py   | 6 ++++--
 conform/linknamespace.py | 4 +++-
 2 files changed, 7 insertions(+), 3 deletions(-)

commit 97a0bd7d3f51d9208d9c8b15535f89db773a5f9c
Author:     Andreas K. Hüttel <dilfridge@gentoo.org>
AuthorDate: Mon Oct 22 22:34:13 2018 +0200
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sat Jan 24 02:33:34 2026 +0100

    Adapt to Gentoo-specific /etc/mail/aliases
    
    Patch by pacho2
    
    Signed-off-by: Andreas K. Hüttel <dilfridge@gentoo.org>
    (cherry picked from commit 4e616cda056f471b799beba2b1cedc787ad4ecc0)
    Signed-off-by: Andreas K. Hüttel <dilfridge@gentoo.org>

 nss/nss_files/files-alias.c    |  2 +-
 nss/tst-nss-files-alias-leak.c | 18 +++++++++---------
 support/support_chroot.c       |  8 +++++++-
 3 files changed, 17 insertions(+), 11 deletions(-)

commit 8907b76b75edd04a9d1ccf49cb49c578ebb92088
Author:     Mike Frysinger <vapier@gentoo.org>
AuthorDate: Tue Aug 3 00:34:59 2021 +0200
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sat Jan 24 02:33:31 2026 +0100

    Disable ldconfig during install
    
    Do not bother running ldconfig on DESTDIR.  It's a waste of time as we
    won't use the result (portage will rebuild the cache after install).
    Also, the Gentoo sandbox does not currently catch chroot() behavior so
    we end up (incorrectly) flagging it as a violation as a write to /etc.
    
    http://sourceware.org/ml/libc-alpha/2012-08/msg00118.html
    https://bugs.gentoo.org/431038
    Signed-off-by: Andreas K. Hüttel <dilfridge@gentoo.org>

 Makefile | 1 +
 1 file changed, 1 insertion(+)

commit 45b58d6bd185b8c6d0c5b2b906243c1ecbaaecab
Author:     Andreas K. Hüttel <dilfridge@gentoo.org>
AuthorDate: Sat Jan 24 02:32:06 2026 +0100
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sat Jan 24 02:32:06 2026 +0100

    NEWS: add new section 2.43.1
    
    Signed-off-by: Andreas K. Hüttel <dilfridge@gentoo.org>

 NEWS | 5 +++++
 1 file changed, 5 insertions(+)

commit f02515d8a6963158e0e4be8034b96c658e1b9a32
Author:     Andreas K. Hüttel <dilfridge@gentoo.org>
AuthorDate: Fri Jan 23 23:59:36 2026 +0100
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Fri Jan 23 23:59:36 2026 +0100

    Replace advisories directory with file ADVISORIES
    
    Signed-off-by: Andreas K. Hüttel <dilfridge@gentoo.org>

 ADVISORIES                    |  2 ++
 advisories/GLIBC-SA-2023-0001 | 14 --------
 advisories/GLIBC-SA-2023-0002 | 15 ---------
 advisories/GLIBC-SA-2023-0003 | 15 ---------
 advisories/GLIBC-SA-2023-0004 | 16 ---------
 advisories/GLIBC-SA-2023-0005 | 18 ----------
 advisories/GLIBC-SA-2024-0001 | 15 ---------
 advisories/GLIBC-SA-2024-0002 | 15 ---------
 advisories/GLIBC-SA-2024-0003 | 13 --------
 advisories/GLIBC-SA-2024-0004 | 28 ----------------
 advisories/GLIBC-SA-2024-0005 | 22 -------------
 advisories/GLIBC-SA-2024-0006 | 32 ------------------
 advisories/GLIBC-SA-2024-0007 | 28 ----------------
 advisories/GLIBC-SA-2024-0008 | 26 ---------------
 advisories/GLIBC-SA-2025-0001 | 40 ----------------------
 advisories/GLIBC-SA-2025-0002 | 23 -------------
 advisories/GLIBC-SA-2025-0003 | 30 -----------------
 advisories/GLIBC-SA-2025-0004 | 29 ----------------
 advisories/GLIBC-SA-2025-0005 | 14 --------
 advisories/GLIBC-SA-2026-0001 | 41 -----------------------
 advisories/GLIBC-SA-2026-0002 | 36 --------------------
 advisories/GLIBC-SA-2026-0003 | 36 --------------------
 advisories/README             | 77 -------------------------------------------
 23 files changed, 2 insertions(+), 583 deletions(-)
