commit 28e32c5868e31adf9cc186a3cef5ac0b043bddc9 (HEAD -> gentoo/2.43, gentoo/gentoo/2.43)
Author:     Adhemerval Zanella <adhemerval.zanella@linaro.org>
AuthorDate: Wed Aug 12 09:03:17 2026 -0300
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Thu Aug 13 21:25:16 2026 +0800

    m68k: Fix fmod/fmodf infinite recursion (BZ 34508)
    
    Commits 6deadd4eb6a and ade9f30ce27 changed m68k fmod to call
    __m81_u(fmod), instead of the mathimpl.h inline
    __m81_u(__ieee754_fmod) (that wraps the m68k fmod instruction).
    This leads to infinite recursion.
    
    Tested-by: John Paul Adrian Glaubitz <glaubitz@physik.fu-berlin.de>
    
    (cherry picked from commit bb213471bedc177b8efd3178584137fb81cc976a)
    (cherry picked from commit 8017bcfc4d9bd16083cb7f3d8eda7d07b4593b09)

 NEWS                              | 2 ++
 sysdeps/m68k/m680x0/fpu/e_fmod.c  | 2 +-
 sysdeps/m68k/m680x0/fpu/e_fmodf.c | 2 +-
 3 files changed, 4 insertions(+), 2 deletions(-)

commit e1c0dce444301219bedbdfdea24a8cac8e9db786
Author:     Adhemerval Zanella <adhemerval.zanella@linaro.org>
AuthorDate: Mon Apr 13 16:33:30 2026 -0300
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Thu Aug 13 21:25:01 2026 +0800

    posix: Fix wordexp WRDE_APPEND to preserve state on non-NOSPACE errors (BZ 34090, CVE-2026-6368)
    
    The previous implementation saved a copy of the wordexp_t struct at
    entry and blindly restored it on error via (*pwordexp = old_word).
    This is incorrect when WRDE_APPEND is set because w_addword may have
    called realloc on we_wordv during partial processing before the error
    was detected.  If realloc relocated the buffer, the saved we_wordv
    pointer is dangling; restoring it causes a use-after-free in the
    caller (e.g. via wordfree), and the relocated buffer is leaked.
    
    Fix this by duplicating the we_wordv pointer array at entry when
    WRDE_APPEND is set, so that all subsequent realloc calls inside
    w_addword operate on the copy.
    
    This change also fixes a POSIX conformance issue: if the WRDE_APPEND
    flag is specified, pwordexp->we_wordc and pwordexp->we_wordv shall
    not be modified.
    
    Also fix two pre-existing error return paths in the '"' and '\'' cases
    that returned directly from w_addword failures instead of going through
    do_error, which would leak the saved array (and previously would also
    skip the word cleanup).
    
    Checked on x86_64-linux-gnu and i686-linux-gnu.
    
    Reviewed-by: DJ Delorie <dj@redhat.com>
    (cherry picked from commit e2cefe16c37a617df9f11407cb00a272a6098823)
    (cherry picked from commit a388c4002d42d83f2858897c947308df648310b1)

 posix/Makefile             |   1 +
 posix/tst-wordexp-append.c | 393 +++++++++++++++++++++++++++++++++++++++++++++
 posix/wordexp.c            |  69 ++++++--
 3 files changed, 454 insertions(+), 9 deletions(-)

commit 396394ef1db11ccd3394239e34bb6b61d001f56c
Author:     Sachin Monga <smonga@linux.ibm.com>
AuthorDate: Thu Jul 23 10:41:51 2026 -0500
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Thu Aug 13 21:24:42 2026 +0800

    ppc64le: Restore optimized memchr for power10 [BZ #34300]
    
    Restore the POWER10 memchr implementation reverted in commit
    a7877bb6685300f159fa095c9f50b22b112cddb8 [BZ #33059], addressing the
    actual cause:
    The non-volatile vector register v20 used as the
    zero vector (M_VREG_ZERO) is replaced with the volatile register v17.
    
    Additionally, the assembler workaround used earlier for the
    instructions lxvp and vextractbm is replaced with actual
    instructions.
    
    (cherry picked from commit c9b5a4a593f24e19c889726f8fca9557962cf974)
    (cherry picked from commit bc95068f5f9d7f57d0f01757fed0900893b122b8)

 sysdeps/powerpc/powerpc64/le/power10/memchr.S      | 299 +++++++++++++++++++++
 sysdeps/powerpc/powerpc64/multiarch/Makefile       |   2 +-
 .../powerpc/powerpc64/multiarch/ifunc-impl-list.c  |   6 +
 .../powerpc/powerpc64/multiarch/memchr-power10.S   |  28 ++
 sysdeps/powerpc/powerpc64/multiarch/memchr.c       |  20 +-
 5 files changed, 348 insertions(+), 7 deletions(-)

commit 89ac7b56a09fc17f606c77b2541df9cf1a44fc1c
Author:     Fabian Rast <fabian.rast@tum.de>
AuthorDate: Thu Jun 11 14:30:37 2026 +0200
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Thu Aug 13 21:24:26 2026 +0800

    rtld: cache cpuid results on the stack for intel
    
    dl_init_cacheinfo retrieves various information about cache
    sizes, using the cpuid instruction on x86.
    Previously, the same cpuid leaves were queried multiple times.
    This behavior caused intel_check_word to prominently show up in
    profiles of dynamic loader startup on the Intel(R) Xeon(R) Gold 6430.
    The big performance impact could not be reproduced on other Intel cpus.
    
    This patch reduces the number of cpuid queries on startup
    by caching their results on the stack for reuse when searching for a
    different cache size value.
    This approach does not change the overall design of
    the cache enumeration code (repeated calls to handle_* functions).
    The values are cached on the stack instead of globally (e.g.
    in the cpu_features global) because they are never needed after
    early initialization.
    
    The cache is only active for Intel cpus, because it has not yet
    been shown through benchmarks that it meaningfully improves performance
    for other processors.
    
    Signed-off-by: Fabian Rast <fabian.rast@tum.de>
    Reviewed-by: Sunil K Pandey <skpgkp2@gmail.com>
    (cherry picked from commit df83fa8813eb53dcb232462a4f6dd00c873115f0)
    (cherry picked from commit 1c9988e52540c844928c6d93ff45305adc2c24a0)

 sysdeps/x86/dl-cacheinfo.h | 121 +++++++++++++++++++++++++++------------------
 1 file changed, 74 insertions(+), 47 deletions(-)

commit a16c898eb36db0d9738a44d7e31004bb3bb8599c
Author:     Adhemerval Zanella <adhemerval.zanella@linaro.org>
AuthorDate: Tue Apr 14 10:50:37 2026 -0300
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Thu Aug 13 21:24:05 2026 +0800

    posix: Fix stack overflow in wordexp tilde expansion (BZ 34091, CVE-2026-6791)
    
    The parse_tilde function previously used strndupa to allocate memory
    for the parsed username on the stack, and since the input is
    user-defined, this can lead to a stack overflow.
    
    This patch fixes the issue by replacing strndupa with scratch_buffer,
    by reusing the buffer used in the __getpwnam_r call.
    
    The new “tst-wordexp-tilde.c” test is a test-container to avoid using
    system-defined NSS modules.
    
    Checked on x86_64-linux-gnu and i686-linux-gnu.
    
    (cherry picked from commit 07c24f35392b727e6100d33edfdf811a6c68c218)
    (cherry picked from commit dae425b554207f7c4599c7fac707ad4c08545674)

 posix/Makefile                                 |   1 +
 posix/tst-wordexp-tilde.c                      | 244 +++++++++++++++++++++++++
 posix/tst-wordexp-tilde.root/etc/group         |   1 +
 posix/tst-wordexp-tilde.root/etc/nsswitch.conf |   3 +
 posix/tst-wordexp-tilde.root/etc/passwd        |   1 +
 posix/wordexp.c                                |  24 ++-
 6 files changed, 268 insertions(+), 6 deletions(-)

commit 8aa05acd3c9e137c07e039a685d82f40c2cadbd8
Author:     Florian Weimer <fweimer@redhat.com>
AuthorDate: Fri Jun 19 18:22:20 2026 +0200
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Thu Aug 13 21:23:48 2026 +0800

    resolv: Add test case tst-ns_sprintrr (bug 34033, bug 34069)
    
    This test case covers both input buffer overreads and output buffer
    overflows.  It should systematically cover these issues.
    
    I used code auto-generation for updating the test expectations for
    truncated RDATA in TXT, ISDN records, after writing the rest
    of the test by hand.
    
    Assisted-by: LLM
    Reviewed-by: Carlos O'Donell <carlos@redhat.com>
    Reviewed-by: Adhemerval Zanella <adhemerval.zanella@linaro.org>
    (cherry picked from commit 4ba0b79b9596e5a4951cc9eaa1546a55e543e083)
    (cherry picked from commit 8759917de589b125a08f63653170dfcb3de4df31)

 resolv/Makefile          |   2 +
 resolv/tst-ns_sprintrr.c | 329 +++++++++++++++++++++++++++++++++++++++++++++++
 2 files changed, 331 insertions(+)

commit 74cf94489940326db5881adc64b2194e7b4b4717
Author:     Florian Weimer <fweimer@redhat.com>
AuthorDate: Fri Jun 19 18:22:20 2026 +0200
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Thu Aug 13 21:23:33 2026 +0800

    resolv: Fix buffer overreads in ns_sprintrrf (CVE-2026-6238)
    
    Check that the RDATA payload does not require more than RDATALEN
    bytes while processing it.  The fixes cover A6, LOC records.
    (CERT, TKEY, TSIG were fixed before, by switching to the generic
    formatter.)
    
    The vulnerable LOC record handling was first introduced before
    glibc 2.0, in commit ee188d555b8c32ad9704a7440cab400af967292f.
    
    CERT, TSIG, TKEY handling came with commit
    b43b13ac2544b11f35be301d1589b51a8473e32b, released with glibc 2.2.
    
    A6 record handling was introduced in commit
    91633816430e7ec5a19fe3ff510a7c4822a9557e ("* resolv/ns_print.c
    (ns_sprintrrf): Handle ns_t_a6 and ns_t_opt."), which went into glibc
    2.7.
    
    This fixes bug 34069.
    
    Reviewed-by: Carlos O'Donell <carlos@redhat.com>
    Reviewed-by: Adhemerval Zanella <adhemerval.zanella@linaro.org>
    (cherry picked from commit a7b60d23bbb56eaef59f4962e4140062e552600a)
    (cherry picked from commit 3a418da6a3938756763980541e440dbdd46900fb)

 resolv/ns_print.c | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

commit b7b3dc3ca85a1e23f1ef0f9ef57acd02f6bf3b47
Author:     Florian Weimer <fweimer@redhat.com>
AuthorDate: Fri Jun 19 18:22:20 2026 +0200
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Thu Aug 13 21:23:17 2026 +0800

    resolv: More types as unknown in ns_sprintrrf (CVE-2026-5435)
    
    Specifically, CERT, TKEY, TSIG, OPT.  This removes the buggy
    implementations of TSIG, fixing bug 34033, and partially
    fixing bug 34069.
    
    Reviewed-by: Carlos O'Donell <carlos@redhat.com>
    Reviewed-by: Adhemerval Zanella <adhemerval.zanella@linaro.org>
    (cherry picked from commit ca44a6609c29a683b03575fa035c6d17aa591e72)
    (cherry picked from commit e64ae5a591f0604b7504df4df631857bb11cc78b)

 resolv/ns_print.c | 95 -------------------------------------------------------
 1 file changed, 95 deletions(-)

commit 6457b303eb3d1925c99074fff2f69843f0a223ad
Author:     Florian Weimer <fweimer@redhat.com>
AuthorDate: Fri Jun 19 18:22:20 2026 +0200
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Thu Aug 13 21:23:01 2026 +0800

    resolv: Check for inet_ntop failure in ns_sprintrrf
    
    This makes the output more consistent (either failure or complete
    output) and helps with systematic testing with varying buffer
    sizes.
    
    Reviewed-by: Carlos O'Donell <carlos@redhat.com>
    Reviewed-by: Adhemerval Zanella <adhemerval.zanella@linaro.org>
    (cherry picked from commit cd0db208d56a2cecd528b8ae96df752ba5344d9a)
    (cherry picked from commit c9225a3e73a8dba1e602802aef70f7f9dfeb4606)

 resolv/ns_print.c | 18 +++++++++++-------
 1 file changed, 11 insertions(+), 7 deletions(-)

commit 51d727ddb6629c4af18b22607adb6a1b77be44dd
Author:     Florian Weimer <fweimer@redhat.com>
AuthorDate: Fri Jun 19 18:22:20 2026 +0200
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Thu Aug 13 21:22:43 2026 +0800

    resolv: Improve formatting of unknown records in ns_sprintrrf
    
    Do not add the "unknown RR type" comment.  After adding the TYPE
    prefix, the number is largely redundant.
    
    Reviewed-by: Carlos O'Donell <carlos@redhat.com>
    Reviewed-by: Adhemerval Zanella <adhemerval.zanella@linaro.org>
    (cherry picked from commit d58415eb17d457a160af99f9e8ab164404ca151b)
    (cherry picked from commit c46f7b2fd6cdbecaa821f35f7e2f9c989e7a3767)

 resolv/ns_print.c | 9 +++------
 1 file changed, 3 insertions(+), 6 deletions(-)

commit bbe916c92abbee6adeb18a5670b03f864bf4e599
Author:     Florian Weimer <fweimer@redhat.com>
AuthorDate: Fri Jun 19 18:22:20 2026 +0200
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Thu Aug 13 21:22:28 2026 +0800

    resolv: Fix ns_sprintrrf formatting of class, type values (bug 34289)
    
    The p_class and p_type results could overwrite each other if both
    were unknown.  Format unknown values with CLASS and TYPE prefixes,
    as in RFC 3597.  Handle A6 separately because it cannot be added
    to __p_type_syms for ABI reasons.
    
    Reviewed-by: Carlos O'Donell <carlos@redhat.com>
    Reviewed-by: Adhemerval Zanella <adhemerval.zanella@linaro.org>
    (cherry picked from commit f69b7f95e3694177546faec25d88bb266885c3b8)
    (cherry picked from commit 1d7d1a16b0f60b37d868e6727dcfc57ae4f2bc5a)

 resolv/ns_print.c | 38 +++++++++++++++++++++++++++++++++-----
 1 file changed, 33 insertions(+), 5 deletions(-)

commit 352b94e1dda81b13ab5c91fd8ec81f5e23b67d83
Author:     Florian Weimer <fweimer@redhat.com>
AuthorDate: Fri Jun 19 18:22:20 2026 +0200
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Thu Aug 13 21:22:13 2026 +0800

    resolv: Declare __p_class_syms, __p_type_syms for internal use
    
    Reviewed-by: Carlos O'Donell <carlos@redhat.com>
    Reviewed-by: Adhemerval Zanella <adhemerval.zanella@linaro.org>
    (cherry picked from commit 360f352c9a6da545d798ef3015e73ca114f0d230)
    (cherry picked from commit 349297a4ebaedf80701a7505351a23a8bdbd9808)

 include/resolv.h   | 5 +++++
 resolv/res_debug.c | 4 ----
 2 files changed, 5 insertions(+), 4 deletions(-)

commit 8c12fb8e36200d06baa9692054586abc5f327fee
Author:     John David Anglin <danglin@gcc.gnu.org>
AuthorDate: Tue Jun 23 13:41:10 2026 -0400
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Thu Aug 13 21:21:57 2026 +0800

    hppa: Fix missing call to __feraiseexcept (BZ 34306)
    
    The feupdateenv function is supposed to raise exceptions after
    installing the environment represented by its envp argument.
    This was accidentally missed on hppa.
    
    The failure to raise exceptions was noticed by the failure of
    the math/test-narrowing-trap test.
    
    Signed-off-by: John David Anglin <dave.anglin@bell.net>
    (cherry picked from commit fdf10644d6ee345c7b5277c3fa009c1bedb92d60)

 sysdeps/hppa/fpu/feupdateenv.c | 5 +++++
 1 file changed, 5 insertions(+)

commit 7da2d6fb2913332e11c15ce8950763449d108300
Author:     Adhemerval Zanella <adhemerval.zanella@linaro.org>
AuthorDate: Wed May 13 08:32:24 2026 -0300
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Thu Aug 13 21:21:40 2026 +0800

    arm: Save/restore VFP registers in PLT trampolines (BZ 34144, BZ 15792)
    
    _dl_runtime_resolve and _dl_runtime_profile only preserved the integer
    argument registers (r0-r3) across the inner call to _dl_fixup /
    _dl_profile_fixup.  Two related ABI requirements demand more:
    
      * Under AAPCS-VFP, d0-d7 hold the caller's double arguments to the
        function being resolved.  Recent GCC emits VFP instructions inside
        the fixup routines, clobbering them, so the resolved function sees
        corrupted arguments (BZ 34144).
    
      * Per RTABI32, the __aeabi_mem* helpers (and similar runtime helpers
        reachable through the dynamic linker) must only corrupt integer
        core registers.  IFUNC resolvers, audit modules, and interposed
        malloc invoked during symbol resolution may also use VFP, even on
        softfp ABI builds (BZ 15792).
    
    Save all call-clobbered VFP state -- d0-d15 unconditionally, d16-d31
    when HWCAP_ARM_VFPD32 is set, and fpscr -- around the inner fixup
    call.  Whether VFP is usable is a property of the hardware, not of
    the ABI glibc was built with, so the decision is gated on AT_HWCAP at
    runtime in both hardfp and softfp builds; hardfp builds will always
    find HWCAP_ARM_VFP set, while softfp builds running on a non-VFP CPU
    correctly skip the save.
    
    For _dl_runtime_profile the save area is slipped in just before the
    bl to _dl_profile_fixup; the outgoing framesizep argument is
    recomputed to account for the extra frame, and both the fast path
    (no audit framesize) and the slow path (audit wraps with
    pltenter/pltexit) traverse the restore before splitting.
    
    Checked on arm-linux-gnueabihf.
    
    Tested-by: Aurelien Jarno <aurelien@aurel32.net>
    Reviewed-by: Wilco Dijkstra  <Wilco.Dijkstra@arm.com>
    (cherry picked from commit 1111fbdd3e7ebed402800bc23e67055eaae0d972)
    (cherry picked from commit a6fa9a95949e3a24c09590a61e96f500e9c75c43)

 sysdeps/arm/Makefile               |  19 +++++++
 sysdeps/arm/dl-trampoline.S        | 110 +++++++++++++++++++++++++++++++++++--
 sysdeps/arm/tst-bz34144-audit.c    |  32 +++++++++++
 sysdeps/arm/tst-bz34144-auditmod.c |  50 +++++++++++++++++
 sysdeps/arm/tst-bz34144-mod.c      |  28 ++++++++++
 sysdeps/arm/tst-bz34144.c          |  32 +++++++++++
 6 files changed, 266 insertions(+), 5 deletions(-)

commit a72d6ca9d5e7dfe81c7c71588579b154ba2dc354
Author:     Florian Weimer <fweimer@redhat.com>
AuthorDate: Tue Jun 9 07:28:02 2026 +0200
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Thu Aug 13 21:21:19 2026 +0800

    iconv: Suppress intermediate errors with //TRANSLIT (bug 34236)
    
    When tentatively converting characters on behalf of
    __gconv_transliterate, do not create a persistent error.  Just
    produce a local error, and rely on __gconv_transliterate to
    produce the error if all transliteration options are exhausted.
    
    This fixes transliteration of “½” to ASCII, which cannot use the
    “ 1⁄2 ” alternative.  Eventually, the “ 1/2 ” alternative is chosen,
    but the error sticks.  Therefore, iconv exited with status 1 before
    this change.
    
    Adjust iconv/tst-iconv_prog.sh to test both C and en_US.UTF-8 locales.
    This requires changing the way the ICONV template is defined, so that
    run_program_env is evaluated multiple times.
    
    Fixes commit 9a4b0eaf726f5404c6683d5c7c5e86f61c3f3fbc ("iconv: do not
    report error exit with transliteration [BZ #32448]"),
    commit 6cbf845fcdc76131d0e674cee454fe738b69c69d ("iconv: Preserve
    iconv -c error exit on invalid inputs (bug 32046)"), and bug 34236.
    
    Reviewed-by: Aurelien Jarno <aurelien@aurel32.net>
    (cherry picked from commit e9325bd7d04aacc45cf39505e279b1ca9de22c08)
    (cherry picked from commit fe0ccc9564c3476f7171cb005884560da0699773)

 iconv/Makefile          |  3 ++-
 iconv/loop.c            |  6 ++++--
 iconv/tst-iconv_prog.sh | 30 ++++++++++++++++++++----------
 3 files changed, 26 insertions(+), 13 deletions(-)

commit 1b9a9ffe139ad8a75874f192208415816b1d9560
Author:     Samuel Thibault <samuel.thibault@ens-lyon.org>
AuthorDate: Tue May 26 23:07:12 2026 +0200
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Thu Aug 13 21:21:02 2026 +0800

    Hurd: restore some SIOC ioctls
    
    We do not define struct ifreq_short and ifreq_int, but we do
    define _IOT_ifreq_short and _IOT_ifreq_int, and need these for
    sysdeps/gnu/ifaddrs.c and sysdeps/mach/hurd/if_index.c
    
    (cherry picked from commit b507b6d4c6138bfa3d6ff04ff880dc626c1c3605)
    (cherry picked from commit 22f3d24a6b6817086dc7b4898a06a969696c9f5e)

 sysdeps/mach/hurd/bits/ioctls.h | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

commit 789ac0722fa41ff5e4eb1053e28f16304d52d6b8
Author:     Samuel Thibault <samuel.thibault@ens-lyon.org>
AuthorDate: Tue May 26 22:35:55 2026 +0200
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Thu Aug 13 21:20:48 2026 +0800

    Hurd: comment ioctls which cannot currently compile
    
    We don't currently have struct ifreq_short, ifreq_int and ifaliasreq, so
    don't let applications even try to compile these.
    
    (cherry picked from commit 707311226345f87ce6a1536a7d7365ce34b236b3)
    (cherry picked from commit a13ebdbc7e644c0d7ee2b638734799c0d5405fdd)

 sysdeps/mach/hurd/bits/ioctls.h | 18 +++++++++---------
 1 file changed, 9 insertions(+), 9 deletions(-)

commit 7a5c2c8a7ec0acbb5af5961f0015c09a03387436
Author:     Samuel Thibault <samuel.thibault@ens-lyon.org>
AuthorDate: Tue May 26 22:28:49 2026 +0200
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Thu Aug 13 21:20:34 2026 +0800

    Hurd: comment PF_ROUTE/AF_ROUTE defines
    
    Comment out the PF_ROUTE and AF_ROUTE defines, since they would be used for
    PF_ROUTE setsockopts, which are not available on Hurd.
    
    (cherry picked from commit ec98b25af5ae4b6dff24388ce10d0e64a7671363)
    (cherry picked from commit 446f708e4cf8845536549a7fa414142fc89c6887)

 sysdeps/mach/hurd/bits/socket.h | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

commit 87fb471baf3c280bf27182742155314f45604f3c
Author:     Pino Toscano <toscano.pino@tiscali.it>
AuthorDate: Tue May 26 22:27:02 2026 +0200
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Thu Aug 13 21:20:16 2026 +0800

    Hurd: comment PF_LINK/AF_LINK defines
    
    Comment out the PF_LINK and AF_LINK defines, since they are usually associated
    with struct sockaddr_dl, which is not available on Hurd.
    
    (cherry picked from commit 59a0de89ba28028f5ec3f32c1da648a0d6f1dfc5)
    (cherry picked from commit ced45fd472eb77e66cf9dea169ee7b1fa5cf8d78)

 sysdeps/mach/hurd/bits/socket.h | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

commit afcf77d85989c23d741bf3bf73107cd0fb19cfef
Author:     Sam James <sam@gentoo.org>
AuthorDate: Sat Jun 6 20:32:27 2026 +0100
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Thu Aug 13 21:19:57 2026 +0800

    elf: don't clobber ld.so.conf in tst-glibc-hwcaps-prepend-cache [BZ #34210]
    
    dbe5065f2166be20e57a24f246a40d50e001a05d and ae589cb84df10825fc545a45c7007a5f79409bf1
    cater for setups where ld.so.conf{,.d} is required to find runtime support
    libraries, but tst-glibc-hwcaps-prepend-cache clobbers the created ld.so.conf
    with its own entry.
    
    Fix it to instead use the ld.so.conf.d created in ae589cb84df10825fc545a45c7007a5f79409bf1
    to co-exist with existing entries.
    
    Bug: https://bugs.gentoo.org/976773
    Bug: https://sourceware.org/bugzilla/show_bug.cgi?id=31901
    Bug: https://sourceware.org/bugzilla/show_bug.cgi?id=34210
    Tested-by: Andreas K. Hüttel <dilfridge@gentoo.org>
    Reported-by: Eli Schwartz <eschwartz@gentoo.org>
    Reviewed-by: Andreas K. Hüttel <dilfridge@gentoo.org>
    (cherry picked from commit d0cc9bf859d0434e397530d75a6507f13db79fba)
    (cherry picked from commit 89cbf46693714064a57e3ae76381baf8f3ba8368)

 elf/tst-glibc-hwcaps-prepend-cache.c | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

commit 1ece6a1eae4f6d5879d475a94474e5a7faa45106
Author:     Jakub Jelinek <jakub@redhat.com>
AuthorDate: Tue Feb 17 17:06:48 2026 +0100
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Thu Aug 13 21:19:41 2026 +0800

    Rename __unused fields to __glibc_reserved.
    
    __unused is often defined to __attribute__((unused)) in BSD
    sources and furthermore libstdc++ testsuite uses it as a macro
    to verify libstdc++ headers don't use __unused identifiers.
    In ~2012 glibc headers have been cleaned up, but some new
    uses of __unused have reappeared (s390 fenv.h already many
    years ago, the rest last November).
    
    Reviewed-by: Florian Weimer <fweimer@redhat.com>
    (cherry picked from commit 243bdfec8f7cd4a85a8ce6e4e9a5a5accd3ce1aa)
    (cherry picked from commit 18b97b03b7442d8ba0860e43145f8724c9e77b17)

 sysdeps/powerpc/nptl/bits/struct_mutex.h | 2 +-
 sysdeps/s390/fpu/bits/fenv.h             | 8 ++++----
 sysdeps/s390/nptl/bits/struct_mutex.h    | 2 +-
 sysdeps/x86/nptl/bits/struct_mutex.h     | 2 +-
 4 files changed, 7 insertions(+), 7 deletions(-)

commit ccc888cecd740e3452ea0f17a18e80a2ee20e734
Author:     Adhemerval Zanella <adhemerval.zanella@linaro.org>
AuthorDate: Wed May 27 16:48:19 2026 -0300
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Thu Aug 13 21:19:24 2026 +0800

    math: Fix fma alignment when exponent difference is exactly 64 (BZ 34183)
    
    When d (the exponent difference between z and x*y) is exactly 64,
    the alignment path shifts z left by 64 bits via (zhi = nz.m, zlo = 0)
    and decrements d to 0, then takes the inner 'if (d < 64)' branch
    which evaluates 'rhi << (64 - d)' with d == 0.  A shift by 64 of a
    64-bit value is UB in C.
    
    Add the explicit 'if (d == 0)' empty branch (present in the
    original musl implementation).
    
    Checked on x86_64-linux-gnu with --disable-multi-arch and
    arm-linux-gnueabihf.
    
    Reviewed-by: H.J. Lu <hjl.tools@gmail.com>
    (cherry picked from commit 1e7935ae87550323021876f3099bb04aeadd8491)
    (cherry picked from commit a47b5b2b3eee486c4bea0df65af775296a13f09d)

 math/auto-libm-test-in         |  2 ++
 math/auto-libm-test-out-fma    | 25 +++++++++++++++++++++++++
 sysdeps/ieee754/dbl-64/s_fma.c |  5 ++++-
 3 files changed, 31 insertions(+), 1 deletion(-)

commit 5616e5dde9fd41fdbc1a0df7a6637baa4d45bc92
Author:     Rocket Ma <marocketbd@gmail.com>
AuthorDate: Fri Apr 17 23:48:41 2026 -0700
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Thu Aug 13 21:19:06 2026 +0800

    stdio-common: Fix buffer overflow in scanf %mc [BZ #34008]
    
    * stdio-common/vfscanf-internal.c: When enlarging allocated buffer with
    format %mc or %mC, glibc allocates one byte less, leading to
    user-controlled one byte overflow. This commit fixes BZ #34008, or
    CVE-2026-5450.
    
    Reviewed-by: Carlos O'Donell <carlos@redhat.com>
    Signed-off-by: Rocket Ma <marocketbd@gmail.com>
    Reviewed-by: H.J. Lu <hjl.tools@gmail.com>
    (cherry picked from commit 839898777226a3ed88c0859f25ffe712519b4ead)
    (cherry picked from commit 4070d808bea1c077eb7e7d52b52b91cae98205d5)

 stdio-common/Makefile              |  4 ++++
 stdio-common/tst-vfscanf-bz34008.c | 48 ++++++++++++++++++++++++++++++++++++++
 stdio-common/vfscanf-internal.c    |  7 +++---
 3 files changed, 55 insertions(+), 4 deletions(-)

commit 741bc4213ed5c64caf0cb05759511cdba7cfd17c
Author:     Rocket Ma <marocketbd@gmail.com>
AuthorDate: Fri May 1 20:39:07 2026 -0700
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Thu Aug 13 21:18:49 2026 +0800

    libio: Fix ungetwc operating on byte stream [BZ #33998]
    
    * libio/wgenops.c: When _IO_wdefault_pbackfail attempts to push back one
    character, it accidently compare the wchar to push back with the last
    char from byte stream, instead of wide stream. Under specific coding,
    attacker may exploit this to leak information. This commit fix bug
    33998, or CVE-2026-5928.
    
    Signed-off-by: Rocket Ma <marocketbd@gmail.com>
    Reviewed-by: Carlos O'Donell <carlos@redhat.com>
    (cherry picked from commit ef3bfb5f910011f3780cb06aa47e730035f53285)
    (cherry picked from commit 2890b35cd361df2517525bf2c5f8c63f6f0d4a20)

 libio/Makefile              |  1 +
 libio/bug-wgenops-bz33998.c | 54 +++++++++++++++++++++++++++++++++++++++++++++
 libio/wgenops.c             |  4 ++--
 3 files changed, 57 insertions(+), 2 deletions(-)

commit 2b179153ea3516adb8cb09717a080725ae6d2858 (tag: gentoo/glibc-2.43-3)
Author:     H.J. Lu <hjl.tools@gmail.com>
AuthorDate: Mon Apr 13 10:46:42 2026 +0800
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Wed May 6 10:47:28 2026 +0200

    abilist.awk: Handle weak unversioned defined symbols
    
    After
    
    commit f685e3953f9a38a41bbd0a597f9882870cee13d5
    Author: H.J. Lu <hjl.tools@gmail.com>
    Date:   Wed Oct 29 09:49:57 2025 +0800
    
        elf: Don't set its DT_VERSYM entry for unversioned symbol
    
    ld no longer assigns version index 1 to unversioned defined symbol.
    For libmachuser.so, "objdump --dynamic-syms" reports:
    
    0000dd30  w   DF .text  000000f8              processor_start
    
    instead of
    
    0000dd30  w   DF .text  000000f8 (Base)       processor_start
    
    Also allow NF == 6 for weak unversioned dynamic symbols.  This fixes BZ
    33650.
    
    Signed-off-by: H.J. Lu <hjl.tools@gmail.com>
    Reviewed-by: Sam James <sam@gentoo.org>
    (cherry picked from commit ee5d1db2a81468413fbf7c82779ffa782f429d1a)
    (cherry picked from commit e9517114acc77c0b8af9da6700107df16882b701)

 scripts/abilist.awk | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

commit b8408369b86b283743fa0fc08637733952f1c89e
Author:     Florian Weimer <fweimer@redhat.com>
AuthorDate: Wed Mar 4 18:32:36 2026 +0100
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Wed May 6 10:47:06 2026 +0200

    Linux: Only define OPEN_TREE_* macros in <sys/mount.h> if undefined (bug 33921)
    
    There is a conditional inclusion of <linux/mount.h> earlier in the file.
    If that defines the macros, do not redefine them.  This addresses build
    problems as the token sequence used by the UAPI macro definitions
    changes between Linux versions.
    
    Reviewed-by: Adhemerval Zanella  <adhemerval.zanella@linaro.org>
    (cherry picked from commit d12b017cddfeb9fe9920ba054ae3dfcb8e9238b8)
    (cherry picked from commit 1634cc11a5a54efcd542f468cf2efa5cdfc65194)

 sysdeps/unix/sysv/linux/sys/mount.h | 10 ++++++----
 1 file changed, 6 insertions(+), 4 deletions(-)

commit 1f41c59d327b2111d749005dc95644fcc69a345d
Author:     DJ Delorie <dj@redhat.com>
AuthorDate: Mon Jan 26 22:24:42 2026 -0500
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Wed May 6 10:46:35 2026 +0200

    include: isolate __O_CLOEXEC flag for sys/mount.h and fcntl.h
    
    Including sys/mount.h should not implicitly include fcntl.h
    as that causes namespace pollution and conflicts with kernel
    headers.  It only needs O_CLOEXEC for OPEN_TREE_CLOEXEC
    (although it shouldn't need that, but it's defined that way)
    so we provide that define (via a private version) separately.
    
    Reviewed-by: Adhemerval Zanella  <adhemerval.zanella@linaro.org>
    Tested-by: Florian Weimer <fweimer@redhat.com>
    (cherry picked from commit 419245719ccbc7dad6a97f24465e7f09c090327a)
    (cherry picked from commit d1d8d27164e9682e467b55a7b56bd6229b7beef2)

 io/fcntl.c                                   | 4 ++++
 sysdeps/unix/sysv/linux/Makefile             | 1 +
 sysdeps/unix/sysv/linux/alpha/bits/cloexec.h | 1 +
 sysdeps/unix/sysv/linux/bits/cloexec.h       | 1 +
 sysdeps/unix/sysv/linux/bits/fcntl-linux.h   | 4 +---
 sysdeps/unix/sysv/linux/hppa/bits/cloexec.h  | 1 +
 sysdeps/unix/sysv/linux/sparc/bits/cloexec.h | 1 +
 sysdeps/unix/sysv/linux/sys/mount.h          | 6 +++++-
 sysdeps/unix/sysv/linux/tst-mount.c          | 1 +
 9 files changed, 16 insertions(+), 4 deletions(-)

commit e0a7106a8df284ef459f977bfe818f4aaea7348f
Author:     Florian Weimer <fweimer@redhat.com>
AuthorDate: Thu Apr 16 19:13:43 2026 +0200
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Wed May 6 10:46:00 2026 +0200

    Use pending character state in IBM1390, IBM1399 character sets (CVE-2026-4046)
    
    Follow the example in iso-2022-jp-3.c and use the __count state
    variable to store the pending character.  This avoids restarting
    the conversion if the output buffer ends between two 4-byte UCS-4
    code points, so that the assert reported in the bug can no longer
    happen.
    
    Even though the fix is applied to ibm1364.c, the change is only
    effective for the two HAS_COMBINED codecs for IBM1390, IBM1399.
    
    The test case was mostly auto-generated using
    claude-4.6-opus-high-thinking, and composer-2-fast shows up in the
    log as well.  During review, gpt-5.4-xhigh flagged that the original
    version of the test case was not exercising the new character
    flush logic.
    
    This fixes bug 33980.
    
    Assisted-by: LLM
    Reviewed-by: Carlos O'Donell <carlos@redhat.com>
    (cherry picked from commit d6f08d1cf027f4eb2ba289a6cc66853722d4badc)
    (cherry picked from commit 8362e8ce10b24068bacc19552c128dd10e082fd9)

 iconvdata/Makefile       |   4 +-
 iconvdata/ibm1364.c      |  70 +++++++++++++++++-----
 iconvdata/tst-bug33980.c | 153 +++++++++++++++++++++++++++++++++++++++++++++++
 3 files changed, 211 insertions(+), 16 deletions(-)

commit b180ac98abd038b038c72d414dbc07e1ee1f6031
Author:     Michael Jeanson <mjeanson@efficios.com>
AuthorDate: Fri Feb 20 11:01:00 2026 -0500
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Wed May 6 10:45:40 2026 +0200

    tests: fix tst-rseq with Linux 7.0
    
    A sub-test of tst-rseq is to validate the return code and errno of the
    rseq syscall when attempting to register the exact same rseq area as was
    done in the dynamic loader.
    
    This involves finding the rseq area address by adding the
    '__rseq_offset' to the thread pointer and calculating the area size from
    the AT_RSEQ_FEATURE_SIZE auxiliary vector. However the test currently
    calculates the size of the rseq area allocation in the TLS block which
    must be a multiple of AT_RSEQ_ALIGN.
    
    Up until now that happened to be the same value since the feature size
    and alignment exposed by the kernel were below the minimum ABI size of
    32. Starting with Linux 7.0 the feature size has reached 33 while the
    alignment is now 64.
    
    This results in the test trying to re-register the rseq area with a
    different size and thus not getting the expected errno value.
    
    Signed-off-by: Michael Jeanson <mjeanson@efficios.com>
    Reviewed-by: Mathieu Desnoyers <mathieu.desnoyers@efficios.com>
    (cherry picked from commit 67f303b47dc584f204e3f2441b9832082415eebc)
    (cherry picked from commit ce1013a197eb4a3b8ff2b07e0672f4d0b976ce7c)

 sysdeps/unix/sysv/linux/tst-rseq.c | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

commit 971bff92c6d373f0de3b5309a909e8aff691ac5e
Author:     Adhemerval Zanella Netto <adhemerval.zanella@linaro.org>
AuthorDate: Sat Mar 21 08:11:06 2026 -0600
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Wed May 6 10:45:20 2026 +0200

    riscv: Resolve calls to memcpy using memcpy-generic in early startup
    
    This patch from Adhemerval sets up the ifunc redirections so that we
    resolve memcpy to memcpy_generic in early startup.  This avoids infinite
    recursion for memcpy calls before the loader is fully initialized.
    
    Tested-by: Jeff Law <jeffrey.law@oss.qualcomm.com>
    (cherry picked from commit 0a9e54d40a4321ebf7d87cdbc0868c43d1e8a657)
    (cherry picked from commit 60cabd0464c6722d4e1f13bbbeef191ea40ef2ef)

 elf/dl-reloc-static-pie.c                        | 1 +
 sysdeps/riscv/multiarch/dl-symbol-redir-ifunc.h  | 1 +
 sysdeps/unix/sysv/linux/riscv/multiarch/Makefile | 1 +
 3 files changed, 3 insertions(+)

commit a254024c437ccd71eb70c0df29f3783b569e1238
Author:     Adhemerval Zanella <adhemerval.zanella@linaro.org>
AuthorDate: Thu Feb 12 09:48:53 2026 -0300
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Wed May 6 10:45:03 2026 +0200

    elf: Use dl-symbol-redir-ifunc.h instead _dl_strlen
    
    Also replace the loop with strlen And remove
    -fno-tree-loop-distribute-patterns usage.
    
    It requires redirect the strlen to the baseline implementation
    for x86_64, aarch64, and loongarch64.
    
    Checked on x86_64-linux-gnu{-v2,v3} and aarch64-linux-gnu with
    both gcc-15 and clang-21.
    
    Reviewed-by: DJ Delorie <dj@redhat.com>
    (cherry picked from commit 15cc350e507101ac7b01e1343ac55087a6cd9317)
    (cherry picked from commit 02ffd413cf83c07c5c419b5cba72990e1ed140ca)

 elf/Makefile                                             |  6 ------
 elf/dl-tunables.c                                        | 14 +-------------
 string/Makefile                                          |  1 +
 sysdeps/aarch64/multiarch/dl-symbol-redir-ifunc.h        |  1 +
 sysdeps/aarch64/multiarch/strlen_generic.S               |  4 ++++
 sysdeps/loongarch/lp64/multiarch/dl-symbol-redir-ifunc.h |  1 +
 sysdeps/unix/sysv/linux/riscv/multiarch/Makefile         |  2 ++
 sysdeps/x86_64/multiarch/dl-symbol-redir-ifunc.h         | 10 ++++++++++
 8 files changed, 20 insertions(+), 19 deletions(-)

commit 6622325eb8a56671ff3f145e7759964b296807a7
Author:     Xi Ruoyao <xry111@xry111.site>
AuthorDate: Tue Feb 3 16:20:12 2026 +0800
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Wed May 6 10:44:41 2026 +0200

    elf: parse /proc/self/maps as the last resort to find the gap for tst-link-map-contiguous-ldso
    
    The initialization process of libc.so calls mmap() several times and the
    kernel may lay the maps into the gap.  If all pages in the gap are
    occupied, the test would not be able to find the gap with mmap() and the
    test would fail.
    
    The failure reproduces most frequently on LoongArch because with the
    commonly used page size (16 KiB) the gap only contains 4 pages and the
    probability they are all occupied is not near to zero.
    
    With the changes in the patch, a test run may output:
    
        info: ld.so link map is not contiguous
        info: object "/dev/zero" found at 0x7ffff1fe0000 - 0x7ffff1fe4000
        info: anonymous mapping found at 0x7ffff1fe4000 - 0x7ffff1fec000
    
    Also take the chance to fix a mistake in the "object found at" message
    which has puzzled me during the initial debug session.
    
    Signed-off-by: Xi Ruoyao <xry111@xry111.site>
    Reviewed-by: Adhemerval Zanella  <adhemerval.zanella@linaro.org>
    (cherry picked from commit aed8390a6a22e5751fc12704c0c5f2a8271fc286)
    (cherry picked from commit 26953143787bf2f7e9a0bf88749f547efe029e67)

 elf/tst-link-map-contiguous-ldso.c | 64 ++++++++++++++++++++++++++++++++++++--
 1 file changed, 62 insertions(+), 2 deletions(-)

commit e89f91b763e532533c25f72f3e040cb1a2462d2b (tag: gentoo/glibc-2.43-2)
Author:     Carlos O'Donell <carlos@redhat.com>
AuthorDate: Fri Mar 20 17:14:33 2026 -0400
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Fri Mar 27 17:22:29 2026 +0100

    resolv: Check hostname for validity (CVE-2026-4438)
    
    The processed hostname in getanswer_ptr should be correctly checked to
    avoid invalid characters from being allowed, including shell
    metacharacters. It is a security issue to fail to check the returned
    hostname for validity.
    
    A regression test is added for invalid metacharacters and other cases
    of invalid or valid characters.
    
    No regressions on x86_64-linux-gnu.
    
    Reviewed-by: Adhemerval Zanella  <adhemerval.zanella@linaro.org>
    (cherry picked from commit e10977481f4db4b2a3ce34fa4c3a1e26651ae312)
    (cherry picked from commit dd9945c0ba40d2dbc9eb7c99291ba6b69bd66718)

 resolv/Makefile                 |   3 +
 resolv/nss_dns/dns-host.c       |   2 +-
 resolv/tst-resolv-invalid-ptr.c | 255 ++++++++++++++++++++++++++++++++++++++++
 3 files changed, 259 insertions(+), 1 deletion(-)

commit 19cf43a95ca4f98bbd329628b51b55f08f399003
Author:     Carlos O'Donell <carlos@redhat.com>
AuthorDate: Fri Mar 20 16:43:33 2026 -0400
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Fri Mar 27 17:22:10 2026 +0100

    resolv: Count records correctly (CVE-2026-4437)
    
    The answer section boundary was previously ignored, and the code in
    getanswer_ptr would iterate past the last resource record, but not
    beyond the end of the returned data.  This could lead to subsequent data
    being interpreted as answer records, thus violating the DNS
    specification.  Such resource records could be maliciously crafted and
    hidden from other tooling, but processed by the glibc stub resolver and
    acted upon by the application.  While we trust the data returned by the
    configured recursive resolvers, we should not trust its format and
    should validate it as required.  It is a security issue to incorrectly
    process the DNS protocol.
    
    A regression test is added for response section crossing.
    
    No regressions on x86_64-linux-gnu.
    
    Reviewed-by: Collin Funk <collin.funk1@gmail.com>
    (cherry picked from commit 9f5f18aab40ec6b61fa49a007615e6077e9a979b)
    (cherry picked from commit 5c6fca0c62ce5bd6e68e259f138097756cbafd4d)

 resolv/Makefile                 |   4 +
 resolv/nss_dns/dns-host.c       |   2 +-
 resolv/tst-resolv-dns-section.c | 162 ++++++++++++++++++++++++++++++++++++++++
 3 files changed, 167 insertions(+), 1 deletion(-)

commit 102c0f14d6ee5e3b35d2b33dc2d1a4c0c571b5bb
Author:     Florian Weimer <fweimer@redhat.com>
AuthorDate: Mon Jan 26 17:12:37 2026 +0100
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Fri Mar 27 17:21:50 2026 +0100

    posix: Run tst-wordexp-reuse-mem test
    
    The test was not properly scheduled for execution with a Makefile
    dependency.
    
    Fixes commit 80cc58ea2de214f85b0a1d902a3b668ad2ecb302 ("posix: Reset
    wordexp_t fields with WRDE_REUSE (CVE-2025-15281 / BZ 33814").
    
    (cherry picked from commit bed2db02f3183e93f21d506786c5f884a1dec9e7)
    (cherry picked from commit 2be6cf2e75d091f2aef606af4ddd876855b77abb)

 posix/Makefile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

commit 035a3b754a61cc2917795a039f20804949590eb6
Author:     Jeff Bailey <jbailey@nisa.net>
AuthorDate: Fri Apr 25 03:40:46 2003 +0000
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Fri Mar 27 17:14:28 2026 +0100

    hurd: enable ldconfig
    
    DP: Description: Enable ldconfig and such on hurd-i386
    DP: Author: Jeff Bailey <jbailey@nisa.net>
    DP: Upstream status: Not submitted
    DP: Status Details: Upstream disagrees with this patch, but I'm
    DP: putting it in so that we have expected Debian behaviour on the
    DP: Hurd.  We should review this when the ELF standard supports runpath.
    DP: Date: 08 Apr 2003
    Imported-from: https://salsa.debian.org/glibc-team/glibc/-/blob/93d5069240943c4dcc950f6255028f7d1fcc2df0/debian/patches/hurd-i386/local-enable-ldconfig.diff

 sysdeps/mach/hurd/configure    | 3 ++-
 sysdeps/mach/hurd/configure.ac | 2 ++
 2 files changed, 4 insertions(+), 1 deletion(-)

commit d249c8ba42db184abfe3a9c32e453fe2424da92f
Author:     Samuel Thibault <samuel.thibault@ens-lyon.org>
AuthorDate: Sun Mar 22 22:24:48 2026 +0100
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sun Mar 22 22:24:48 2026 +0100

    Add -lmachuser -lhurduser to libc.so on GNU/Hurd.
    
    http://lists.gnu.org/archive/html/bug-hurd/2011-03/msg00112.html
    
    2011-03-29  Samuel Thibault  <samuel.thibault@ens-lyon.org>
    
            * Makerules ($(inst_libdir)/libc.so): Add -lmachuser -lhurduser to
            libc.so on GNU/Hurd.
    
    It's still unclear what we want to aim for.

 Makerules | 3 +++
 1 file changed, 3 insertions(+)

commit d93a22d2c89abce2c7ba9bbd294b0cd4b712b0ec
Author:     Yury Khrustalev <yury.khrustalev@arm.com>
AuthorDate: Tue Feb 3 15:51:11 2026 +0000
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sun Mar 22 00:14:22 2026 +0100

    aarch64: Tests for locking GCS
    
    Check that GCS is locked properly based on the value of the
    glibc.cpu.aarch64_gcs tunable.
    
    Test tst-gcs-execv checks that a child process can be spawned correctly
    when GCS is locked for the parent process.
    
    Test tst-gcs-fork checks that if GCS is not locked for the parent
    process, the forked child can disable GCS.
    
    Tests tst-gcs-lock and tst-gcs-lock-static check that GCS is locked
    for dynamic and static executables when run with aarch64_gcs=1.
    
    Tests tst-gcs-unlock and tst-gcs-unlock-static check that GCS is not
    locked for dynamic and static executables when run with aarch64_gcs=0.
    
    Test tst-gcs-lock-ptrace checks via ptrace that when GCS is locked,
    all GCS features are locked.
    
    Reviewed-by: Adhemerval Zanella  <adhemerval.zanella@linaro.org>
    (cherry picked from commit ad9784419e274cef9ba7152d7cd2490d291f837b)
    (cherry picked from commit 305ce0b58809869295e62c3caa7eda4c8e41134f)

 sysdeps/unix/sysv/linux/aarch64/Makefile           |  25 ++++
 sysdeps/unix/sysv/linux/aarch64/tst-gcs-execv.c    |  91 +++++++++++
 sysdeps/unix/sysv/linux/aarch64/tst-gcs-fork.c     |  75 ++++++++++
 sysdeps/unix/sysv/linux/aarch64/tst-gcs-helper.h   |   8 +-
 .../unix/sysv/linux/aarch64/tst-gcs-lock-ptrace.c  | 166 +++++++++++++++++++++
 .../unix/sysv/linux/aarch64/tst-gcs-lock-static.c  |   1 +
 sysdeps/unix/sysv/linux/aarch64/tst-gcs-lock.c     |  58 +++++++
 .../sysv/linux/aarch64/tst-gcs-unlock-static.c     |   2 +
 sysdeps/unix/sysv/linux/aarch64/tst-gcs-unlock.c   |   2 +
 9 files changed, 427 insertions(+), 1 deletion(-)

commit b745cf6dd2ade70b0aa9521bb78e52db8134e758
Author:     Yury Khrustalev <yury.khrustalev@arm.com>
AuthorDate: Mon Feb 2 18:27:53 2026 +0000
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sun Mar 22 00:13:55 2026 +0100

    aarch64: Lock GCS status at startup
    
    If GCS is enabled (see tunable glibc.cpu.aarch64_gcs), we lock all GCS
    operations (including status, write on shadow stack, and push to shadow
    stack) unless OPTIONAL policy is used.
    
    Reviewed-by: Adhemerval Zanella  <adhemerval.zanella@linaro.org>
    (cherry picked from commit 5061f524a2976daf3062dd34beae1d7d15502770)
    (cherry picked from commit 2ee41ba6ecd34bf7e5c4f90fdfa20376c1dcecb0)

 manual/tunables.texi                         | 54 +++++++++++++++++-----------
 sysdeps/aarch64/dl-gcs.c                     |  6 ++++
 sysdeps/aarch64/dl-start.S                   | 21 +++++++++--
 sysdeps/unix/sysv/linux/aarch64/libc-start.h | 29 ++++++++++++---
 4 files changed, 82 insertions(+), 28 deletions(-)

commit 1bb8c9a05c5703bce57dd59136dce7a9acb1c7b8
Author:     Yury Khrustalev <yury.khrustalev@arm.com>
AuthorDate: Mon Feb 16 12:46:39 2026 +0000
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sun Mar 22 00:13:39 2026 +0100

    tests: aarch64: fix makefile dependencies for dlopen tests for BTI
    
    Some BTI tests in the sysdeps/aarch64 directory use
    test shared objects via dlopen. Due to lack of direct makefile level
    dependencies on these modules these tests could be run before the
    required .so files would be created. This could lead to flaky test
    results when running make check with -j flag. This commit fixes it.
    
    Reviewed-by: Wilco Dijkstra  <Wilco.Dijkstra@arm.com>
    (cherry picked from commit 4db97f4d04cd2ad87f75b7219de2cb851fc62ebd)
    (cherry picked from commit fa4a40c7d497fa99e578495f02b5ad5e449c72b1)

 sysdeps/aarch64/Makefile | 6 ++++++
 1 file changed, 6 insertions(+)

commit 522abb88a3afb3c81b736fdd360527634993bbbd
Author:     Wilco Dijkstra <wilco.dijkstra@arm.com>
AuthorDate: Fri Feb 27 20:20:45 2026 +0000
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sun Mar 22 00:13:17 2026 +0100

    malloc: Avoid accessing /sys/kernel/mm files
    
    On AArch64 malloc always checks /sys/kernel/mm/transparent_hugepage/enabled to
    set the THP mode.  However this check is quite expensive and the file may not
    be accessible in containers. If DEFAULT_THP_PAGESIZE is non-zero, use
    malloc_thp_mode_madvise so that we take advantage of THP in all cases.  Since
    madvise is a fast systemcall, it adds only a small overhead compared to the
    cost of mmap and populating the pages.
    
    Reviewed-by: Aurelien Jarno <aurelien@aurel32.net>
    (cherry picked from commit 2e8a940df14e9e03fd5bd01015ebbd00c1a5e9b4)
    (cherry picked from commit 9898ea58b538e325a25f53bde021d0ca07d0a1c0)

 malloc/arena.c  |  9 +++++++++
 malloc/malloc.c | 18 ------------------
 2 files changed, 9 insertions(+), 18 deletions(-)

commit ac1d318aa2c34c8e95225e3b96f83120c64bc238
Author:     Adhemerval Zanella <adhemerval.zanella@linaro.org>
AuthorDate: Thu Feb 26 10:21:24 2026 -0300
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sun Mar 22 00:13:00 2026 +0100

    Add BZ 33904 entry to NEWS
    
    (cherry picked from commit c3ceb93dc4f67253037644dc8f194831e27f3160)

 NEWS | 1 +
 1 file changed, 1 insertion(+)

commit b2e0ebc3ba64ad34ad31c933513f564fe34f781b
Author:     Adhemerval Zanella <adhemerval.zanella@linaro.org>
AuthorDate: Thu Feb 26 09:49:19 2026 -0300
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sun Mar 22 00:12:41 2026 +0100

    debug: Fix build with --enable-fortify-source=1 (BZ 33904)
    
    The libio/bits/stdio2-decl.h only defined the prototypes for
    __vasprintf_chk and __vfprintf_chk for __USE_FORTIFY_LEVEL > 1.
    Also defined them for the internal header regardless.
    
    Checked with a build with --enable-fortify-source=1 and
    --enable-fortify-source=2 for all afftected ABIs.
    
    (cherry picked from commit f96e9bd2fecce3f0284479a5c0dac6989736c8c8)
    (cherry picked from commit 911bd469f80c6378da9319fe7508d012f95fc20c)

 include/bits/stdio2-decl.h | 2 ++
 1 file changed, 2 insertions(+)

commit eaa36e569aa493b488fc31b6f3ae0a4ffc708498
Author:     Florian Weimer <fweimer@redhat.com>
AuthorDate: Fri Feb 13 09:02:07 2026 +0100
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Mon Feb 23 15:54:32 2026 +0100

    nss: Missing checks in __nss_configure_lookup, __nss_database_get (bug 28940)
    
    This avoids a null pointer dereference in the
    nss_database_check_reload_and_get function, and assertion failures.
    
    Reviewed-by: Sam James <sam@gentoo.org>
    (cherry picked from commit 5b713b49443eb6a4e54e50e2f0147105f86dab02)
    (cherry picked from commit 48f5a05a7a1eeb9e0567ab429f654648f831307f)

 nss/Makefile                            |   1 +
 nss/nss_database.c                      |   7 +-
 nss/tst-nss-malloc-failure-getlogin_r.c | 345 ++++++++++++++++++++++++++++++++
 3 files changed, 352 insertions(+), 1 deletion(-)

commit 7d1e5974764b9938e25d08bf189293332eba1401
Author:     Florian Weimer <fweimer@redhat.com>
AuthorDate: Fri Feb 13 09:02:07 2026 +0100
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Mon Feb 23 15:54:17 2026 +0100

    Linux: In getlogin_r, use utmp fallback only for specific errors
    
    Most importantly, if getwpuid_r fails, it does not make sense to retry
    via utmp because the user ID obtained from there is less reliable than
    the one from /proc/self/loginuid.
    
    Reviewed-by: Sam James <sam@gentoo.org>
    (cherry picked from commit 28660f4b45afa8921c2faebaec2846f95f670ba0)
    (cherry picked from commit d6cb7ce0e98b2c16df5b2f5b9693d0130ccb8af5)

 sysdeps/unix/sysv/linux/getlogin_r.c | 21 +++++++++++++++++----
 1 file changed, 17 insertions(+), 4 deletions(-)

commit c19373bd7256e5317a03594a36191418a25a6246
Author:     Florian Weimer <fweimer@redhat.com>
AuthorDate: Fri Feb 13 09:02:07 2026 +0100
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Mon Feb 23 15:54:02 2026 +0100

    nss: Introduce dedicated struct nss_database_for_fork type
    
    The initialized field in struct nss_database_data is rather confusing
    because it is not used by the regular NSS code, only by the fork
    state synchronization code.  Introduce a separate type and place
    the initialized field there.
    
    Reviewed-by: Sam James <sam@gentoo.org>
    (cherry picked from commit 7bb859f4198d0be19c31a9937eae4f6c2c9a079e)
    (cherry picked from commit 140c760d711d03c0230dff218b5268b11935f92e)

 nss/nss_database.c | 14 +++++++-------
 nss/nss_database.h | 12 +++++++++---
 posix/fork.c       |  2 +-
 3 files changed, 17 insertions(+), 11 deletions(-)

commit 4e7a1009c70108befdec7dfd3215c9e1cda2485f
Author:     Andreas Schwab <schwab@suse.de>
AuthorDate: Tue Feb 3 12:41:23 2026 +0100
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Mon Feb 23 15:53:45 2026 +0100

    Don't include <bits/openat2.h> directly (bug 33848)
    
    Headers from bits directories should never be included directly, only via
    the official headers.
    
    (cherry picked from commit 0e47414ce87f3b088ff454fc6c7d1129ff9617ec)
    (cherry picked from commit 856c426a753450b8c6861a5b994a564f4fc16d4b)

 NEWS                              | 2 ++
 sysdeps/unix/sysv/linux/openat2.c | 1 -
 2 files changed, 2 insertions(+), 1 deletion(-)

commit d9f7d850fd362e3ce01c1d3a2f39fd95e773fcee
Author:     Andreas K. Hüttel <dilfridge@gentoo.org>
AuthorDate: Mon Jan 26 01:29:30 2026 +0100
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Mon Feb 23 15:53:29 2026 +0100

    po: Incorporate translatins (nl updated, ar new)
    
    Signed-off-by: Andreas K. Hüttel <dilfridge@gentoo.org>
    (cherry picked from commit bad2da7f779dbabb0e2e2c73037489e9f161183e)
    (cherry picked from commit 144ba302089cff5a2f2e1c9e1280faea9da9f8cc)

 po/ar.po | 7168 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 po/nl.po |   71 +-
 2 files changed, 7232 insertions(+), 7 deletions(-)

commit efbd0cfd3bcfd0a9986dc047ebdb71729d55c68d
Author:     Aurelien Jarno <aurelien@aurel32.net>
AuthorDate: Tue Jan 20 18:25:08 2026 +0100
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Mon Feb 23 15:53:14 2026 +0100

    Fix ldbl-128ibm ceill, floorl, roundl and truncl zero-sign handling
    
    When the result of ceill, floorl, roundl and truncl is zero, the sign of
    the result must match the sign of the input. For the IBM 128-bit long
    double format, the sign is determined by the high part.
    
    Ensure the correct sign when the high part is the result of
    computations, by copying the sign from the input high part to the output
    high part. On POWER, this conveniently maps to the fcpsgn instruction.
    
    In addition add test for the values provided in BZ #33623, and for the
    opposite value when the result is 0.
    
    Fixes: BZ #33623
    
    Reviewed-by: Adhemerval Zanella  <adhemerval.zanella@linaro.org>
    (cherry picked from commit 6f4b28b20aa9161aeb42a7f34f4d3b96194e5666)
    (cherry picked from commit 022abaeacbc85d8409bad22375b16a8c07d3ae39)

 NEWS                                   | 2 ++
 math/libm-test-ceil.inc                | 3 +++
 math/libm-test-floor.inc               | 3 +++
 math/libm-test-round.inc               | 4 ++++
 math/libm-test-trunc.inc               | 4 ++++
 sysdeps/ieee754/ldbl-128ibm/s_ceill.c  | 3 +++
 sysdeps/ieee754/ldbl-128ibm/s_floorl.c | 3 +++
 sysdeps/ieee754/ldbl-128ibm/s_roundl.c | 3 +++
 sysdeps/ieee754/ldbl-128ibm/s_truncl.c | 3 +++
 9 files changed, 28 insertions(+)

commit 52e48a32b5ad70e2611c3d05db44ae074f62c7f6 (tag: gentoo/glibc-2.43-1)
Author:     Ludwig Rydberg <ludwig.rydberg@gaisler.com>
AuthorDate: Fri Jun 13 12:22:41 2025 +0200
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sat Jan 24 02:33:51 2026 +0100

    sparc: Fix argument passing to __libc_start_main on SPARC32
    
    Use a custom __libc_start_main function so the highest stack address can
    be provided to __libc_start_main_impl without altering the content of
    the stack (as there is no room for adding arguments to the stack).
    
    The __libc_stack_end was written to [%sp+23*4] but that address is
    already in use (holds the pointer to argv) which led to corruption.
    
    Fixes: d952c6efaa87 ("sparc: Fix argument passing to __libc_start_main (BZ 32981)")
    Signed-off-by: Ludwig Rydberg <ludwig.rydberg@gaisler.com>
    (cherry picked from commit c8305ccf787df8b16a5db18254a3737069a390b7)

 sysdeps/sparc/sparc32/start.S                      |  6 ++---
 sysdeps/unix/sysv/linux/sparc/sparc32/libc-start.c | 30 ++++++++++++++++++++++
 2 files changed, 32 insertions(+), 4 deletions(-)

commit b2c1e1f8ab6adb672d606ac8b141279916cebd9b
Author:     Andreas K. Hüttel <dilfridge@gentoo.org>
AuthorDate: Mon Dec 1 23:53:01 2025 -0300
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sat Jan 24 02:33:48 2026 +0100

    Revert "sparc: Fix sparc32 Fix argument passing to __libc_start_main (BZ 32981)"
    
    This reverts commit 8b37c99ef19c79b2bfe84be3b5a4348ef09b0d76.
    
    (cherry picked from commit 1edc76ee1fb1e9d9a300bd0439580de91bea92e8)

 sysdeps/sparc/sparc32/start.S | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

commit 621dad6de91f5a355f8e8577715979f2cd304b0a
Author:     Adhemerval Zanella <adhemerval.zanella@linaro.org>
AuthorDate: Mon Apr 13 18:09:20 2020 -0300
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sat Jan 24 02:33:45 2026 +0100

    linux: Set internal DIR filepos as off64_t (BZ #23960, BZ #24050)
    
    It allows to obtain the expected entry offset on telldir and set
    it correctly on seekdir on platforms where long int is smaller
    than off64_t.
    
    On such cases opendir creates a map entry between the DIR d_off
    offset and the returned long int (the telldir return value).
    seekdir will then set the correct offset from the internal list
    using the telldir as the list key.
    
    It also removes the overflow check on readdir and the returned value
    will be truncated by the non-LFS off_t size.  As Joseph has noted
    in BZ #23960 comment #22, d_off is an opaque value and since
    telldir/seekdir works regardless of the returned dirent d_off value.
    
    Finally it removes the requirement to check for overflow values on
    telldir (BZ #24050).
    
    Checked on x86_64-linux-gnu, i686-linux-gnu, powerpc-linux-gnu,
    and arm-linux-gnueabihf.
    
    Rebased for glibc-2.41 by Andreas K. Hüttel <dilfridge@gentoo.org>

 include/dirent.h                            |   2 +-
 sysdeps/unix/sysv/linux/Makefile            |   2 +
 sysdeps/unix/sysv/linux/alpha/bits/dirent.h |   3 +
 sysdeps/unix/sysv/linux/bits/dirent.h       |   4 +
 sysdeps/unix/sysv/linux/closedir.c          |   4 +
 sysdeps/unix/sysv/linux/dirstream.h         |   9 +-
 sysdeps/unix/sysv/linux/opendir.c           |   3 +
 sysdeps/unix/sysv/linux/readdir.c           |  21 ++--
 sysdeps/unix/sysv/linux/readdir64.c         |  11 +++
 sysdeps/unix/sysv/linux/rewinddir.c         |   5 +
 sysdeps/unix/sysv/linux/seekdir.c           |  30 +++++-
 sysdeps/unix/sysv/linux/telldir.c           |  36 +++++++
 sysdeps/unix/sysv/linux/telldir.h           |  70 ++++++++++++++
 sysdeps/unix/sysv/linux/tst-opendir-lfs.c   |   2 +
 sysdeps/unix/sysv/linux/tst-opendir.c       | 145 ++++++++++++++++++++++++++++
 15 files changed, 329 insertions(+), 18 deletions(-)

commit 3e65f71ea0b9268c38e6d4e933b3395cbf9d5b23
Author:     Adhemerval Zanella <adhemerval.zanella@linaro.org>
AuthorDate: Wed Mar 1 14:41:23 2023 -0300
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sat Jan 24 02:33:42 2026 +0100

    support: Add xreallocarray
    
    As a wrapper over reallocarray.

 support/Makefile        |  1 +
 support/support.h       |  2 ++
 support/xreallocarray.c | 29 +++++++++++++++++++++++++++++
 3 files changed, 32 insertions(+)

commit 922ab844d8a64a1381a79e0239c0290eb51c1833
Author:     Adhemerval Zanella <adhemerval.zanella@linaro.org>
AuthorDate: Tue Oct 20 13:37:15 2020 -0300
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sat Jan 24 02:33:39 2026 +0100

    linux: Use getdents64 on non-LFS readdir
    
    It is similar to what non-LFS getdents do (including overflow check).
    
    Checked on x86_64-linux-gnu and i686-linux-gnu.

 sysdeps/unix/sysv/linux/readdir.c | 97 +++++++++++++++++++++++++++++----------
 1 file changed, 73 insertions(+), 24 deletions(-)

commit e0a6115f92d4723761954f3d6ded6f5496ee111d
Author:     Andreas K. Hüttel <dilfridge@gentoo.org>
AuthorDate: Fri Dec 14 20:43:04 2018 +0100
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sat Jan 24 02:33:37 2026 +0100

    Force -O0 in conform tests to survive $CC changes
    
    In bug #659030 Gentoo started passing user's CFLAGS via $CC variable.
    conform tests should but are not ready to handle -O1/-O2 yet.
    Tests fail to validate headers due to inlining of weak symbol aliases
    and other problems. Let's force it back to -O0 until it's fixed upstream.
    
    Original patch by Sergei, ported to the new python test framework by Andreas
    
    Bug: https://bugs.gentoo.org/659030
    Signed-off-by: Sergei Trofimovich <slyfox@gentoo.org>
    Signed-off-by: Andreas K. Hüttel <dilfridge@gentoo.org>

 conform/conformtest.py   | 6 ++++--
 conform/linknamespace.py | 4 +++-
 2 files changed, 7 insertions(+), 3 deletions(-)

commit 97a0bd7d3f51d9208d9c8b15535f89db773a5f9c
Author:     Andreas K. Hüttel <dilfridge@gentoo.org>
AuthorDate: Mon Oct 22 22:34:13 2018 +0200
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sat Jan 24 02:33:34 2026 +0100

    Adapt to Gentoo-specific /etc/mail/aliases
    
    Patch by pacho2
    
    Signed-off-by: Andreas K. Hüttel <dilfridge@gentoo.org>
    (cherry picked from commit 4e616cda056f471b799beba2b1cedc787ad4ecc0)
    Signed-off-by: Andreas K. Hüttel <dilfridge@gentoo.org>

 nss/nss_files/files-alias.c    |  2 +-
 nss/tst-nss-files-alias-leak.c | 18 +++++++++---------
 support/support_chroot.c       |  8 +++++++-
 3 files changed, 17 insertions(+), 11 deletions(-)

commit 8907b76b75edd04a9d1ccf49cb49c578ebb92088
Author:     Mike Frysinger <vapier@gentoo.org>
AuthorDate: Tue Aug 3 00:34:59 2021 +0200
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sat Jan 24 02:33:31 2026 +0100

    Disable ldconfig during install
    
    Do not bother running ldconfig on DESTDIR.  It's a waste of time as we
    won't use the result (portage will rebuild the cache after install).
    Also, the Gentoo sandbox does not currently catch chroot() behavior so
    we end up (incorrectly) flagging it as a violation as a write to /etc.
    
    http://sourceware.org/ml/libc-alpha/2012-08/msg00118.html
    https://bugs.gentoo.org/431038
    Signed-off-by: Andreas K. Hüttel <dilfridge@gentoo.org>

 Makefile | 1 +
 1 file changed, 1 insertion(+)

commit 45b58d6bd185b8c6d0c5b2b906243c1ecbaaecab
Author:     Andreas K. Hüttel <dilfridge@gentoo.org>
AuthorDate: Sat Jan 24 02:32:06 2026 +0100
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sat Jan 24 02:32:06 2026 +0100

    NEWS: add new section 2.43.1
    
    Signed-off-by: Andreas K. Hüttel <dilfridge@gentoo.org>

 NEWS | 5 +++++
 1 file changed, 5 insertions(+)

commit f02515d8a6963158e0e4be8034b96c658e1b9a32
Author:     Andreas K. Hüttel <dilfridge@gentoo.org>
AuthorDate: Fri Jan 23 23:59:36 2026 +0100
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Fri Jan 23 23:59:36 2026 +0100

    Replace advisories directory with file ADVISORIES
    
    Signed-off-by: Andreas K. Hüttel <dilfridge@gentoo.org>

 ADVISORIES                    |  2 ++
 advisories/GLIBC-SA-2023-0001 | 14 --------
 advisories/GLIBC-SA-2023-0002 | 15 ---------
 advisories/GLIBC-SA-2023-0003 | 15 ---------
 advisories/GLIBC-SA-2023-0004 | 16 ---------
 advisories/GLIBC-SA-2023-0005 | 18 ----------
 advisories/GLIBC-SA-2024-0001 | 15 ---------
 advisories/GLIBC-SA-2024-0002 | 15 ---------
 advisories/GLIBC-SA-2024-0003 | 13 --------
 advisories/GLIBC-SA-2024-0004 | 28 ----------------
 advisories/GLIBC-SA-2024-0005 | 22 -------------
 advisories/GLIBC-SA-2024-0006 | 32 ------------------
 advisories/GLIBC-SA-2024-0007 | 28 ----------------
 advisories/GLIBC-SA-2024-0008 | 26 ---------------
 advisories/GLIBC-SA-2025-0001 | 40 ----------------------
 advisories/GLIBC-SA-2025-0002 | 23 -------------
 advisories/GLIBC-SA-2025-0003 | 30 -----------------
 advisories/GLIBC-SA-2025-0004 | 29 ----------------
 advisories/GLIBC-SA-2025-0005 | 14 --------
 advisories/GLIBC-SA-2026-0001 | 41 -----------------------
 advisories/GLIBC-SA-2026-0002 | 36 --------------------
 advisories/GLIBC-SA-2026-0003 | 36 --------------------
 advisories/README             | 77 -------------------------------------------
 23 files changed, 2 insertions(+), 583 deletions(-)
