klibc (2.0.14-1ubuntu1.1) questing-security; urgency=medium

  * SECURITY UPDATE: Undefined Behavior
    - debian/patches/CVE-2016-9843.patch: Avoid pre-decrement of pointer
      in big-endian CRC calculation.
    - CVE-2016-9843

 -- Bruce Cable <bruce.cable@canonical.com>  Mon, 12 Jan 2026 13:55:13 +1100

klibc (2.0.14-1ubuntu1) questing; urgency=medium

  * Merge with Debian unstable (LP: #2112018). Remaining changes:
    - SECURITY UPDATE: improper pointer arithmetic
      + debian/patches/CVE-2016-9840.patch: remove offset pointer optimization
        in usr/klibc/zlib/inftrees.c.
      + CVE-2016-9840
    - SECURITY UPDATE: improper pointer arithmetic
      + debian/patches/CVE-2016-9841.patch: remove offset pointer optimization
        in usr/klibc/zlib/inffast.c.
      + CVE-2016-9841
    - SECURITY UPDATE: memory corruption during compression
      + debian/patches/CVE-2018-25032.patch: addresses a bug that can crash
        deflate on rare inputs when using Z_FIXED.
      + CVE-2018-25032
    - SECURITY UPDATE: heap-based buffer over-read
      + debian/patches/CVE-2022-37434-1.patch: adds an extra condition to check
        if state->head->extra_max is greater than len before copying, and moves
        the len assignment to be placed before the check in
        usr/klibc/zlib/inflate.c.
      + debian/patches/CVE-2022-37434-2.patch: in the previous patch, the
        placement of the len assignment was causing issues so it was moved
        within the conditional check.
      + CVE-2022-37434

 -- Benjamin Drung <bdrung@ubuntu.com>  Wed, 11 Jun 2025 11:05:35 +0200

klibc (2.0.14-1) unstable; urgency=medium

  * New upstream version:
    - parisc: Fix build with Linux 6.10+ (Closes: #1075820)

 -- Ben Hutchings <benh@debian.org>  Tue, 04 Mar 2025 04:37:02 +0100

klibc (2.0.13-4ubuntu1) oracular; urgency=medium

  * SECURITY UPDATE: improper pointer arithmetic
    - debian/patches/CVE-2016-9840.patch: remove offset pointer optimization
      in usr/klibc/zlib/inftrees.c.
    - CVE-2016-9840
  * SECURITY UPDATE: improper pointer arithmetic
    - debian/patches/CVE-2016-9841.patch: remove offset pointer optimization
      in usr/klibc/zlib/inffast.c.
    - CVE-2016-9841
  * SECURITY UPDATE: memory corruption during compression
    - debian/patches/CVE-2018-25032.patch: addresses a bug that can crash
      deflate on rare inputs when using Z_FIXED.
    - CVE-2018-25032
  * SECURITY UPDATE: heap-based buffer over-read
    - debian/patches/CVE-2022-37434-1.patch: adds an extra condition to check
      if state->head->extra_max is greater than len before copying, and moves
      the len assignment to be placed before the check in
      usr/klibc/zlib/inflate.c.
    - debian/patches/CVE-2022-37434-2.patch: in the previous patch, the
      placement of the len assignment was causing issues so it was moved
      within the conditional check.
    - CVE-2022-37434

 -- Ian Constantin <ian.constantin@canonical.com>  Tue, 21 May 2024 11:39:40 +0300

klibc (2.0.13-4) unstable; urgency=medium

  [ Sven Joachim ]
  * debian/initramfs-tools/hooks/klibc-utils: Avoid the use of "cp -n"
    (Closes: #1055694).

  [ Salvatore Bonaccorso ]
  * debian/control: Add myself to Uploaders

 -- Salvatore Bonaccorso <carnil@debian.org>  Wed, 21 Feb 2024 13:08:58 +0100

klibc (2.0.13-3) experimental; urgency=medium

  * Install klibc shared library in /usr/lib

 -- Ben Hutchings <benh@debian.org>  Sat, 25 Nov 2023 00:49:35 +0000

klibc (2.0.13-2) unstable; urgency=medium

  * d/rules: Handle loong64 architecture (thanks to Peng Fan)
    (Closes: #1053742)

 -- Ben Hutchings <benh@debian.org>  Tue, 24 Oct 2023 18:11:43 +0200

klibc (2.0.13-1) unstable; urgency=medium

  * New upstream version:
    - time: Use clock_* system calls for time-of-day and sleep
      (Closes: #923098)
    - Install command links as appropriate (LP: #2028571)

 -- Ben Hutchings <benh@debian.org>  Mon, 31 Jul 2023 15:04:13 +0200

klibc (2.0.12-1) unstable; urgency=medium

  * New upstream version:
    - mips64: Fix struct stat layout (Closes: #1030673)

 -- Ben Hutchings <benh@debian.org>  Sun, 12 Feb 2023 23:57:04 +0100

klibc (2.0.11-1) unstable; urgency=medium

  * New upstream version:
    - Kbuild: Properly disable executable stacks in static builds
      (Closes: #1020883)
    - fcntl: Fix build failure for some architectures with Linux 5.19
      (fixes FTBFS on several architectures)

  [ Debian Janitor ]
  * Remove constraints unnecessary since buster:
    + klibc-utils: Drop versioned constraint on initramfs-tools in Breaks.

  [ Ben Hutchings ]
  * lintian: Update override in libklibc for lintian 2.115

 -- Ben Hutchings <benh@debian.org>  Sun, 02 Oct 2022 03:09:49 +0200

klibc (2.0.10-4) unstable; urgency=medium

  * d/control, d/rules: Remove ccache from $PATH instead of Build-Conflicting
  * d/salsa-ci.yml: Add CI configuration for salsa.debian.org
  * d/tests: Add klcc smoke test
  * Fix header installation from out-of-tree build (Closes: #1004465)

 -- Ben Hutchings <benh@debian.org>  Mon, 31 Jan 2022 00:28:16 +0100

klibc (2.0.10-3) unstable; urgency=medium

  * ia64: Fix out-of-tree build

 -- Ben Hutchings <benh@debian.org>  Sat, 01 Jan 2022 16:55:44 +0100

klibc (2.0.10-2) unstable; urgency=medium

  * Use KCFLAGS to pass options to Kbuild, rather than CFLAGS and LDFLAGS
    (fixes FTBFS on several architectures)

 -- Ben Hutchings <benh@debian.org>  Fri, 31 Dec 2021 15:05:03 +0100

klibc (2.0.10-1) unstable; urgency=medium

  * New upstream version:
    - Build fixes for Clang (Closes: #787063):
      - Kbuild: Fix include path for Clang builds
      - sparc64: Remove redundant/unsupported compiler option -mptr64
      - s390: mmap: Change inline assembly to work with Clang
  * debian/rules: Pass through $(CC), $(CC_FOR_BUILD), and $(LD) to ease
    building with alternate toolchain
  * debian/rules: Build under debian/build
  * debian/rules: Put test output under debian/build
  * Fix warnings from dh_missing:
    - debian/not-installed: Note duplicate klibc-<hash>.so as not installed
    - debian/libklibc-dev.manpages: Install klcc.1 from debian/tmp
  * debian/*.{install,manpages}: Delete redundant debian/tmp/ prefixes
  * libklibc-dev: Add generated perl dependency for klcc
  * debian/*.lintian-overrides: Delete obsolete overrides
  * debian/libklibc.lintian-overrides: Override
    arch-dependent-file-not-in-arch-specific-directory
  * Kbuild: Use provided CFLAGS, LDFLAGS
  * debian/rules: Use -f{debug,macro}-prefix-map to keep build dir out of
    binaries

 -- Ben Hutchings <benh@debian.org>  Thu, 30 Dec 2021 21:54:47 +0100

klibc (2.0.9-1) unstable; urgency=medium

  * New upstream version
  * armhf: Update compiler options for gcc 11 (Closes: #996906)
  * sig{set,long}jmp: do not ignore sigsetjmp's second argument
    (Closes: #988027)
  * Fix implementation of utimes

 -- Ben Hutchings <benh@debian.org>  Mon, 27 Dec 2021 00:17:05 +0100

klibc (2.0.8-6.1) unstable; urgency=medium

  * Non-maintainer upload.
  * {set,long}jmp [s390x]: save/restore the correct FPU registers
    (f8‥f15 not f1/f3/f5/f7) (Closes: #943425)

 -- Thorsten Glaser <tg@mirbsd.de>  Thu, 27 May 2021 00:12:10 +0200

klibc (2.0.8-6) unstable; urgency=medium

  * Upload to unstable
  * malloc: Set errno on failure
  * malloc: Fail if requested size > PTRDIFF_MAX (CVE-2021-31873)
  * calloc: Fail if multiplication overflows (CVE-2021-31870)
  * cpio: Fix possible integer overflow on 32-bit systems (CVE-2021-31872)
  * cpio: Fix possible crash on 64-bit systems (CVE-2021-31871)

 -- Ben Hutchings <benh@debian.org>  Fri, 30 Apr 2021 03:05:23 +0200

klibc (2.0.8-5) experimental; urgency=medium

  * alpha: Fix definitions of _NSIG and struct sigaction
  * ia64: Fix definition of struct sigaction

 -- Ben Hutchings <benh@debian.org>  Fri, 28 Aug 2020 17:41:47 +0100

klibc (2.0.8-4) experimental; urgency=medium

  * signal: Note another reason to define _KLIBC_NEEDS_SA_RESTORER
  * signal: Add sysconfig setting to force SA_SIGINFO on
  * s390: Force SA_SIGINFO on and use rt_sigreturn
  * alpha: Force SA_SIGINFO on
  * sparc: Force SA_SIGINFO on

 -- Ben Hutchings <benh@debian.org>  Tue, 25 Aug 2020 01:49:14 +0100

klibc (2.0.8-3) experimental; urgency=medium

  * s390: Define __sigreturn() on both s390 and s390x
  * Revert "alpha: Set sa_restorer for signals and disable executable stack"
  * alpha: Pass restorer to rt_sigaction() and disable executable stack

 -- Ben Hutchings <benh@debian.org>  Sun, 23 Aug 2020 15:24:00 +0100

klibc (2.0.8-2) experimental; urgency=medium

  * {alpha,s390,sparc}: Set sa_restorer for signals and disable executable
    stack

 -- Ben Hutchings <benh@debian.org>  Sat, 22 Aug 2020 21:35:52 +0100

klibc (2.0.8-1) unstable; urgency=medium

  [ Ben Hutchings ]
  * New upstream version:
    - ipconfig: Ignore NTP server address and any additional fields
      (Closes: #931416)
    - Kbuild: Add "-fcommon" for clang builds (Closes: #957405)
    - Kbuild: Add a per-architecture option to disable exectable stacks
    - arch: Explicitly disable or enable executable stacks (Closes: #959070)
  * debian/control: Use my debian.org email in Uploaders field
  * Use debhelper compatibility level 12:
    - Build-Depend on debhelper-compat and remove debian/compat
    - debian/klibc-utils.triggers: Delete as redundant
  * debian/rules: Really disable stripping libc.so in libklibc-dev

  [ Debian Janitor ]
  * Trim trailing whitespace.
  * Set upstream metadata fields: Repository.

 -- Ben Hutchings <benh@debian.org>  Fri, 21 Aug 2020 01:34:13 +0100

klibc (2.0.7-1) unstable; urgency=medium

  [ Ben Hutchings ]
  * New upstream version:
    - klcc: Enable stripping even if CONFIG_DEBUG_INFO is enabled
    - run-init: Allow the initramfs to be persisted across root changes
      (thanks to Matthew Garrett)
    - ipconfig: Implement support -d ...:dns0:dns1 options (Closes: #931416)
    - Kbuild: Work around broken "ar s" in binutils 2.32 (see #941921)
  * debian/rules: Reorganise make flags variables
  * debian/rules: Define ARCH for klibc, for all architectures
  * debian/rules: Delete redundant architecture mappings
  * debian/rules: Delete redundant export
  * klibc-utils: Trigger update-initramfs on install/upgrade
  * initramfs-tools: Don't install commands that already exist in /sbin
  * initramfs-tools: Exclude kinit and zcat commands earlier
  * initramfs-tools: Exclude gzip command
  * Drop "resume: Backward compatibility for resume_offset", which will
    not be needed in the next release
  * [klibc] fstype: Drop obsolete support for "ext4dev" (Closes: #932926)
  * debian/control: Set Maintainer to Debian Kernel Team; move maks to
    Uploaders

  [ James Clarke ]
  * debian/control: Restrict m4 build dependency to just sparc

  [ Helmut Grohne ]
  * Honour DEB_BUILD_OPTIONS=nocheck. (Closes: #922814)

 -- Ben Hutchings <ben@decadent.org.uk>  Tue, 08 Oct 2019 02:14:11 +0100

# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog libklibc`.
