commit e89f91b763e532533c25f72f3e040cb1a2462d2b (HEAD -> gentoo/2.43, gentoo/gentoo/2.43)
Author:     Carlos O'Donell <carlos@redhat.com>
AuthorDate: Fri Mar 20 17:14:33 2026 -0400
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Fri Mar 27 17:22:29 2026 +0100

    resolv: Check hostname for validity (CVE-2026-4438)
    
    The processed hostname in getanswer_ptr should be correctly checked to
    avoid invalid characters from being allowed, including shell
    metacharacters. It is a security issue to fail to check the returned
    hostname for validity.
    
    A regression test is added for invalid metacharacters and other cases
    of invalid or valid characters.
    
    No regressions on x86_64-linux-gnu.
    
    Reviewed-by: Adhemerval Zanella  <adhemerval.zanella@linaro.org>
    (cherry picked from commit e10977481f4db4b2a3ce34fa4c3a1e26651ae312)
    (cherry picked from commit dd9945c0ba40d2dbc9eb7c99291ba6b69bd66718)

 resolv/Makefile                 |   3 +
 resolv/nss_dns/dns-host.c       |   2 +-
 resolv/tst-resolv-invalid-ptr.c | 255 ++++++++++++++++++++++++++++++++++++++++
 3 files changed, 259 insertions(+), 1 deletion(-)

commit 19cf43a95ca4f98bbd329628b51b55f08f399003
Author:     Carlos O'Donell <carlos@redhat.com>
AuthorDate: Fri Mar 20 16:43:33 2026 -0400
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Fri Mar 27 17:22:10 2026 +0100

    resolv: Count records correctly (CVE-2026-4437)
    
    The answer section boundary was previously ignored, and the code in
    getanswer_ptr would iterate past the last resource record, but not
    beyond the end of the returned data.  This could lead to subsequent data
    being interpreted as answer records, thus violating the DNS
    specification.  Such resource records could be maliciously crafted and
    hidden from other tooling, but processed by the glibc stub resolver and
    acted upon by the application.  While we trust the data returned by the
    configured recursive resolvers, we should not trust its format and
    should validate it as required.  It is a security issue to incorrectly
    process the DNS protocol.
    
    A regression test is added for response section crossing.
    
    No regressions on x86_64-linux-gnu.
    
    Reviewed-by: Collin Funk <collin.funk1@gmail.com>
    (cherry picked from commit 9f5f18aab40ec6b61fa49a007615e6077e9a979b)
    (cherry picked from commit 5c6fca0c62ce5bd6e68e259f138097756cbafd4d)

 resolv/Makefile                 |   4 +
 resolv/nss_dns/dns-host.c       |   2 +-
 resolv/tst-resolv-dns-section.c | 162 ++++++++++++++++++++++++++++++++++++++++
 3 files changed, 167 insertions(+), 1 deletion(-)

commit 102c0f14d6ee5e3b35d2b33dc2d1a4c0c571b5bb
Author:     Florian Weimer <fweimer@redhat.com>
AuthorDate: Mon Jan 26 17:12:37 2026 +0100
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Fri Mar 27 17:21:50 2026 +0100

    posix: Run tst-wordexp-reuse-mem test
    
    The test was not properly scheduled for execution with a Makefile
    dependency.
    
    Fixes commit 80cc58ea2de214f85b0a1d902a3b668ad2ecb302 ("posix: Reset
    wordexp_t fields with WRDE_REUSE (CVE-2025-15281 / BZ 33814").
    
    (cherry picked from commit bed2db02f3183e93f21d506786c5f884a1dec9e7)
    (cherry picked from commit 2be6cf2e75d091f2aef606af4ddd876855b77abb)

 posix/Makefile | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

commit 035a3b754a61cc2917795a039f20804949590eb6
Author:     Jeff Bailey <jbailey@nisa.net>
AuthorDate: Fri Apr 25 03:40:46 2003 +0000
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Fri Mar 27 17:14:28 2026 +0100

    hurd: enable ldconfig
    
    DP: Description: Enable ldconfig and such on hurd-i386
    DP: Author: Jeff Bailey <jbailey@nisa.net>
    DP: Upstream status: Not submitted
    DP: Status Details: Upstream disagrees with this patch, but I'm
    DP: putting it in so that we have expected Debian behaviour on the
    DP: Hurd.  We should review this when the ELF standard supports runpath.
    DP: Date: 08 Apr 2003
    Imported-from: https://salsa.debian.org/glibc-team/glibc/-/blob/93d5069240943c4dcc950f6255028f7d1fcc2df0/debian/patches/hurd-i386/local-enable-ldconfig.diff

 sysdeps/mach/hurd/configure    | 3 ++-
 sysdeps/mach/hurd/configure.ac | 2 ++
 2 files changed, 4 insertions(+), 1 deletion(-)

commit d249c8ba42db184abfe3a9c32e453fe2424da92f
Author:     Samuel Thibault <samuel.thibault@ens-lyon.org>
AuthorDate: Sun Mar 22 22:24:48 2026 +0100
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sun Mar 22 22:24:48 2026 +0100

    Add -lmachuser -lhurduser to libc.so on GNU/Hurd.
    
    http://lists.gnu.org/archive/html/bug-hurd/2011-03/msg00112.html
    
    2011-03-29  Samuel Thibault  <samuel.thibault@ens-lyon.org>
    
            * Makerules ($(inst_libdir)/libc.so): Add -lmachuser -lhurduser to
            libc.so on GNU/Hurd.
    
    It's still unclear what we want to aim for.

 Makerules | 3 +++
 1 file changed, 3 insertions(+)

commit d93a22d2c89abce2c7ba9bbd294b0cd4b712b0ec
Author:     Yury Khrustalev <yury.khrustalev@arm.com>
AuthorDate: Tue Feb 3 15:51:11 2026 +0000
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sun Mar 22 00:14:22 2026 +0100

    aarch64: Tests for locking GCS
    
    Check that GCS is locked properly based on the value of the
    glibc.cpu.aarch64_gcs tunable.
    
    Test tst-gcs-execv checks that a child process can be spawned correctly
    when GCS is locked for the parent process.
    
    Test tst-gcs-fork checks that if GCS is not locked for the parent
    process, the forked child can disable GCS.
    
    Tests tst-gcs-lock and tst-gcs-lock-static check that GCS is locked
    for dynamic and static executables when run with aarch64_gcs=1.
    
    Tests tst-gcs-unlock and tst-gcs-unlock-static check that GCS is not
    locked for dynamic and static executables when run with aarch64_gcs=0.
    
    Test tst-gcs-lock-ptrace checks via ptrace that when GCS is locked,
    all GCS features are locked.
    
    Reviewed-by: Adhemerval Zanella  <adhemerval.zanella@linaro.org>
    (cherry picked from commit ad9784419e274cef9ba7152d7cd2490d291f837b)
    (cherry picked from commit 305ce0b58809869295e62c3caa7eda4c8e41134f)

 sysdeps/unix/sysv/linux/aarch64/Makefile           |  25 ++++
 sysdeps/unix/sysv/linux/aarch64/tst-gcs-execv.c    |  91 +++++++++++
 sysdeps/unix/sysv/linux/aarch64/tst-gcs-fork.c     |  75 ++++++++++
 sysdeps/unix/sysv/linux/aarch64/tst-gcs-helper.h   |   8 +-
 .../unix/sysv/linux/aarch64/tst-gcs-lock-ptrace.c  | 166 +++++++++++++++++++++
 .../unix/sysv/linux/aarch64/tst-gcs-lock-static.c  |   1 +
 sysdeps/unix/sysv/linux/aarch64/tst-gcs-lock.c     |  58 +++++++
 .../sysv/linux/aarch64/tst-gcs-unlock-static.c     |   2 +
 sysdeps/unix/sysv/linux/aarch64/tst-gcs-unlock.c   |   2 +
 9 files changed, 427 insertions(+), 1 deletion(-)

commit b745cf6dd2ade70b0aa9521bb78e52db8134e758
Author:     Yury Khrustalev <yury.khrustalev@arm.com>
AuthorDate: Mon Feb 2 18:27:53 2026 +0000
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sun Mar 22 00:13:55 2026 +0100

    aarch64: Lock GCS status at startup
    
    If GCS is enabled (see tunable glibc.cpu.aarch64_gcs), we lock all GCS
    operations (including status, write on shadow stack, and push to shadow
    stack) unless OPTIONAL policy is used.
    
    Reviewed-by: Adhemerval Zanella  <adhemerval.zanella@linaro.org>
    (cherry picked from commit 5061f524a2976daf3062dd34beae1d7d15502770)
    (cherry picked from commit 2ee41ba6ecd34bf7e5c4f90fdfa20376c1dcecb0)

 manual/tunables.texi                         | 54 +++++++++++++++++-----------
 sysdeps/aarch64/dl-gcs.c                     |  6 ++++
 sysdeps/aarch64/dl-start.S                   | 21 +++++++++--
 sysdeps/unix/sysv/linux/aarch64/libc-start.h | 29 ++++++++++++---
 4 files changed, 82 insertions(+), 28 deletions(-)

commit 1bb8c9a05c5703bce57dd59136dce7a9acb1c7b8
Author:     Yury Khrustalev <yury.khrustalev@arm.com>
AuthorDate: Mon Feb 16 12:46:39 2026 +0000
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sun Mar 22 00:13:39 2026 +0100

    tests: aarch64: fix makefile dependencies for dlopen tests for BTI
    
    Some BTI tests in the sysdeps/aarch64 directory use
    test shared objects via dlopen. Due to lack of direct makefile level
    dependencies on these modules these tests could be run before the
    required .so files would be created. This could lead to flaky test
    results when running make check with -j flag. This commit fixes it.
    
    Reviewed-by: Wilco Dijkstra  <Wilco.Dijkstra@arm.com>
    (cherry picked from commit 4db97f4d04cd2ad87f75b7219de2cb851fc62ebd)
    (cherry picked from commit fa4a40c7d497fa99e578495f02b5ad5e449c72b1)

 sysdeps/aarch64/Makefile | 6 ++++++
 1 file changed, 6 insertions(+)

commit 522abb88a3afb3c81b736fdd360527634993bbbd
Author:     Wilco Dijkstra <wilco.dijkstra@arm.com>
AuthorDate: Fri Feb 27 20:20:45 2026 +0000
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sun Mar 22 00:13:17 2026 +0100

    malloc: Avoid accessing /sys/kernel/mm files
    
    On AArch64 malloc always checks /sys/kernel/mm/transparent_hugepage/enabled to
    set the THP mode.  However this check is quite expensive and the file may not
    be accessible in containers. If DEFAULT_THP_PAGESIZE is non-zero, use
    malloc_thp_mode_madvise so that we take advantage of THP in all cases.  Since
    madvise is a fast systemcall, it adds only a small overhead compared to the
    cost of mmap and populating the pages.
    
    Reviewed-by: Aurelien Jarno <aurelien@aurel32.net>
    (cherry picked from commit 2e8a940df14e9e03fd5bd01015ebbd00c1a5e9b4)
    (cherry picked from commit 9898ea58b538e325a25f53bde021d0ca07d0a1c0)

 malloc/arena.c  |  9 +++++++++
 malloc/malloc.c | 18 ------------------
 2 files changed, 9 insertions(+), 18 deletions(-)

commit ac1d318aa2c34c8e95225e3b96f83120c64bc238
Author:     Adhemerval Zanella <adhemerval.zanella@linaro.org>
AuthorDate: Thu Feb 26 10:21:24 2026 -0300
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sun Mar 22 00:13:00 2026 +0100

    Add BZ 33904 entry to NEWS
    
    (cherry picked from commit c3ceb93dc4f67253037644dc8f194831e27f3160)

 NEWS | 1 +
 1 file changed, 1 insertion(+)

commit b2e0ebc3ba64ad34ad31c933513f564fe34f781b
Author:     Adhemerval Zanella <adhemerval.zanella@linaro.org>
AuthorDate: Thu Feb 26 09:49:19 2026 -0300
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sun Mar 22 00:12:41 2026 +0100

    debug: Fix build with --enable-fortify-source=1 (BZ 33904)
    
    The libio/bits/stdio2-decl.h only defined the prototypes for
    __vasprintf_chk and __vfprintf_chk for __USE_FORTIFY_LEVEL > 1.
    Also defined them for the internal header regardless.
    
    Checked with a build with --enable-fortify-source=1 and
    --enable-fortify-source=2 for all afftected ABIs.
    
    (cherry picked from commit f96e9bd2fecce3f0284479a5c0dac6989736c8c8)
    (cherry picked from commit 911bd469f80c6378da9319fe7508d012f95fc20c)

 include/bits/stdio2-decl.h | 2 ++
 1 file changed, 2 insertions(+)

commit eaa36e569aa493b488fc31b6f3ae0a4ffc708498
Author:     Florian Weimer <fweimer@redhat.com>
AuthorDate: Fri Feb 13 09:02:07 2026 +0100
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Mon Feb 23 15:54:32 2026 +0100

    nss: Missing checks in __nss_configure_lookup, __nss_database_get (bug 28940)
    
    This avoids a null pointer dereference in the
    nss_database_check_reload_and_get function, and assertion failures.
    
    Reviewed-by: Sam James <sam@gentoo.org>
    (cherry picked from commit 5b713b49443eb6a4e54e50e2f0147105f86dab02)
    (cherry picked from commit 48f5a05a7a1eeb9e0567ab429f654648f831307f)

 nss/Makefile                            |   1 +
 nss/nss_database.c                      |   7 +-
 nss/tst-nss-malloc-failure-getlogin_r.c | 345 ++++++++++++++++++++++++++++++++
 3 files changed, 352 insertions(+), 1 deletion(-)

commit 7d1e5974764b9938e25d08bf189293332eba1401
Author:     Florian Weimer <fweimer@redhat.com>
AuthorDate: Fri Feb 13 09:02:07 2026 +0100
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Mon Feb 23 15:54:17 2026 +0100

    Linux: In getlogin_r, use utmp fallback only for specific errors
    
    Most importantly, if getwpuid_r fails, it does not make sense to retry
    via utmp because the user ID obtained from there is less reliable than
    the one from /proc/self/loginuid.
    
    Reviewed-by: Sam James <sam@gentoo.org>
    (cherry picked from commit 28660f4b45afa8921c2faebaec2846f95f670ba0)
    (cherry picked from commit d6cb7ce0e98b2c16df5b2f5b9693d0130ccb8af5)

 sysdeps/unix/sysv/linux/getlogin_r.c | 21 +++++++++++++++++----
 1 file changed, 17 insertions(+), 4 deletions(-)

commit c19373bd7256e5317a03594a36191418a25a6246
Author:     Florian Weimer <fweimer@redhat.com>
AuthorDate: Fri Feb 13 09:02:07 2026 +0100
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Mon Feb 23 15:54:02 2026 +0100

    nss: Introduce dedicated struct nss_database_for_fork type
    
    The initialized field in struct nss_database_data is rather confusing
    because it is not used by the regular NSS code, only by the fork
    state synchronization code.  Introduce a separate type and place
    the initialized field there.
    
    Reviewed-by: Sam James <sam@gentoo.org>
    (cherry picked from commit 7bb859f4198d0be19c31a9937eae4f6c2c9a079e)
    (cherry picked from commit 140c760d711d03c0230dff218b5268b11935f92e)

 nss/nss_database.c | 14 +++++++-------
 nss/nss_database.h | 12 +++++++++---
 posix/fork.c       |  2 +-
 3 files changed, 17 insertions(+), 11 deletions(-)

commit 4e7a1009c70108befdec7dfd3215c9e1cda2485f
Author:     Andreas Schwab <schwab@suse.de>
AuthorDate: Tue Feb 3 12:41:23 2026 +0100
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Mon Feb 23 15:53:45 2026 +0100

    Don't include <bits/openat2.h> directly (bug 33848)
    
    Headers from bits directories should never be included directly, only via
    the official headers.
    
    (cherry picked from commit 0e47414ce87f3b088ff454fc6c7d1129ff9617ec)
    (cherry picked from commit 856c426a753450b8c6861a5b994a564f4fc16d4b)

 NEWS                              | 2 ++
 sysdeps/unix/sysv/linux/openat2.c | 1 -
 2 files changed, 2 insertions(+), 1 deletion(-)

commit d9f7d850fd362e3ce01c1d3a2f39fd95e773fcee
Author:     Andreas K. Hüttel <dilfridge@gentoo.org>
AuthorDate: Mon Jan 26 01:29:30 2026 +0100
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Mon Feb 23 15:53:29 2026 +0100

    po: Incorporate translatins (nl updated, ar new)
    
    Signed-off-by: Andreas K. Hüttel <dilfridge@gentoo.org>
    (cherry picked from commit bad2da7f779dbabb0e2e2c73037489e9f161183e)
    (cherry picked from commit 144ba302089cff5a2f2e1c9e1280faea9da9f8cc)

 po/ar.po | 7168 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
 po/nl.po |   71 +-
 2 files changed, 7232 insertions(+), 7 deletions(-)

commit efbd0cfd3bcfd0a9986dc047ebdb71729d55c68d
Author:     Aurelien Jarno <aurelien@aurel32.net>
AuthorDate: Tue Jan 20 18:25:08 2026 +0100
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Mon Feb 23 15:53:14 2026 +0100

    Fix ldbl-128ibm ceill, floorl, roundl and truncl zero-sign handling
    
    When the result of ceill, floorl, roundl and truncl is zero, the sign of
    the result must match the sign of the input. For the IBM 128-bit long
    double format, the sign is determined by the high part.
    
    Ensure the correct sign when the high part is the result of
    computations, by copying the sign from the input high part to the output
    high part. On POWER, this conveniently maps to the fcpsgn instruction.
    
    In addition add test for the values provided in BZ #33623, and for the
    opposite value when the result is 0.
    
    Fixes: BZ #33623
    
    Reviewed-by: Adhemerval Zanella  <adhemerval.zanella@linaro.org>
    (cherry picked from commit 6f4b28b20aa9161aeb42a7f34f4d3b96194e5666)
    (cherry picked from commit 022abaeacbc85d8409bad22375b16a8c07d3ae39)

 NEWS                                   | 2 ++
 math/libm-test-ceil.inc                | 3 +++
 math/libm-test-floor.inc               | 3 +++
 math/libm-test-round.inc               | 4 ++++
 math/libm-test-trunc.inc               | 4 ++++
 sysdeps/ieee754/ldbl-128ibm/s_ceill.c  | 3 +++
 sysdeps/ieee754/ldbl-128ibm/s_floorl.c | 3 +++
 sysdeps/ieee754/ldbl-128ibm/s_roundl.c | 3 +++
 sysdeps/ieee754/ldbl-128ibm/s_truncl.c | 3 +++
 9 files changed, 28 insertions(+)

commit 52e48a32b5ad70e2611c3d05db44ae074f62c7f6 (tag: gentoo/glibc-2.43-1)
Author:     Ludwig Rydberg <ludwig.rydberg@gaisler.com>
AuthorDate: Fri Jun 13 12:22:41 2025 +0200
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sat Jan 24 02:33:51 2026 +0100

    sparc: Fix argument passing to __libc_start_main on SPARC32
    
    Use a custom __libc_start_main function so the highest stack address can
    be provided to __libc_start_main_impl without altering the content of
    the stack (as there is no room for adding arguments to the stack).
    
    The __libc_stack_end was written to [%sp+23*4] but that address is
    already in use (holds the pointer to argv) which led to corruption.
    
    Fixes: d952c6efaa87 ("sparc: Fix argument passing to __libc_start_main (BZ 32981)")
    Signed-off-by: Ludwig Rydberg <ludwig.rydberg@gaisler.com>
    (cherry picked from commit c8305ccf787df8b16a5db18254a3737069a390b7)

 sysdeps/sparc/sparc32/start.S                      |  6 ++---
 sysdeps/unix/sysv/linux/sparc/sparc32/libc-start.c | 30 ++++++++++++++++++++++
 2 files changed, 32 insertions(+), 4 deletions(-)

commit b2c1e1f8ab6adb672d606ac8b141279916cebd9b
Author:     Andreas K. Hüttel <dilfridge@gentoo.org>
AuthorDate: Mon Dec 1 23:53:01 2025 -0300
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sat Jan 24 02:33:48 2026 +0100

    Revert "sparc: Fix sparc32 Fix argument passing to __libc_start_main (BZ 32981)"
    
    This reverts commit 8b37c99ef19c79b2bfe84be3b5a4348ef09b0d76.
    
    (cherry picked from commit 1edc76ee1fb1e9d9a300bd0439580de91bea92e8)

 sysdeps/sparc/sparc32/start.S | 7 +++----
 1 file changed, 3 insertions(+), 4 deletions(-)

commit 621dad6de91f5a355f8e8577715979f2cd304b0a
Author:     Adhemerval Zanella <adhemerval.zanella@linaro.org>
AuthorDate: Mon Apr 13 18:09:20 2020 -0300
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sat Jan 24 02:33:45 2026 +0100

    linux: Set internal DIR filepos as off64_t (BZ #23960, BZ #24050)
    
    It allows to obtain the expected entry offset on telldir and set
    it correctly on seekdir on platforms where long int is smaller
    than off64_t.
    
    On such cases opendir creates a map entry between the DIR d_off
    offset and the returned long int (the telldir return value).
    seekdir will then set the correct offset from the internal list
    using the telldir as the list key.
    
    It also removes the overflow check on readdir and the returned value
    will be truncated by the non-LFS off_t size.  As Joseph has noted
    in BZ #23960 comment #22, d_off is an opaque value and since
    telldir/seekdir works regardless of the returned dirent d_off value.
    
    Finally it removes the requirement to check for overflow values on
    telldir (BZ #24050).
    
    Checked on x86_64-linux-gnu, i686-linux-gnu, powerpc-linux-gnu,
    and arm-linux-gnueabihf.
    
    Rebased for glibc-2.41 by Andreas K. Hüttel <dilfridge@gentoo.org>

 include/dirent.h                            |   2 +-
 sysdeps/unix/sysv/linux/Makefile            |   2 +
 sysdeps/unix/sysv/linux/alpha/bits/dirent.h |   3 +
 sysdeps/unix/sysv/linux/bits/dirent.h       |   4 +
 sysdeps/unix/sysv/linux/closedir.c          |   4 +
 sysdeps/unix/sysv/linux/dirstream.h         |   9 +-
 sysdeps/unix/sysv/linux/opendir.c           |   3 +
 sysdeps/unix/sysv/linux/readdir.c           |  21 ++--
 sysdeps/unix/sysv/linux/readdir64.c         |  11 +++
 sysdeps/unix/sysv/linux/rewinddir.c         |   5 +
 sysdeps/unix/sysv/linux/seekdir.c           |  30 +++++-
 sysdeps/unix/sysv/linux/telldir.c           |  36 +++++++
 sysdeps/unix/sysv/linux/telldir.h           |  70 ++++++++++++++
 sysdeps/unix/sysv/linux/tst-opendir-lfs.c   |   2 +
 sysdeps/unix/sysv/linux/tst-opendir.c       | 145 ++++++++++++++++++++++++++++
 15 files changed, 329 insertions(+), 18 deletions(-)

commit 3e65f71ea0b9268c38e6d4e933b3395cbf9d5b23
Author:     Adhemerval Zanella <adhemerval.zanella@linaro.org>
AuthorDate: Wed Mar 1 14:41:23 2023 -0300
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sat Jan 24 02:33:42 2026 +0100

    support: Add xreallocarray
    
    As a wrapper over reallocarray.

 support/Makefile        |  1 +
 support/support.h       |  2 ++
 support/xreallocarray.c | 29 +++++++++++++++++++++++++++++
 3 files changed, 32 insertions(+)

commit 922ab844d8a64a1381a79e0239c0290eb51c1833
Author:     Adhemerval Zanella <adhemerval.zanella@linaro.org>
AuthorDate: Tue Oct 20 13:37:15 2020 -0300
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sat Jan 24 02:33:39 2026 +0100

    linux: Use getdents64 on non-LFS readdir
    
    It is similar to what non-LFS getdents do (including overflow check).
    
    Checked on x86_64-linux-gnu and i686-linux-gnu.

 sysdeps/unix/sysv/linux/readdir.c | 97 +++++++++++++++++++++++++++++----------
 1 file changed, 73 insertions(+), 24 deletions(-)

commit e0a6115f92d4723761954f3d6ded6f5496ee111d
Author:     Andreas K. Hüttel <dilfridge@gentoo.org>
AuthorDate: Fri Dec 14 20:43:04 2018 +0100
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sat Jan 24 02:33:37 2026 +0100

    Force -O0 in conform tests to survive $CC changes
    
    In bug #659030 Gentoo started passing user's CFLAGS via $CC variable.
    conform tests should but are not ready to handle -O1/-O2 yet.
    Tests fail to validate headers due to inlining of weak symbol aliases
    and other problems. Let's force it back to -O0 until it's fixed upstream.
    
    Original patch by Sergei, ported to the new python test framework by Andreas
    
    Bug: https://bugs.gentoo.org/659030
    Signed-off-by: Sergei Trofimovich <slyfox@gentoo.org>
    Signed-off-by: Andreas K. Hüttel <dilfridge@gentoo.org>

 conform/conformtest.py   | 6 ++++--
 conform/linknamespace.py | 4 +++-
 2 files changed, 7 insertions(+), 3 deletions(-)

commit 97a0bd7d3f51d9208d9c8b15535f89db773a5f9c
Author:     Andreas K. Hüttel <dilfridge@gentoo.org>
AuthorDate: Mon Oct 22 22:34:13 2018 +0200
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sat Jan 24 02:33:34 2026 +0100

    Adapt to Gentoo-specific /etc/mail/aliases
    
    Patch by pacho2
    
    Signed-off-by: Andreas K. Hüttel <dilfridge@gentoo.org>
    (cherry picked from commit 4e616cda056f471b799beba2b1cedc787ad4ecc0)
    Signed-off-by: Andreas K. Hüttel <dilfridge@gentoo.org>

 nss/nss_files/files-alias.c    |  2 +-
 nss/tst-nss-files-alias-leak.c | 18 +++++++++---------
 support/support_chroot.c       |  8 +++++++-
 3 files changed, 17 insertions(+), 11 deletions(-)

commit 8907b76b75edd04a9d1ccf49cb49c578ebb92088
Author:     Mike Frysinger <vapier@gentoo.org>
AuthorDate: Tue Aug 3 00:34:59 2021 +0200
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sat Jan 24 02:33:31 2026 +0100

    Disable ldconfig during install
    
    Do not bother running ldconfig on DESTDIR.  It's a waste of time as we
    won't use the result (portage will rebuild the cache after install).
    Also, the Gentoo sandbox does not currently catch chroot() behavior so
    we end up (incorrectly) flagging it as a violation as a write to /etc.
    
    http://sourceware.org/ml/libc-alpha/2012-08/msg00118.html
    https://bugs.gentoo.org/431038
    Signed-off-by: Andreas K. Hüttel <dilfridge@gentoo.org>

 Makefile | 1 +
 1 file changed, 1 insertion(+)

commit 45b58d6bd185b8c6d0c5b2b906243c1ecbaaecab
Author:     Andreas K. Hüttel <dilfridge@gentoo.org>
AuthorDate: Sat Jan 24 02:32:06 2026 +0100
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Sat Jan 24 02:32:06 2026 +0100

    NEWS: add new section 2.43.1
    
    Signed-off-by: Andreas K. Hüttel <dilfridge@gentoo.org>

 NEWS | 5 +++++
 1 file changed, 5 insertions(+)

commit f02515d8a6963158e0e4be8034b96c658e1b9a32
Author:     Andreas K. Hüttel <dilfridge@gentoo.org>
AuthorDate: Fri Jan 23 23:59:36 2026 +0100
Commit:     Andreas K. Hüttel <dilfridge@gentoo.org>
CommitDate: Fri Jan 23 23:59:36 2026 +0100

    Replace advisories directory with file ADVISORIES
    
    Signed-off-by: Andreas K. Hüttel <dilfridge@gentoo.org>

 ADVISORIES                    |  2 ++
 advisories/GLIBC-SA-2023-0001 | 14 --------
 advisories/GLIBC-SA-2023-0002 | 15 ---------
 advisories/GLIBC-SA-2023-0003 | 15 ---------
 advisories/GLIBC-SA-2023-0004 | 16 ---------
 advisories/GLIBC-SA-2023-0005 | 18 ----------
 advisories/GLIBC-SA-2024-0001 | 15 ---------
 advisories/GLIBC-SA-2024-0002 | 15 ---------
 advisories/GLIBC-SA-2024-0003 | 13 --------
 advisories/GLIBC-SA-2024-0004 | 28 ----------------
 advisories/GLIBC-SA-2024-0005 | 22 -------------
 advisories/GLIBC-SA-2024-0006 | 32 ------------------
 advisories/GLIBC-SA-2024-0007 | 28 ----------------
 advisories/GLIBC-SA-2024-0008 | 26 ---------------
 advisories/GLIBC-SA-2025-0001 | 40 ----------------------
 advisories/GLIBC-SA-2025-0002 | 23 -------------
 advisories/GLIBC-SA-2025-0003 | 30 -----------------
 advisories/GLIBC-SA-2025-0004 | 29 ----------------
 advisories/GLIBC-SA-2025-0005 | 14 --------
 advisories/GLIBC-SA-2026-0001 | 41 -----------------------
 advisories/GLIBC-SA-2026-0002 | 36 --------------------
 advisories/GLIBC-SA-2026-0003 | 36 --------------------
 advisories/README             | 77 -------------------------------------------
 23 files changed, 2 insertions(+), 583 deletions(-)
