fix(glibc): CVE-2026-5928 - fix ungetwc operating on byte stream

[deepin-ci-robot]

CVE 修复\n\nCVE: CVE-2026-5928\nFix ungetwc using byte stream buffer instead of wide stream buffer\n\nUpstream: bminor/glibc@ef3bfb5f910011f3780cb06aa47e730035f53285\n\nFix-Approach: patch\nGenerated-By: deepseek-v4-flash\nCo-Authored-By: hudeng hudeng@deepin.org

[deepin-ci-robot]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign goldendeng for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• https:/raw.githubusercontent.com/deepin-community/template-repository/master/debian/deepin/OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[github-actions]

TAG Bot

TAG: 2.38-6deepin26
EXISTED: no
DISTRIBUTION: unstable

[Zeno-sole]

dpkg-source: info: applying all/math-Remove-ldbl-96-fma-implementation.patch
dpkg-source: info: applying resolv-Count-records-correctly-CVE-2026-4437.patch
dpkg-source: info: applying resolv-Check-hostname-for-validity-CVE-2026-4438.patch
dpkg-source: info: applying iconvdata-Use-pending-character-state-in-IBM1390-IBM1399-character-sets-CVE-2026-4046.patch
dpkg-buildpackage: warning: building a source package without cleaning up as you asked; it might contain undesired files
dpkg-source -i -I -b .
dpkg-source: info: using source format '3.0 (quilt)'
dpkg-source: info: building glibc using existing ./glibc_2.38.orig.tar.gz
dpkg-source: info: using patch list from debian/patches/series
dpkg-source: info: building glibc in glibc_2.38-6deepin26.debian.tar.xz
dpkg-source: info: building glibc in glibc_2.38-6deepin26.dsc
dpkg-genbuildinfo --build=source
dpkg-genbuildinfo: warning: debian/changelog(l8): version 'CVE-2026-5450+fix1' is invalid: version number does not start with digit
LINE: glibc (CVE-2026-5450+fix1) unstable; urgency=high
Use of uninitialized value $value in pattern match (m//) at /usr/lib/perl5/vendor_perl/5.26.1/Dpkg/Control/HashCore.pm line 358.
dpkg-genchanges --build=source >../glibc_2.38-6deepin26_source.changes
dpkg-genchanges: warning: debian/changelog(l8): version 'CVE-2026-5450+fix1' is invalid: version number does not start with digit
LINE: glibc (CVE-2026-5450+fix1) unstable; urgency=high
Use of uninitialized value $vendor in lc at /usr/lib/perl5/vendor_perl/5.26.1/Dpkg/Substvars.pm line 271.
dpkg-genchanges: error: unknown is not a valid version
dpkg-buildpackage: error: dpkg-genchanges subprocess returned exit status 2
debuild: fatal error at line 1182:
dpkg-buildpackage -us -uc -ui -i -I -nc -S failed
gbp:error: 'debuild -i -I -nc -uc -us -S' failed: it exited with 29

[hudeng-go]

#47 新的修复pr。