debian/changelog

-glibc (2.39-5) UNRELEASED; urgency=medium
+glibc (2.39-5) unstable; urgency=medium
   [ Samuel Thibault ]
   * debian/patches/hurd-i386/git-pthread_self{,.2}.diff: Fix pthread_self()
@@ -8,8 +8,12 @@ glibc (2.39-5) UNRELEASED; urgency=medium
   * debian/patches/git-updates.diff: update from upstream stable branch:
     - Fixes stdlib/tst-swapcontext2 test on hppa.  Closes: #1076512.
   * debian/rules.d/tarball.mk: remove useless code.
- -- Samuel Thibault <sthibault@debian.org>  Wed, 17 Jul 2024 14:16:31 +0200
+  * debian/sysdeps/arm64.mk: compile with -mbranch-protection=standard on
+    arm64 to enable PAC/BTI support.  Closes: #1063515.
+  * debian/control.in/main: build-depends on g++13-for-host (>= 13.3.0-3) on
+    arm64 to ensure PAC/BTI support in GCC.
+ -- Aurelien Jarno <aurel32@debian.org>  Mon, 22 Jul 2024 22:58:49 +0200
 glibc (2.39-4) unstable; urgency=medium

debian/control

@@ -9,6 +9,7 @@ Build-Depends: gettext, dpkg (>= 1.18.7), dpkg-dev (>= 1.17.14), xz-utils, file,
  hurd-dev (>= 1:0.9.git20201127-4~) [hurd-any] | hurd-headers-dev [hurd-any],
  binutils-for-host (>= 2.38),
  g++-13-for-host, g++-13-multilib [amd64 i386 mips mipsel mipsn32 mipsn32el mips64 mips64el mipsr6 mipsr6el mipsn32r6 mipsn32r6el mips64r6 mips64r6el powerpc ppc64 s390x sparc sparc64 x32] <!nobiarch>,
+ g++-13-for-host (>= 13.3.0-3) [arm64],
  python3:native,
  libidn2-0 (>= 2.0.5~) <!nocheck>,
  libc-bin (>= 2.39) <cross>,

debian/control.in/main

@@ -9,6 +9,7 @@ Build-Depends: gettext, dpkg (>= 1.18.7), dpkg-dev (>= 1.17.14), xz-utils, file,
  hurd-dev (>= 1:0.9.git20201127-4~) [hurd-any] | hurd-headers-dev [hurd-any],
  binutils-for-host (>= 2.38),
  g++@DEB_GCC_VERSION@-for-host, g++@DEB_GCC_VERSION@-multilib [amd64 i386 mips mipsel mipsn32 mipsn32el mips64 mips64el mipsr6 mipsr6el mipsn32r6 mipsn32r6el mips64r6 mips64r6el powerpc ppc64 s390x sparc sparc64 x32] <!nobiarch>,
+ g++@DEB_GCC_VERSION@-for-host (>= 13.3.0-3) [arm64],
  python3:native,
  libidn2-0 (>= 2.0.5~) <!nocheck>,
  libc-bin (>= @DEB_VERSION_UPSTREAM@) <cross>,

debian/sysdeps/arm64.mk

@@ -3,3 +3,6 @@ extra_config_options = --enable-multi-arch --enable-memory-tagging
 
 # main library
 libc_mvec = yes
+
+CC = $(DEB_HOST_GNU_TYPE)-$(BASE_CC)$(DEB_GCC_VERSION) -mbranch-protection=standard
+CXX = $(DEB_HOST_GNU_TYPE)-$(BASE_CXX)$(DEB_GCC_VERSION) -mbranch-protection=standard