-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 12 Dec 2025 18:43:13 +0000 Source: glib2.0 Binary: gir1.2-girepository-3.0 gir1.2-girepository-3.0-dev gir1.2-glib-2.0 gir1.2-glib-2.0-dev girepository-tools girepository-tools-dbgsym libgio-2.0-dev libgio-2.0-dev-bin libgio-2.0-dev-bin-dbgsym libgirepository-2.0-0 libgirepository-2.0-0-dbgsym libgirepository-2.0-dev libglib2.0-0t64 libglib2.0-0t64-dbgsym libglib2.0-bin libglib2.0-bin-dbgsym libglib2.0-dev libglib2.0-dev-bin libglib2.0-tests libglib2.0-tests-dbgsym libglib2.0-udeb Architecture: arm64 Version: 2.84.4-3~deb13u2 Distribution: trixie Urgency: medium Maintainer: arm Build Daemon (arm-ubc-02) Changed-By: Simon McVittie Description: gir1.2-girepository-3.0 - Introspection data for GIRepository library, API version 3.0 gir1.2-girepository-3.0-dev - GIR XML for GIRepository library, API version 3.0 gir1.2-glib-2.0 - Introspection data for GLib, GObject, Gio and GModule gir1.2-glib-2.0-dev - GIR XML for GLib, GObject, Gio and GModule girepository-tools - Tools for working with GObject-Introspection repositories libgio-2.0-dev - Development files for the GLib, GObject and GIO libraries libgio-2.0-dev-bin - Development utilities for GLib, GObject and GIO libraries libgirepository-2.0-0 - GLib runtime library for handling GObject introspection data libgirepository-2.0-dev - Development files for the GObject introspection library libglib2.0-0t64 - GLib library of C routines libglib2.0-bin - Programs for the GLib library libglib2.0-dev - Development metapackage for the GLib family of libraries libglib2.0-dev-bin - Development utilities for the GLib library libglib2.0-tests - GLib library of C routines - installed tests libglib2.0-udeb - GLib library of C routines - minimal runtime (udeb) Closes: 1121488 1122346 1122347 Changes: glib2.0 (2.84.4-3~deb13u2) trixie; urgency=medium . * d/patches: Add patches from 2.86.3 upstream to avoid integer overflows - d/p/gconvert-Error-out-if-g_escape_uri_string-would-overflow.patch, d/p/fuzzing-Add-fuzz-tests-for-g_filename_-to-from-_uri.patch: Fix an integer overflow when interpolating hundreds of megabytes of unescaped text into a URI, and add test coverage (CVE-2025-13601, glib#3827 upstream, Closes: #1121488) - d/p/gvariant-parser-Fix-potential-integer-overflow-parsing-by.patch: Fix an integer overflow when parsing very large strings in GVariant text format (CVE-2025-14087, glib#3834 upstream, Closes: #1122347) - d/p/gvariant-parser-Use-size_t-to-count-numbers-of-child-elem.patch, d/p/gvariant-parser-Convert-error-handling-code-to-use-size_t.patch: Fix other potential integer overflows parsing very large container types in GVariant text format, related to CVE-2025-14087 - d/p/gfileattribute-Fix-integer-overflow-calculating-escaping-.patch: Fix an integer overflow when escaping invalid characters in very large file attributes (CVE-2025-14512, glib#3845 upstream, Closes: #1122346) Checksums-Sha1: d5388190417dd9d37dae7ab61eacde3d3a8433dd 84584 gir1.2-girepository-3.0-dev_2.84.4-3~deb13u2_arm64.deb 980647a6625b3084c37160dfe63766354c5638e1 61468 gir1.2-girepository-3.0_2.84.4-3~deb13u2_arm64.deb df0e09501bd75885c05c55ff42fbde303d3ae961 916600 gir1.2-glib-2.0-dev_2.84.4-3~deb13u2_arm64.deb db258f99ced0ca0d32c561921a5709bd4c933e3d 199052 gir1.2-glib-2.0_2.84.4-3~deb13u2_arm64.deb 9a8634395cd6d3d9dc209195d0b0a93793503a45 307072 girepository-tools-dbgsym_2.84.4-3~deb13u2_arm64.deb 4d15cffcc2707e7e3df501c5db1e391d78857bec 139520 girepository-tools_2.84.4-3~deb13u2_arm64.deb 8295f44aa3ffc2ae271e04755700fa26df71d2f9 15889 glib2.0_2.84.4-3~deb13u2_arm64-buildd.buildinfo c1edb6e41b80dda67647b962838a60a6092ec37c 81188 libgio-2.0-dev-bin-dbgsym_2.84.4-3~deb13u2_arm64.deb 57058d0c285e8b43acee1ba923006be2bad49fd4 165648 libgio-2.0-dev-bin_2.84.4-3~deb13u2_arm64.deb f137fabc46e8062ff44d20c8c823333c8ca451d4 1707488 libgio-2.0-dev_2.84.4-3~deb13u2_arm64.deb 055df7d76e918c48b1040a66c389bc79b1b78627 324060 libgirepository-2.0-0-dbgsym_2.84.4-3~deb13u2_arm64.deb 23b5c4540b1a26ad70e648379723c39fa15e42ef 134364 libgirepository-2.0-0_2.84.4-3~deb13u2_arm64.deb 88d25e1c55d67d287f28267381a3a358a5359e4c 209608 libgirepository-2.0-dev_2.84.4-3~deb13u2_arm64.deb b7019475d864db29333948452f2615b7329a8b79 4536080 libglib2.0-0t64-dbgsym_2.84.4-3~deb13u2_arm64.deb 31415ad8219e09b1e13eb9282f46a2944b82085c 1427804 libglib2.0-0t64_2.84.4-3~deb13u2_arm64.deb d985e4542747034b898dd370c28fb755d313e12f 174600 libglib2.0-bin-dbgsym_2.84.4-3~deb13u2_arm64.deb e4f57747320ef8d2c5caf8b0183271fdda82f08a 126632 libglib2.0-bin_2.84.4-3~deb13u2_arm64.deb 9a795d02c8e0a7cf245db4b04a8454ebfcf72195 55264 libglib2.0-dev-bin_2.84.4-3~deb13u2_arm64.deb 1bf908a7aece15f2103fa12bbcf7c39eb680080f 56060 libglib2.0-dev_2.84.4-3~deb13u2_arm64.deb 6eb60797353dd0a67ae88edbcf184613e5e8e9f3 6040100 libglib2.0-tests-dbgsym_2.84.4-3~deb13u2_arm64.deb 7e8da4c10e22fe4c8048d75149cf3907e698e144 1950520 libglib2.0-tests_2.84.4-3~deb13u2_arm64.deb b17da84ed88000d30c34e37a7ae8cd78d76812fc 2287800 libglib2.0-udeb_2.84.4-3~deb13u2_arm64.udeb Checksums-Sha256: 6725bb798a4e79d9a9176977823bec70bab5542e6b5072ef424f0170971ac5b8 84584 gir1.2-girepository-3.0-dev_2.84.4-3~deb13u2_arm64.deb d19421238b42ee2edf63d61ed9473d762f5446c35ed11a29d46c00fb9ae85f56 61468 gir1.2-girepository-3.0_2.84.4-3~deb13u2_arm64.deb f569c5e2811eff743b6081982eb6079fecff2a2a8a7c2448a7544ac93f0dbd64 916600 gir1.2-glib-2.0-dev_2.84.4-3~deb13u2_arm64.deb 9487d424f86e545e8dd977ca276d49321d1d181bb5f2d6454371ae57d1347c04 199052 gir1.2-glib-2.0_2.84.4-3~deb13u2_arm64.deb fa4df2ddeaf5fcb67008d3f553667f871b8fc17574c8182d18c7f53494105b53 307072 girepository-tools-dbgsym_2.84.4-3~deb13u2_arm64.deb 0d390a713b446b1afab79f3fc1261a87a28dc18e3dbd5e39372fa336a0459faa 139520 girepository-tools_2.84.4-3~deb13u2_arm64.deb e9b053ec59d8b84e90aba7533f39166b02e350e98ad7c9fadda76f8c4b4b4579 15889 glib2.0_2.84.4-3~deb13u2_arm64-buildd.buildinfo 6db9e396f0aa25c0e346a91ccd46938a385fc0532da23ee79530a30856ff074e 81188 libgio-2.0-dev-bin-dbgsym_2.84.4-3~deb13u2_arm64.deb ede0c4ecedd8c02fc2c85f3cb182d9e14a6bc0126114815875a88f3b2bfdfcb8 165648 libgio-2.0-dev-bin_2.84.4-3~deb13u2_arm64.deb 4f841dd11aefd6bed365d1c830aa273c9c9db2a2aee90c8ae8cf21a8cca3398c 1707488 libgio-2.0-dev_2.84.4-3~deb13u2_arm64.deb 59c9637a9bc8abf5a83bd0079100573132c404c43885819b0c36a9aba896becf 324060 libgirepository-2.0-0-dbgsym_2.84.4-3~deb13u2_arm64.deb 87db0dff26393384ef4110baccb1007e0f34e775a11f5a411aa452e345765c37 134364 libgirepository-2.0-0_2.84.4-3~deb13u2_arm64.deb abbd6f535334f78c0f82e494a7660b43d12fa39132e3d63fa2234b4ad1ebae64 209608 libgirepository-2.0-dev_2.84.4-3~deb13u2_arm64.deb b1b792ab79930725103850264bcf9e651a2735eea01eaa53e6027983d124bcdd 4536080 libglib2.0-0t64-dbgsym_2.84.4-3~deb13u2_arm64.deb 61ac86d96726c10403028a7674575504f46c0e0a4f6fac7c9447502d579b7649 1427804 libglib2.0-0t64_2.84.4-3~deb13u2_arm64.deb 77d976c9075e78cafd1e7639297fbd0ebd2b88e575b898769e1ba5da78d41850 174600 libglib2.0-bin-dbgsym_2.84.4-3~deb13u2_arm64.deb 9a6cf38eaee8274076c2f4fe2ce8bf6af3119b5c53a1ba04641c9b17a6071d07 126632 libglib2.0-bin_2.84.4-3~deb13u2_arm64.deb 669520535aca71ca00b52190abb7efec2d5e1a1aebfa3a59420e53aa4d8e56d0 55264 libglib2.0-dev-bin_2.84.4-3~deb13u2_arm64.deb f004e26e45898c97513a245ba68e215e00a7dbf45d65ce2f5100b884e4faa0f7 56060 libglib2.0-dev_2.84.4-3~deb13u2_arm64.deb f8378da708f2035a82c7b5f6a0484fafc25e789ebe75c143584cdef1578b87ab 6040100 libglib2.0-tests-dbgsym_2.84.4-3~deb13u2_arm64.deb 1e5b97581e4143a00010a5f5900f9e704f2272575065d2937ff3039b7700d011 1950520 libglib2.0-tests_2.84.4-3~deb13u2_arm64.deb 6b194d3ded254e789d92e40f7af413cda3bf2d46bf97222fa2debd7311ef3682 2287800 libglib2.0-udeb_2.84.4-3~deb13u2_arm64.udeb Files: 638dae4c9481357ab9008ff5aa09d1c3 84584 libdevel optional gir1.2-girepository-3.0-dev_2.84.4-3~deb13u2_arm64.deb 3b2ac71cfa6462d9589ca167a02a7d99 61468 introspection optional gir1.2-girepository-3.0_2.84.4-3~deb13u2_arm64.deb 35806ea33256ce44baccda2b8fb263bd 916600 libdevel optional gir1.2-glib-2.0-dev_2.84.4-3~deb13u2_arm64.deb 3ffa8088b4578d2f76d8be7bdb6c1b60 199052 introspection optional gir1.2-glib-2.0_2.84.4-3~deb13u2_arm64.deb 8b321fd88b2ac4a92cfa93efaa2c5fbd 307072 debug optional girepository-tools-dbgsym_2.84.4-3~deb13u2_arm64.deb 71eff326b494203a98c203b7f9de8cc3 139520 libdevel optional girepository-tools_2.84.4-3~deb13u2_arm64.deb dcd99ae4b4398bc1ae9a02ea50d785a7 15889 libs optional glib2.0_2.84.4-3~deb13u2_arm64-buildd.buildinfo bbae39cbb2afdf1e8585a2de51d25453 81188 debug optional libgio-2.0-dev-bin-dbgsym_2.84.4-3~deb13u2_arm64.deb 30f00b1689b0ed97b7f5174422653e7e 165648 libdevel optional libgio-2.0-dev-bin_2.84.4-3~deb13u2_arm64.deb fea157c704c94d4e5984ebf4fc59e864 1707488 libdevel optional libgio-2.0-dev_2.84.4-3~deb13u2_arm64.deb 5cbfdf801a10db1b4b597b6e2d4cf03c 324060 debug optional libgirepository-2.0-0-dbgsym_2.84.4-3~deb13u2_arm64.deb 9aab432df7843c1f11fc429c8cee0736 134364 libs optional libgirepository-2.0-0_2.84.4-3~deb13u2_arm64.deb 98968c35dce4c0ad918a2ffae807ca7e 209608 libdevel optional libgirepository-2.0-dev_2.84.4-3~deb13u2_arm64.deb 0b4491a9483eb5966d3a8847bba3beb1 4536080 debug optional libglib2.0-0t64-dbgsym_2.84.4-3~deb13u2_arm64.deb 16f98e2f1607556c580c016dfc277aa5 1427804 libs optional libglib2.0-0t64_2.84.4-3~deb13u2_arm64.deb 815c4b7d252bd7b2d2b9221ae6275495 174600 debug optional libglib2.0-bin-dbgsym_2.84.4-3~deb13u2_arm64.deb 1261983ba1cfcb75bb3f0de63546ab6e 126632 misc optional libglib2.0-bin_2.84.4-3~deb13u2_arm64.deb bfd42e46a9111f199302624d8253855a 55264 libdevel optional libglib2.0-dev-bin_2.84.4-3~deb13u2_arm64.deb 8f5cf6795a8ef262b8e84aaebd886414 56060 libdevel optional libglib2.0-dev_2.84.4-3~deb13u2_arm64.deb a4e5086b856249ef7fa614055a3c381b 6040100 debug optional libglib2.0-tests-dbgsym_2.84.4-3~deb13u2_arm64.deb 83892e1aef7c943ef1a7b0194cdb629b 1950520 libs optional libglib2.0-tests_2.84.4-3~deb13u2_arm64.deb d4609bd12cb47785bbc74b2d4ab9c071 2287800 debian-installer optional libglib2.0-udeb_2.84.4-3~deb13u2_arm64.udeb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEbIns2iWsAAdAqh2MS/ZIXkV8oLAFAmlIHf8ACgkQS/ZIXkV8 oLDtjhAAyyx2ywjSYtW4Z9gwUJSNlQvCOvS2xTzFzhCZI77ha4pLzTU+KlEu8ReW i+fNJ+ixbb0hDTyRBNb490Ae18wztvclI+fGcNrXOOCTRB3yjLVjW1gGDFt3dpzm oGA2pqrNoUX8A3jlMzbmYcZ2i4wcjB5ekuPua4L1U45E3rRbVNG/DEHsItFtptgK SzkxbGu8JyZ7UN1gjW9yzwhCTQZw8WQW359ATkdm0MMpAhgK0XDeruxXlD8vtWOd zYggeFOL5Wrp3C92E16lMDO87ikDINRZpbEWgnTaZ0yIAfmJLST2B44fCX5MyUzO rHXWeghpDX4p6HjdFOzLVphaUe30hYhDlIq0jY6x4q+M5ZPMv44PJNLp0BxRJTG8 Z9P3dYkk+AOwLSDvg6mSegwYw3qSjzTSDhNnLkeOsIjU9iL/wQzSo6b5ZKjFz/zA Bwmy+TOsSNnUkWLruCa1p9+9bunAuveTsnebPv2BU8kGvFTAEGHicppiyPNPMAJ4 ZTDednh41Chdpfka0rbvIZACCp1HgpahPXbRmxBWMtoflixU+cpVzL1S6GaJ3LQ9 Bsd+GF9NM5bfQ2YvrI0TwMzjJdtMi8FqOo5xbIvbfx2AH5oE/6BqbUK15vYfPOXW 8u2AOui8L7tphXbXwSbiFzt4a+fwlOwCz4LLa/x7gMmKbFI4xlY= =sMVy -----END PGP SIGNATURE-----