-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 12 Dec 2025 18:43:13 +0000 Source: glib2.0 Binary: gir1.2-girepository-3.0 gir1.2-girepository-3.0-dev gir1.2-glib-2.0 gir1.2-glib-2.0-dev girepository-tools girepository-tools-dbgsym libgio-2.0-dev libgio-2.0-dev-bin libgio-2.0-dev-bin-dbgsym libgirepository-2.0-0 libgirepository-2.0-0-dbgsym libgirepository-2.0-dev libglib2.0-0t64 libglib2.0-0t64-dbgsym libglib2.0-bin libglib2.0-bin-dbgsym libglib2.0-dev libglib2.0-dev-bin libglib2.0-tests libglib2.0-tests-dbgsym libglib2.0-udeb Architecture: armel Version: 2.84.4-3~deb13u2 Distribution: trixie Urgency: medium Maintainer: arm Build Daemon (arm-ubc-03) Changed-By: Simon McVittie Description: gir1.2-girepository-3.0 - Introspection data for GIRepository library, API version 3.0 gir1.2-girepository-3.0-dev - GIR XML for GIRepository library, API version 3.0 gir1.2-glib-2.0 - Introspection data for GLib, GObject, Gio and GModule gir1.2-glib-2.0-dev - GIR XML for GLib, GObject, Gio and GModule girepository-tools - Tools for working with GObject-Introspection repositories libgio-2.0-dev - Development files for the GLib, GObject and GIO libraries libgio-2.0-dev-bin - Development utilities for GLib, GObject and GIO libraries libgirepository-2.0-0 - GLib runtime library for handling GObject introspection data libgirepository-2.0-dev - Development files for the GObject introspection library libglib2.0-0t64 - GLib library of C routines libglib2.0-bin - Programs for the GLib library libglib2.0-dev - Development metapackage for the GLib family of libraries libglib2.0-dev-bin - Development utilities for the GLib library libglib2.0-tests - GLib library of C routines - installed tests libglib2.0-udeb - GLib library of C routines - minimal runtime (udeb) Closes: 1121488 1122346 1122347 Changes: glib2.0 (2.84.4-3~deb13u2) trixie; urgency=medium . * d/patches: Add patches from 2.86.3 upstream to avoid integer overflows - d/p/gconvert-Error-out-if-g_escape_uri_string-would-overflow.patch, d/p/fuzzing-Add-fuzz-tests-for-g_filename_-to-from-_uri.patch: Fix an integer overflow when interpolating hundreds of megabytes of unescaped text into a URI, and add test coverage (CVE-2025-13601, glib#3827 upstream, Closes: #1121488) - d/p/gvariant-parser-Fix-potential-integer-overflow-parsing-by.patch: Fix an integer overflow when parsing very large strings in GVariant text format (CVE-2025-14087, glib#3834 upstream, Closes: #1122347) - d/p/gvariant-parser-Use-size_t-to-count-numbers-of-child-elem.patch, d/p/gvariant-parser-Convert-error-handling-code-to-use-size_t.patch: Fix other potential integer overflows parsing very large container types in GVariant text format, related to CVE-2025-14087 - d/p/gfileattribute-Fix-integer-overflow-calculating-escaping-.patch: Fix an integer overflow when escaping invalid characters in very large file attributes (CVE-2025-14512, glib#3845 upstream, Closes: #1122346) Checksums-Sha1: 4d5349c623469ac481f250bc392213a803a02bcc 84580 gir1.2-girepository-3.0-dev_2.84.4-3~deb13u2_armel.deb 8266b325bf69251b9924172d1ff6fade6bf4ac98 61452 gir1.2-girepository-3.0_2.84.4-3~deb13u2_armel.deb 2e328b34c91c2a8872339f22afe33dfd31ee3ab0 916488 gir1.2-glib-2.0-dev_2.84.4-3~deb13u2_armel.deb 3b4def5cf52b3034b23c62dbe621eadda08e8e7b 198900 gir1.2-glib-2.0_2.84.4-3~deb13u2_armel.deb 6c132a7d214e6d204168980eb9656178af8c3037 312500 girepository-tools-dbgsym_2.84.4-3~deb13u2_armel.deb a26e9a91fdaa2acf81dbd0dbcb920a4a80a1525a 135424 girepository-tools_2.84.4-3~deb13u2_armel.deb 0a1c3466c9402bd8e5dc9a4e6330fa7bb628e9bb 15751 glib2.0_2.84.4-3~deb13u2_armel-buildd.buildinfo 3a73c8ccd4803760bc37c6faae9f6f151f954d05 77964 libgio-2.0-dev-bin-dbgsym_2.84.4-3~deb13u2_armel.deb febb87c09eaee048401f84a0eff21728e4aa9997 163636 libgio-2.0-dev-bin_2.84.4-3~deb13u2_armel.deb 379193b7c0b8df490eb539114d8f26a3583a5c90 1561192 libgio-2.0-dev_2.84.4-3~deb13u2_armel.deb ce3dc2110423757184bbc001036fe4e0940e3816 324172 libgirepository-2.0-0-dbgsym_2.84.4-3~deb13u2_armel.deb efd424d2c01aa24e85819b34f267664c1b92891d 128728 libgirepository-2.0-0_2.84.4-3~deb13u2_armel.deb 50e958593ccb72f05f05dff652a2b75a347463fd 196364 libgirepository-2.0-dev_2.84.4-3~deb13u2_armel.deb 3a3dd9066df119f73beaadf9cf3bea7c8bd3a0a7 4403304 libglib2.0-0t64-dbgsym_2.84.4-3~deb13u2_armel.deb 70cbb5cd3d97e33ae7a3add9b2c68ee7869caf4f 1324316 libglib2.0-0t64_2.84.4-3~deb13u2_armel.deb 00178b2c9909cb42cc3bf6b043b72f6047104e55 165808 libglib2.0-bin-dbgsym_2.84.4-3~deb13u2_armel.deb acb234398e30ee187378c21038a19c985f416f13 122824 libglib2.0-bin_2.84.4-3~deb13u2_armel.deb 8d1ae8ad8a5327ff9f6e078384bcb314d3cd17e4 55264 libglib2.0-dev-bin_2.84.4-3~deb13u2_armel.deb 656f46a219d93340042f0e1a2854f1b591c0bec9 56056 libglib2.0-dev_2.84.4-3~deb13u2_armel.deb ec63a74da573cbcd2fc024eeb91c5dfca8a7c579 5359836 libglib2.0-tests-dbgsym_2.84.4-3~deb13u2_armel.deb dfad41df1429ceebf93e091f6f8518bc25447ce4 2039924 libglib2.0-tests_2.84.4-3~deb13u2_armel.deb 9815ff3a3b7c68fd61bf31f0a1f1842831d858ff 2188824 libglib2.0-udeb_2.84.4-3~deb13u2_armel.udeb Checksums-Sha256: 57d35e820eec63da2e1beda8d780aa7c632e16e51691bb44adfefbb116a7690d 84580 gir1.2-girepository-3.0-dev_2.84.4-3~deb13u2_armel.deb 8475c76ca6541d7865cd1e2a65a549d7c31f9b177afbdf7f00e8b320ef924a56 61452 gir1.2-girepository-3.0_2.84.4-3~deb13u2_armel.deb ff41a6fba7335ca9a10ad21eef2fb4b731b8d0707775e2be616a224f3e35dc37 916488 gir1.2-glib-2.0-dev_2.84.4-3~deb13u2_armel.deb 5350bff395907eed53ffb0dc5d2e9b5a42b1f0ed1d956a48d1e47f62d339ebd1 198900 gir1.2-glib-2.0_2.84.4-3~deb13u2_armel.deb 81d35a9df62e80c9d432b092143b01f2737674dadf5ee5eeb6858d7d62da7559 312500 girepository-tools-dbgsym_2.84.4-3~deb13u2_armel.deb 5a75b657d0756da104ce95629c1995c4f1255db0879d7151ac7a098127438560 135424 girepository-tools_2.84.4-3~deb13u2_armel.deb ce040c0041a3f935952b5faa465170aa0aec9af0aba9d7bf9bdcafdefd5f194b 15751 glib2.0_2.84.4-3~deb13u2_armel-buildd.buildinfo 98e94d022588eb68204d26849b0d12a5b3cc66557a443c32b51da92ca88ae377 77964 libgio-2.0-dev-bin-dbgsym_2.84.4-3~deb13u2_armel.deb a32578edd04e54ba99b90ba5530c319361373c6c324f7b8a205dfd034a4816e7 163636 libgio-2.0-dev-bin_2.84.4-3~deb13u2_armel.deb e971e13284558306732d5442cdd435d037e30a66ce00de9f8bb5f2eb52e8b101 1561192 libgio-2.0-dev_2.84.4-3~deb13u2_armel.deb 03c859b2f9a9c35f7024c92ba3d015e984041bc01de715164ac9c0cf845534e9 324172 libgirepository-2.0-0-dbgsym_2.84.4-3~deb13u2_armel.deb 8a3cc386e9d255344997187ce5fa7b8d357e89c71cf2a2e9049a4574c7dfcc7d 128728 libgirepository-2.0-0_2.84.4-3~deb13u2_armel.deb 4624418db8aa43ea6bab5c90b0ca7f969e16b7a2ad07ae97a6222804d4b9f439 196364 libgirepository-2.0-dev_2.84.4-3~deb13u2_armel.deb 5d5e36a43826a5ed6cbf9a74ded3fd9ca761efb8c8dcc57cb0f203409095243a 4403304 libglib2.0-0t64-dbgsym_2.84.4-3~deb13u2_armel.deb 7f3be0e2c1bb971a6a82011944c4d79b3852bd5e66face6d802a9304f4d24122 1324316 libglib2.0-0t64_2.84.4-3~deb13u2_armel.deb a175fa10439234045edd11d3ae99ad4c4c0a2468fc28d4b0e81de4655a9ecba3 165808 libglib2.0-bin-dbgsym_2.84.4-3~deb13u2_armel.deb 2015a1ca628ae60424efc3717bdbde87a7763bc48f20455a5d431878c89b3d13 122824 libglib2.0-bin_2.84.4-3~deb13u2_armel.deb 2417b0ad7042684c43443065a1b2009457425e2b3fa2f23d809b1baba6f43ef2 55264 libglib2.0-dev-bin_2.84.4-3~deb13u2_armel.deb 78c36dc84e53662095c4e0aaacfdfd3dd2b4db8d8e218f2e6457bf92a9b0d438 56056 libglib2.0-dev_2.84.4-3~deb13u2_armel.deb bde48cd8e8fca17011614b7a82197100244b4649a0637a845be4425701acf703 5359836 libglib2.0-tests-dbgsym_2.84.4-3~deb13u2_armel.deb ab404cc85ed4c9ab275d280537a486a9aecdf5e659fe25d532216f53362bcecc 2039924 libglib2.0-tests_2.84.4-3~deb13u2_armel.deb 1b3e0382a412f2a7278afbd9f6d6ca6c5be9a1dfc7a251e76e684de10f5ba0b9 2188824 libglib2.0-udeb_2.84.4-3~deb13u2_armel.udeb Files: 50695e2a9ce6eb8eb7e2f08046c1e052 84580 libdevel optional gir1.2-girepository-3.0-dev_2.84.4-3~deb13u2_armel.deb 974b984d391e5a24131d9353fa37e4ab 61452 introspection optional gir1.2-girepository-3.0_2.84.4-3~deb13u2_armel.deb cd35e34640488e0af0645c1da2eb2371 916488 libdevel optional gir1.2-glib-2.0-dev_2.84.4-3~deb13u2_armel.deb e800d6c470db6871c8590a66c673daff 198900 introspection optional gir1.2-glib-2.0_2.84.4-3~deb13u2_armel.deb e2a54288fa521998979ef03eaa23734e 312500 debug optional girepository-tools-dbgsym_2.84.4-3~deb13u2_armel.deb 8fc6b4d1d62f5e30e8170a3dd9d0dba9 135424 libdevel optional girepository-tools_2.84.4-3~deb13u2_armel.deb 68b935fa62233612e8d1b64ed3ce8f1f 15751 libs optional glib2.0_2.84.4-3~deb13u2_armel-buildd.buildinfo 14b487beb50521afa247c0cac4fa14ee 77964 debug optional libgio-2.0-dev-bin-dbgsym_2.84.4-3~deb13u2_armel.deb fcfd0db77b94f4829307df1263a88979 163636 libdevel optional libgio-2.0-dev-bin_2.84.4-3~deb13u2_armel.deb a965050429b6c38b051de4df8e714e4a 1561192 libdevel optional libgio-2.0-dev_2.84.4-3~deb13u2_armel.deb 0a3dc719a8500bcd2c6e4b5539224ed6 324172 debug optional libgirepository-2.0-0-dbgsym_2.84.4-3~deb13u2_armel.deb 6be19ddc36960c879406075a151c43d6 128728 libs optional libgirepository-2.0-0_2.84.4-3~deb13u2_armel.deb 2023662a1b4222a8bec5e69049bfc965 196364 libdevel optional libgirepository-2.0-dev_2.84.4-3~deb13u2_armel.deb 486609eb20ed977355cc03e7307986ea 4403304 debug optional libglib2.0-0t64-dbgsym_2.84.4-3~deb13u2_armel.deb 7ea453de5b1d613158a4f7efb860c9ad 1324316 libs optional libglib2.0-0t64_2.84.4-3~deb13u2_armel.deb 43e0e79c6c20c3b884c6ec812fd95493 165808 debug optional libglib2.0-bin-dbgsym_2.84.4-3~deb13u2_armel.deb afbf0b717e59b5e9d0fe61e753d15885 122824 misc optional libglib2.0-bin_2.84.4-3~deb13u2_armel.deb ce65ae8cf78c6912ae2fa21e86807ae9 55264 libdevel optional libglib2.0-dev-bin_2.84.4-3~deb13u2_armel.deb 886aa0d3ab5894ddbbec5161d85aaf0c 56056 libdevel optional libglib2.0-dev_2.84.4-3~deb13u2_armel.deb 43cfca639a7d92e8d0636c22dc06a384 5359836 debug optional libglib2.0-tests-dbgsym_2.84.4-3~deb13u2_armel.deb 5902ee2e680398c947608bfd53b442b3 2039924 libs optional libglib2.0-tests_2.84.4-3~deb13u2_armel.deb 1b290db90c61e08bf8df8f5fd55a10c3 2188824 debian-installer optional libglib2.0-udeb_2.84.4-3~deb13u2_armel.udeb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEENsdrABvTD8MQ0UffVza3l394K2AFAmlIHicACgkQVza3l394 K2AM8w/8Cqcwv7VhDnDHRIDYE0sa13wrQidXzkswsI6BUNxJYn8lAJ33q0l5/uFD CTYeSRyD/sfV2K9e9QdBra1jHqK+HP0suzvegnGMkcPfNH8Dj82QauS+QzjdjkIx JMpI28geWYbk88C0HJTOf+cr3tZM824ho1TdVPRRg4H7V7BQ292AHhJGhQLC6E0P s3t/ylU/WqPZud03iH7vFBTxx0FZqKtK4QoCkCJ8Um2/aGUNbxh6f03/llIGHoAU IKFBOk7iRBDWRq+sQqkuq+FsT0aiRydINm4J05ADyA+mqbhvl4c5bvJ9IP+55LY1 NtnyQDMJmFRkTSahRvCp/teKM0S9X7p47EHB7wXi3PiPwS/4QoSKNJtAWdTe0yFc 6vd3s/tdMFgdVK/BLd4B8fNQRIiYX5jFs34qfH7T9y2Di9r/Cuw0gBE6SdYDULjM V1pbBxgQe9zax9FmXJtEqGLacGz/cMErMNtHRwuaeXWmXfURA2YyKYUE5Wc0MHbS wrTpW3ZEks7pU8HwlQ2texC4XwCQ3XAKEyWKbTKDb7ozVDa7ebCsHiz78mp7YM73 TZB2MY0BDWNXCtPluPy9LAJxiD3BAXrQf7UGwsLRrfQE+55o+TPqqPTpoVcB1ZSP g3rEAbwmPC9kkyQpBVp7vGL+FcWWtl1DtCPBG5WgpEq2MSHFJKg= =QrMA -----END PGP SIGNATURE-----