-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 12 Dec 2025 18:43:13 +0000 Source: glib2.0 Binary: gir1.2-girepository-3.0 gir1.2-girepository-3.0-dev gir1.2-glib-2.0 gir1.2-glib-2.0-dev girepository-tools girepository-tools-dbgsym libgio-2.0-dev libgio-2.0-dev-bin libgio-2.0-dev-bin-dbgsym libgirepository-2.0-0 libgirepository-2.0-0-dbgsym libgirepository-2.0-dev libglib2.0-0t64 libglib2.0-0t64-dbgsym libglib2.0-bin libglib2.0-bin-dbgsym libglib2.0-dev libglib2.0-dev-bin libglib2.0-tests libglib2.0-tests-dbgsym libglib2.0-udeb Architecture: armhf Version: 2.84.4-3~deb13u2 Distribution: trixie Urgency: medium Maintainer: arm Build Daemon (arm-ubc-01) Changed-By: Simon McVittie Description: gir1.2-girepository-3.0 - Introspection data for GIRepository library, API version 3.0 gir1.2-girepository-3.0-dev - GIR XML for GIRepository library, API version 3.0 gir1.2-glib-2.0 - Introspection data for GLib, GObject, Gio and GModule gir1.2-glib-2.0-dev - GIR XML for GLib, GObject, Gio and GModule girepository-tools - Tools for working with GObject-Introspection repositories libgio-2.0-dev - Development files for the GLib, GObject and GIO libraries libgio-2.0-dev-bin - Development utilities for GLib, GObject and GIO libraries libgirepository-2.0-0 - GLib runtime library for handling GObject introspection data libgirepository-2.0-dev - Development files for the GObject introspection library libglib2.0-0t64 - GLib library of C routines libglib2.0-bin - Programs for the GLib library libglib2.0-dev - Development metapackage for the GLib family of libraries libglib2.0-dev-bin - Development utilities for the GLib library libglib2.0-tests - GLib library of C routines - installed tests libglib2.0-udeb - GLib library of C routines - minimal runtime (udeb) Closes: 1121488 1122346 1122347 Changes: glib2.0 (2.84.4-3~deb13u2) trixie; urgency=medium . * d/patches: Add patches from 2.86.3 upstream to avoid integer overflows - d/p/gconvert-Error-out-if-g_escape_uri_string-would-overflow.patch, d/p/fuzzing-Add-fuzz-tests-for-g_filename_-to-from-_uri.patch: Fix an integer overflow when interpolating hundreds of megabytes of unescaped text into a URI, and add test coverage (CVE-2025-13601, glib#3827 upstream, Closes: #1121488) - d/p/gvariant-parser-Fix-potential-integer-overflow-parsing-by.patch: Fix an integer overflow when parsing very large strings in GVariant text format (CVE-2025-14087, glib#3834 upstream, Closes: #1122347) - d/p/gvariant-parser-Use-size_t-to-count-numbers-of-child-elem.patch, d/p/gvariant-parser-Convert-error-handling-code-to-use-size_t.patch: Fix other potential integer overflows parsing very large container types in GVariant text format, related to CVE-2025-14087 - d/p/gfileattribute-Fix-integer-overflow-calculating-escaping-.patch: Fix an integer overflow when escaping invalid characters in very large file attributes (CVE-2025-14512, glib#3845 upstream, Closes: #1122346) Checksums-Sha1: 8c2589cc3af91a7d159b289c51029a05fcb05c8d 84584 gir1.2-girepository-3.0-dev_2.84.4-3~deb13u2_armhf.deb 84e0ec40bc137eac4aac328404e225f2bc40c3e0 61468 gir1.2-girepository-3.0_2.84.4-3~deb13u2_armhf.deb 3694588531d80bf3ce39c3c471e2cd15b2b18b92 916552 gir1.2-glib-2.0-dev_2.84.4-3~deb13u2_armhf.deb 0ecdbbbeb83165b92d53eb24ab2c066d5643321b 198908 gir1.2-glib-2.0_2.84.4-3~deb13u2_armhf.deb 9697807781c85cc304c745081cb73730f707bd2a 317576 girepository-tools-dbgsym_2.84.4-3~deb13u2_armhf.deb f3a0c93f4ee3d2641984a96774b7168e605f2946 137292 girepository-tools_2.84.4-3~deb13u2_armhf.deb 9142a6401afdb256aecb009b6ebda59b4503c188 15765 glib2.0_2.84.4-3~deb13u2_armhf-buildd.buildinfo 36b6d45b55fec6f83d833a0b2c55e0dbfba32483 78284 libgio-2.0-dev-bin-dbgsym_2.84.4-3~deb13u2_armhf.deb e359f420fb234a304ef394f74ac778cff152d136 163776 libgio-2.0-dev-bin_2.84.4-3~deb13u2_armhf.deb 0b8fccd5a0f445eb35f9c426e3ee8b3f42abd25c 1571260 libgio-2.0-dev_2.84.4-3~deb13u2_armhf.deb 6f96b80d8b8c31e80068a1fab4b6e69c10a5f279 328348 libgirepository-2.0-0-dbgsym_2.84.4-3~deb13u2_armhf.deb e9da394f7fe0442ce73678c997f4ac4937faeea4 129256 libgirepository-2.0-0_2.84.4-3~deb13u2_armhf.deb 4e633065955742e0e1fa7145f5008668d1ca1ac4 198360 libgirepository-2.0-dev_2.84.4-3~deb13u2_armhf.deb dde036ef4f5f1ecf01d7098cb4eb07469ef278e9 4445000 libglib2.0-0t64-dbgsym_2.84.4-3~deb13u2_armhf.deb 960de26aacd568d861f6ee67a1647d32e17cbec6 1344016 libglib2.0-0t64_2.84.4-3~deb13u2_armhf.deb 736474f69f534693742fd0f9eb08b9c3c261935a 167036 libglib2.0-bin-dbgsym_2.84.4-3~deb13u2_armhf.deb d438a5255a5635ce767681980cf9356fb14b4315 123960 libglib2.0-bin_2.84.4-3~deb13u2_armhf.deb 4d811e7b682c7b028b4ab1b6f5aa6e9a6f56cc8b 55268 libglib2.0-dev-bin_2.84.4-3~deb13u2_armhf.deb 4d881a0c1ce82ba29e3c09319271ed7fb2f19bdc 56056 libglib2.0-dev_2.84.4-3~deb13u2_armhf.deb fc491bf3f16303f08d336c0a1c4eb71aea86a9d0 5367324 libglib2.0-tests-dbgsym_2.84.4-3~deb13u2_armhf.deb 572854392187dfe01499be61ada458d86fb6671a 2061808 libglib2.0-tests_2.84.4-3~deb13u2_armhf.deb 43bd7d5fa74ac961d1a63d0b9c8392c9852da931 2202492 libglib2.0-udeb_2.84.4-3~deb13u2_armhf.udeb Checksums-Sha256: 2f12f0614a8ddce0d0641a030ce4e025090d9f07f9c83682a921d8d009cf19fd 84584 gir1.2-girepository-3.0-dev_2.84.4-3~deb13u2_armhf.deb c6a87063e1233ec9cacf4040d40c982b9fcd74426087382b9f4486757496f951 61468 gir1.2-girepository-3.0_2.84.4-3~deb13u2_armhf.deb fbbc482cc769321dcac7f39e39bd3b76fb01ccfee81a6a8ecc7877d6c5407a31 916552 gir1.2-glib-2.0-dev_2.84.4-3~deb13u2_armhf.deb 2780a3185ebdb66fb8b48c42b4882c3f16ea7b3a335c854f5a862595d03fdc14 198908 gir1.2-glib-2.0_2.84.4-3~deb13u2_armhf.deb 791c6376b8de303ede9e7252ebbeed926ef1933fc08d098ad3e1e9c6f4c9df92 317576 girepository-tools-dbgsym_2.84.4-3~deb13u2_armhf.deb 0226050ad4fb6d36c77d7290f43ae6d6ceb62708616975a60279a69d61232ce8 137292 girepository-tools_2.84.4-3~deb13u2_armhf.deb 0a56f720d39993e0104f5538192d750264ab51cc02017ff837c0f2c468388cc0 15765 glib2.0_2.84.4-3~deb13u2_armhf-buildd.buildinfo a8317ef00535b6235409ef6c42da11c756aaa7c9d807ca568b230104845f0674 78284 libgio-2.0-dev-bin-dbgsym_2.84.4-3~deb13u2_armhf.deb 8695e5cb1f3bc440572dbccee6c452aeed63c6a500d8a96aec2c9ab60896317b 163776 libgio-2.0-dev-bin_2.84.4-3~deb13u2_armhf.deb ad29fb5dfbf39e3b3f534cb3d4a5461b4785fee4d65363f22cce36f717367d3a 1571260 libgio-2.0-dev_2.84.4-3~deb13u2_armhf.deb 37da21927a7603bbfab30af8a91cae34d5586d9a17b58366ddad5b5d698104b9 328348 libgirepository-2.0-0-dbgsym_2.84.4-3~deb13u2_armhf.deb f42432b74ca288f5db3a7e39c147527577f69865dbdee45bed848eabd7929db3 129256 libgirepository-2.0-0_2.84.4-3~deb13u2_armhf.deb 393096d375088207966f42d45adf96bd95d8d87c9a79cfec86be6014a10e37bf 198360 libgirepository-2.0-dev_2.84.4-3~deb13u2_armhf.deb 22548357624a2508463752e5fc2da88441b04c226f029b4c60bb8c472d41d5b3 4445000 libglib2.0-0t64-dbgsym_2.84.4-3~deb13u2_armhf.deb cd346cff2f7cfc0c97b86a29ff3750a69e154eee9ce7910fef1175ea3c8d12c6 1344016 libglib2.0-0t64_2.84.4-3~deb13u2_armhf.deb 9534df5f80e26fda77d430a52b24d4d0c8035a9ecc1594358e04592624ad88d2 167036 libglib2.0-bin-dbgsym_2.84.4-3~deb13u2_armhf.deb 7aaa68bd97a6484eff2e413bf5d52f416edcc41352b5564277d81269c90bf10b 123960 libglib2.0-bin_2.84.4-3~deb13u2_armhf.deb 60d1c303b6395eb9b291ec2ce58e88606fba9109b452963582ed260148ce7cc0 55268 libglib2.0-dev-bin_2.84.4-3~deb13u2_armhf.deb b19819ff32305c455826b377f0d26879b19e2c52fa46f7d829b1c1eefc0f0468 56056 libglib2.0-dev_2.84.4-3~deb13u2_armhf.deb 00cbbc27286c5d4ec9f1ca0d0dc1cea3944d1f0c7684eb02c1f937d99dff7c9b 5367324 libglib2.0-tests-dbgsym_2.84.4-3~deb13u2_armhf.deb e73bd8b7a32b5863046fa6b5131e7cc9d7b539c93dbbd7f3663646044fb80272 2061808 libglib2.0-tests_2.84.4-3~deb13u2_armhf.deb 30a5a3e2dfe76b0006e51308e5c4231cdd4472262c8345fe872def8d750e5953 2202492 libglib2.0-udeb_2.84.4-3~deb13u2_armhf.udeb Files: 48615b57190c084e8dca6c5982b17153 84584 libdevel optional gir1.2-girepository-3.0-dev_2.84.4-3~deb13u2_armhf.deb e2ebfd0701d439622960ff05218c4ddd 61468 introspection optional gir1.2-girepository-3.0_2.84.4-3~deb13u2_armhf.deb 19d4435d3b4665245e3d5a9dd6d85323 916552 libdevel optional gir1.2-glib-2.0-dev_2.84.4-3~deb13u2_armhf.deb aa189babde9eeb89b7492f9fe6d0f411 198908 introspection optional gir1.2-glib-2.0_2.84.4-3~deb13u2_armhf.deb 6d95dff5d9e7907b3a63b93e32ca3a0e 317576 debug optional girepository-tools-dbgsym_2.84.4-3~deb13u2_armhf.deb 8a004ad031e8644141f6cc64707d4b75 137292 libdevel optional girepository-tools_2.84.4-3~deb13u2_armhf.deb 97d398f23c72c8c008c76f05c9c39c53 15765 libs optional glib2.0_2.84.4-3~deb13u2_armhf-buildd.buildinfo 42ef8b4652642f89461efd9f3b577995 78284 debug optional libgio-2.0-dev-bin-dbgsym_2.84.4-3~deb13u2_armhf.deb 8a1256f0fa0c05f1c19d05422d9ecc71 163776 libdevel optional libgio-2.0-dev-bin_2.84.4-3~deb13u2_armhf.deb dbcb6db1ba5085f7e0c9ce7e8aba1544 1571260 libdevel optional libgio-2.0-dev_2.84.4-3~deb13u2_armhf.deb bce8c42fbd9c4c7e521491a8e6279484 328348 debug optional libgirepository-2.0-0-dbgsym_2.84.4-3~deb13u2_armhf.deb 2b408659d420d8434f7c14fb481c672c 129256 libs optional libgirepository-2.0-0_2.84.4-3~deb13u2_armhf.deb e866a1ad333daa41330d0f1f1d2bf285 198360 libdevel optional libgirepository-2.0-dev_2.84.4-3~deb13u2_armhf.deb 2ae2e7ecc16e4efac920cde7bc2e90ce 4445000 debug optional libglib2.0-0t64-dbgsym_2.84.4-3~deb13u2_armhf.deb 5acc59ce5244c5a91ce7f11bd7d1547c 1344016 libs optional libglib2.0-0t64_2.84.4-3~deb13u2_armhf.deb 498ff38b2b02a1cdf8f48982549259e0 167036 debug optional libglib2.0-bin-dbgsym_2.84.4-3~deb13u2_armhf.deb c5e403b4d6d95bffbc9330960e46ae00 123960 misc optional libglib2.0-bin_2.84.4-3~deb13u2_armhf.deb 50e4823cf9f6b18ae2018e5627112f3e 55268 libdevel optional libglib2.0-dev-bin_2.84.4-3~deb13u2_armhf.deb 0d0c5835cfff4dd18943b3fad88f4470 56056 libdevel optional libglib2.0-dev_2.84.4-3~deb13u2_armhf.deb 5e0249d5cfad6a694ed0efd89f7b2265 5367324 debug optional libglib2.0-tests-dbgsym_2.84.4-3~deb13u2_armhf.deb 7df61b8162503fb11302a15457c250fc 2061808 libs optional libglib2.0-tests_2.84.4-3~deb13u2_armhf.deb 639b2ccf7ad5a49ba7bfcdaab836e2c9 2202492 debian-installer optional libglib2.0-udeb_2.84.4-3~deb13u2_armhf.udeb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEq41qkgEcGaML+/CnCr/D/stJkDwFAmlIHhEACgkQCr/D/stJ kDwHfxAAwCcnchshkeGN3p93PY/6WxfQkP67WLyz+/OiKBkCi/pDLT5NLo545TIF c7lOwJItUHj3g4ATPDDxvxo6fKaEP+Q4c/8ZqrBShAHICREAYaVDTumLeRXqkslB VY7GELifXwvp3PtkAw334a1iSznkUF9+9l1P8gyKNFOkG4jrRY6+t++dXp93pJSO IQjZhHaHhtah4YUWr9WDmvq4j6zKuLuAPUoLl2HwMY1OdCac47KdSRGpDoN+xoTZ 7got6ZVRcKPDO+4Ti3RGy0FU1/SZ2ODP5XMX6bzPV7Mp0W2/2VlJ/BQdsZRESOg9 /z/+OwNHD1XdRKDSO+d/5rndAX0ZZ0/NDi7EvKGfFe6DaFoT4fWaNQj89tUE+y8o wcnR4xNmZPVLfRAY9bPY5fI9Xvib/b9rdxxO8vEoVOXh+CZ+TVcGOCBc2wQ7MvTo tGOeRxtea4tX96RKo4PjcR5Ut6v+UEKebrcEvxONlnRuVyxD6TpMccJyIX7+JUAZ Glmy/LLCkmtmevn0d1HXpQ4EOjKfML1CgGMnd8CqlZOfWLgWFWKGq+slPrW9lARc zP+lHE4BQrnGzo3c/UD13FJhx3V36jUx3RKkg0T/2wdzUObh68JlhOot9DFf2Rmk rBjky5GedVIa/+cONcWYCk2kcJrVq8eIKm3yzqpAF8rs7/Llft0= =RHjT -----END PGP SIGNATURE-----