-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 12 Dec 2025 18:43:13 +0000 Source: glib2.0 Binary: gir1.2-girepository-3.0 gir1.2-girepository-3.0-dev gir1.2-glib-2.0 gir1.2-glib-2.0-dev girepository-tools girepository-tools-dbgsym libgio-2.0-dev libgio-2.0-dev-bin libgio-2.0-dev-bin-dbgsym libgirepository-2.0-0 libgirepository-2.0-0-dbgsym libgirepository-2.0-dev libglib2.0-0t64 libglib2.0-0t64-dbgsym libglib2.0-bin libglib2.0-bin-dbgsym libglib2.0-dev libglib2.0-dev-bin libglib2.0-tests libglib2.0-tests-dbgsym libglib2.0-udeb Architecture: ppc64el Version: 2.84.4-3~deb13u2 Distribution: trixie Urgency: medium Maintainer: ppc64el Build Daemon (ppc64el-osuosl-01) Changed-By: Simon McVittie Description: gir1.2-girepository-3.0 - Introspection data for GIRepository library, API version 3.0 gir1.2-girepository-3.0-dev - GIR XML for GIRepository library, API version 3.0 gir1.2-glib-2.0 - Introspection data for GLib, GObject, Gio and GModule gir1.2-glib-2.0-dev - GIR XML for GLib, GObject, Gio and GModule girepository-tools - Tools for working with GObject-Introspection repositories libgio-2.0-dev - Development files for the GLib, GObject and GIO libraries libgio-2.0-dev-bin - Development utilities for GLib, GObject and GIO libraries libgirepository-2.0-0 - GLib runtime library for handling GObject introspection data libgirepository-2.0-dev - Development files for the GObject introspection library libglib2.0-0t64 - GLib library of C routines libglib2.0-bin - Programs for the GLib library libglib2.0-dev - Development metapackage for the GLib family of libraries libglib2.0-dev-bin - Development utilities for the GLib library libglib2.0-tests - GLib library of C routines - installed tests libglib2.0-udeb - GLib library of C routines - minimal runtime (udeb) Closes: 1121488 1122346 1122347 Changes: glib2.0 (2.84.4-3~deb13u2) trixie; urgency=medium . * d/patches: Add patches from 2.86.3 upstream to avoid integer overflows - d/p/gconvert-Error-out-if-g_escape_uri_string-would-overflow.patch, d/p/fuzzing-Add-fuzz-tests-for-g_filename_-to-from-_uri.patch: Fix an integer overflow when interpolating hundreds of megabytes of unescaped text into a URI, and add test coverage (CVE-2025-13601, glib#3827 upstream, Closes: #1121488) - d/p/gvariant-parser-Fix-potential-integer-overflow-parsing-by.patch: Fix an integer overflow when parsing very large strings in GVariant text format (CVE-2025-14087, glib#3834 upstream, Closes: #1122347) - d/p/gvariant-parser-Use-size_t-to-count-numbers-of-child-elem.patch, d/p/gvariant-parser-Convert-error-handling-code-to-use-size_t.patch: Fix other potential integer overflows parsing very large container types in GVariant text format, related to CVE-2025-14087 - d/p/gfileattribute-Fix-integer-overflow-calculating-escaping-.patch: Fix an integer overflow when escaping invalid characters in very large file attributes (CVE-2025-14512, glib#3845 upstream, Closes: #1122346) Checksums-Sha1: 8d09ce80e41efaa30f92a4e00c77d60606763d2d 84584 gir1.2-girepository-3.0-dev_2.84.4-3~deb13u2_ppc64el.deb b101a2cdcaa797ff0a46365f33f808050ddc6665 61452 gir1.2-girepository-3.0_2.84.4-3~deb13u2_ppc64el.deb 273c4ceb4c269ff8945bb989d749f6eb954ef56e 916572 gir1.2-glib-2.0-dev_2.84.4-3~deb13u2_ppc64el.deb 2a98c286c5cc63d7c86a294f2d685415fd7f1497 199160 gir1.2-glib-2.0_2.84.4-3~deb13u2_ppc64el.deb c5704c61a3c5cfc5acde319c83d50fdedeb0ebc5 320304 girepository-tools-dbgsym_2.84.4-3~deb13u2_ppc64el.deb 33cb4e550240865d6aabcdfc4cf72713a4926642 160992 girepository-tools_2.84.4-3~deb13u2_ppc64el.deb aab0125ccd03ac28a3058a19c9379e4e55f34b2a 16012 glib2.0_2.84.4-3~deb13u2_ppc64el-buildd.buildinfo 33b648bb91b72ab3ccfee08f4ad0d99676b4a5f8 81492 libgio-2.0-dev-bin-dbgsym_2.84.4-3~deb13u2_ppc64el.deb cd6776c01db1468a14da37e1aeef51a7365270cd 169100 libgio-2.0-dev-bin_2.84.4-3~deb13u2_ppc64el.deb 6cf6cc8ec411b3183fff65b6ead921a5e3cb4913 1862468 libgio-2.0-dev_2.84.4-3~deb13u2_ppc64el.deb 1f244b9b6d71f6b5b8deaf9d9e42b86b48f7cdf7 327856 libgirepository-2.0-0-dbgsym_2.84.4-3~deb13u2_ppc64el.deb bb00ac5073098fcf1de613a843dbe51a78008ccf 146580 libgirepository-2.0-0_2.84.4-3~deb13u2_ppc64el.deb f3d51aeb90dedd0c3555c0fd34665af512a757b7 237516 libgirepository-2.0-dev_2.84.4-3~deb13u2_ppc64el.deb 94ae26931da2b0ce0582316f5b6a3dca521572fd 4584856 libglib2.0-0t64-dbgsym_2.84.4-3~deb13u2_ppc64el.deb 88009e6c287382dc07e44e40a2b7ad6cd848fc7f 1574960 libglib2.0-0t64_2.84.4-3~deb13u2_ppc64el.deb 0dbbcecc9b92b07e8e0ee472d35f54bac2003e49 172760 libglib2.0-bin-dbgsym_2.84.4-3~deb13u2_ppc64el.deb 488b32f6510e4c713d78891f680b03e06852e7eb 133964 libglib2.0-bin_2.84.4-3~deb13u2_ppc64el.deb f3f987e61facd5eb533c48536c21de86ba7250f8 55280 libglib2.0-dev-bin_2.84.4-3~deb13u2_ppc64el.deb 1c56a64a1c58ac11d92ec0a003722284ff91ef1c 56064 libglib2.0-dev_2.84.4-3~deb13u2_ppc64el.deb afee534d88cecf93a484f62af3985ed21eeb5b9f 5590264 libglib2.0-tests-dbgsym_2.84.4-3~deb13u2_ppc64el.deb f4093e4e1b9872054b88d0ef9c7b7690222baeb3 2030792 libglib2.0-tests_2.84.4-3~deb13u2_ppc64el.deb c266d6fcbca7460140c98f88f3c962568be7987a 2428548 libglib2.0-udeb_2.84.4-3~deb13u2_ppc64el.udeb Checksums-Sha256: 7c82fec1b48e6c78260a50b9d7679e1670e0b125757e0dadaa3759fa1b911b78 84584 gir1.2-girepository-3.0-dev_2.84.4-3~deb13u2_ppc64el.deb 74f5752aa19f199a04c520b3b53855bee9c4f82d83d287f4c1dac224b94bb2b0 61452 gir1.2-girepository-3.0_2.84.4-3~deb13u2_ppc64el.deb f89a79108968ca8b909350568d8a45a0ff247b7e9104e094637bb08347595f28 916572 gir1.2-glib-2.0-dev_2.84.4-3~deb13u2_ppc64el.deb a53018ed9f44d87500c62e4554a99d52d899d9a98d4b735913b1f67deb486330 199160 gir1.2-glib-2.0_2.84.4-3~deb13u2_ppc64el.deb 06653a13529c9ab230c61dda9ac25c558cbdb1e2c933d83ba79a9d9ab5a9f544 320304 girepository-tools-dbgsym_2.84.4-3~deb13u2_ppc64el.deb 1c0f3ac7d1208b961649f971caf5383750126b921c905e7fa10869291a3894d2 160992 girepository-tools_2.84.4-3~deb13u2_ppc64el.deb e536b8dd0d25b385138b845d2ec0125d0b3bb25605fc8644911c178ecf8bd8df 16012 glib2.0_2.84.4-3~deb13u2_ppc64el-buildd.buildinfo 971cf3ca7b2a5bdb84008c1a04251dcd55c1232e8463a9f1be6f0e223883bd76 81492 libgio-2.0-dev-bin-dbgsym_2.84.4-3~deb13u2_ppc64el.deb 29327370dda31aaaabb269c28975768a998bd7e21d2b6dca698f635399ec9ff6 169100 libgio-2.0-dev-bin_2.84.4-3~deb13u2_ppc64el.deb c6e97125765fe44ecde43df2c308ec1cb27712426e3bf9d4f18930e8b8677c97 1862468 libgio-2.0-dev_2.84.4-3~deb13u2_ppc64el.deb d7804aebef2f291b36d44890d82af4827b616a369c5c3bad72cc0e446a243b05 327856 libgirepository-2.0-0-dbgsym_2.84.4-3~deb13u2_ppc64el.deb 85e5eaceb3a96da2f6af30b38f266ca6b8d4b1e9fd8b44f87cec5a7ffc759711 146580 libgirepository-2.0-0_2.84.4-3~deb13u2_ppc64el.deb 56e3daf61eda735d1d8a650f55ef6a40e2bd1dbd79b8c8de7c62d27bc822cbb1 237516 libgirepository-2.0-dev_2.84.4-3~deb13u2_ppc64el.deb e48dcdf210e7630a9c72cac4900ea843d950cc413fd7bc047d5ed70ea6ec5c3d 4584856 libglib2.0-0t64-dbgsym_2.84.4-3~deb13u2_ppc64el.deb 1f5efffa7a48ec7154c78820751c467a9e38a699135280a2c96d6e342ab38bdf 1574960 libglib2.0-0t64_2.84.4-3~deb13u2_ppc64el.deb b72e62e79346113ff3603cc6bf4c6bb62b21f6fb9befaf823051710d36410e5e 172760 libglib2.0-bin-dbgsym_2.84.4-3~deb13u2_ppc64el.deb b4d7b86703a717df2896739096a6bbc4b04218a049873e5e72ae02e464677a1f 133964 libglib2.0-bin_2.84.4-3~deb13u2_ppc64el.deb 6dc1c1ceab7877772c505a980c22740d80891b31d89a472c72c7eb1e99b4fe9e 55280 libglib2.0-dev-bin_2.84.4-3~deb13u2_ppc64el.deb 673b9261d492b0914294833152e541afb8e59deb28baf152d6e917efc5d8cd60 56064 libglib2.0-dev_2.84.4-3~deb13u2_ppc64el.deb 274c108cdf20c9094ca8797569cee56d7bc9228efdcf59514a5b7a959d6d0573 5590264 libglib2.0-tests-dbgsym_2.84.4-3~deb13u2_ppc64el.deb bb305615b9cfa5c73a2cc4fc402def1823405efdfdf12451d9dbb3cb459b559a 2030792 libglib2.0-tests_2.84.4-3~deb13u2_ppc64el.deb e0aa5117c4ad8ebc3919dc17dbd3e6c3a34148ad6f447caff29df3a1cfa36b7e 2428548 libglib2.0-udeb_2.84.4-3~deb13u2_ppc64el.udeb Files: 41bb68e1862f8325c73add855d0e3543 84584 libdevel optional gir1.2-girepository-3.0-dev_2.84.4-3~deb13u2_ppc64el.deb 50b1c33ac13e1353ab8eb4c5b13ab1e0 61452 introspection optional gir1.2-girepository-3.0_2.84.4-3~deb13u2_ppc64el.deb bbd52b055f910ee274975a260f08f81c 916572 libdevel optional gir1.2-glib-2.0-dev_2.84.4-3~deb13u2_ppc64el.deb 6d213b6dd7557d0a12b6429965a871d4 199160 introspection optional gir1.2-glib-2.0_2.84.4-3~deb13u2_ppc64el.deb 2f13e3bca819ebcd3315c44cc288783c 320304 debug optional girepository-tools-dbgsym_2.84.4-3~deb13u2_ppc64el.deb cc52367f7f577e3f19c6855a2cd3c370 160992 libdevel optional girepository-tools_2.84.4-3~deb13u2_ppc64el.deb 94c4c5a94c3a6d05183f9cf887a6ae25 16012 libs optional glib2.0_2.84.4-3~deb13u2_ppc64el-buildd.buildinfo 878ee35a521788fd7d70141b119ef9db 81492 debug optional libgio-2.0-dev-bin-dbgsym_2.84.4-3~deb13u2_ppc64el.deb cbf7323c0d40dccf099f576b3f80035a 169100 libdevel optional libgio-2.0-dev-bin_2.84.4-3~deb13u2_ppc64el.deb 12d509bcf8de81cd61ca78d04d278e84 1862468 libdevel optional libgio-2.0-dev_2.84.4-3~deb13u2_ppc64el.deb 43b012926aef240e48ba0098b1e32f03 327856 debug optional libgirepository-2.0-0-dbgsym_2.84.4-3~deb13u2_ppc64el.deb 50dfd10a4fe11be2843c19e6dcc82e29 146580 libs optional libgirepository-2.0-0_2.84.4-3~deb13u2_ppc64el.deb 25129a1a985cbe45575cf287e5e9bb46 237516 libdevel optional libgirepository-2.0-dev_2.84.4-3~deb13u2_ppc64el.deb ca7515752daab1396f4606fcbb638120 4584856 debug optional libglib2.0-0t64-dbgsym_2.84.4-3~deb13u2_ppc64el.deb 648beffa57e1afbc25ae84bf1e8f723c 1574960 libs optional libglib2.0-0t64_2.84.4-3~deb13u2_ppc64el.deb 1b20544b919405ceb1219d7ac33b76e4 172760 debug optional libglib2.0-bin-dbgsym_2.84.4-3~deb13u2_ppc64el.deb 6ffd6b79d114c2b9618181fd75a09c70 133964 misc optional libglib2.0-bin_2.84.4-3~deb13u2_ppc64el.deb f62d88a7dba0e610aebeb4a550dee13d 55280 libdevel optional libglib2.0-dev-bin_2.84.4-3~deb13u2_ppc64el.deb d26691bacabf9086bcd34a4b8792718b 56064 libdevel optional libglib2.0-dev_2.84.4-3~deb13u2_ppc64el.deb cfcc9d596fde6434cf5e56a7e506ca95 5590264 debug optional libglib2.0-tests-dbgsym_2.84.4-3~deb13u2_ppc64el.deb 0179ffcc2acc4741c36a548420563ecb 2030792 libs optional libglib2.0-tests_2.84.4-3~deb13u2_ppc64el.deb eb026c97a085d9911936dbad6c30fe83 2428548 debian-installer optional libglib2.0-udeb_2.84.4-3~deb13u2_ppc64el.udeb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEGHWM+bJZRznwgySGOrVShFbIMGEFAmlIHjgACgkQOrVShFbI MGGn1Q//QpY1eWlYjsoQsb6WjF3RSeSWI/+zI496Lhy2j9cWa0yaSHVE83K9M4Kh 9sWrFwAm/24isJSPvaNe1+I6CQAH4uxNBH6JYCG7h0+vdnY9y7WtzjIWtEyZN6/f Hl6jla8KPF10c/Lnx9c89CqcGDi52J41jFwG6NrMYi4QkOEuQAZK5kjuL+SJe99k Ym7aJ/eivvWslBusVc3r6jhc+W9lTpeU7N3X1x+K3PmGUXaH+fkXC4f7hKs2FeS2 ZMiD635VSkpugrkjWkw3aircrRQlJnu8UEoy97OQ2cl2L9n6GyRUmI53QWLBzx99 wWC1uL717eeHz/P6rrpY0mdvJig8VgMpVnqvRF6a2lF9/pKgvKnnudY7rsQgMVL8 1FJBaW5O1tk11o8KZgYGTgO10GZqoWwKsjerwowBv+eVfe5h/kuyMAjCrD2aWTB/ eGGrkNshQR54CeKUgOM22eJmpTcJWU52tYT1yCblq9ej98wcWZffOHucXfTRAU9j /fB9asPsTqhW9Samh9p8NkbeiwJAAx51YYgetut7ZSilj9ixaUyXh2WVakYhFhQ/ 1Px9UiFuvfpzSv+KjOXZ/BDkhmD1Dk8tHp6UIpvlob2vasCUiiORs3UeQIyeOuXF KJt4FRlzE5dN+1flrZLFsaTRl4TGUGtHni59c2VjspTNLyG1KQk= =0TgY -----END PGP SIGNATURE-----