-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 15 Dec 2025 15:29:38 +0100 Source: glib2.0 Binary: libglib2.0-data libglib2.0-doc Architecture: all Version: 2.74.6-2+deb12u8 Distribution: bookworm Urgency: medium Maintainer: all Build Daemon (x86-grnet-02) Changed-By: Emilio Pozuelo Monfort Description: libglib2.0-data - Common files for GLib library libglib2.0-doc - Documentation files for the GLib library Closes: 1121488 1122346 1122347 Changes: glib2.0 (2.74.6-2+deb12u8) bookworm; urgency=medium . * Team upload. * CVE-2025-13601: integer overflow into heap buffer overflow escaping very large strings in g_escape_uri_string (Closes: #1121488). * CVE-2025-14087: buffer overwrite when processing large GVariant strings. (Closes: #1122347). * CVE-2025-14512: interger overflow into buffer overwrite when processing file attributes in GIO's escape_byte_string (Closes: #1122346). Checksums-Sha1: 6ce7fb4afb497bec5b1ea4064fbb4fa4e786a97d 8156 glib2.0_2.74.6-2+deb12u8_all-buildd.buildinfo 9763218127f7c5173c39815cfdc3301443c2ec45 1210324 libglib2.0-data_2.74.6-2+deb12u8_all.deb d79459a7e1180a1a6040f962355547cfad10d268 1520700 libglib2.0-doc_2.74.6-2+deb12u8_all.deb Checksums-Sha256: 58b6b1ff40dcefc60895a58929eb682d953c1a819fb4e2f83f7134e94a64f576 8156 glib2.0_2.74.6-2+deb12u8_all-buildd.buildinfo 8056f99a67d4d94d7a354c19a4f46b26a5663ff7c8863464fb8f38d1f6d03cdd 1210324 libglib2.0-data_2.74.6-2+deb12u8_all.deb f62965c6acd233da6ab6e38507817968437f7db2f591b97ab9859dce063d5214 1520700 libglib2.0-doc_2.74.6-2+deb12u8_all.deb Files: a50516fda8d9b0a7eba4599c72a93f8f 8156 libs optional glib2.0_2.74.6-2+deb12u8_all-buildd.buildinfo 947a2b6882749a890c08e960a3c83323 1210324 libs optional libglib2.0-data_2.74.6-2+deb12u8_all.deb a3f2032b9fc000ba313582d8fbcee491 1520700 doc optional libglib2.0-doc_2.74.6-2+deb12u8_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEj4Fym5GgeZdPqKhrJm69HxMTN+oFAmlOpTQACgkQJm69HxMT N+qBjQ/7By81bi0xVNWv+PyQEDk40IpL58ACvR2TQcly+0wwnOS2pYDQdkpRydSg /DuftXpVcZRamfe03cYCPQCpFxKkHUM4l49MzKWS/KqeYoGQwiUtSuIhNnvRfstd q3F5ZW2lb7HjSVEIC098kCLaSqUH0DpM7lCy2DxILK7mS1MxeKUbX3b6HjYsWACF owyCBEOuYLuzD/J27kmHf0MRAsV3DXaKfL/K/m88fHuP6DdbitQi4BbpCLfsWnAu 0hysRT5yLXwSzXk8Lid6U18kJGddG9Rp0eifikSvoc9KvuVy080UIxl2wTCWQlWi Kbm/FgnJHqzHDFlWXMxz6FxMx0pni44o0XYsAIHjnE8Od78aDdUC2SLSPn+wNzO4 eg8hPxX3Zs0OvYZCT913ZEO17z67xbf94RH/D5s3pxNrEoAA0Z+6XKGRYPzSRGiO D5bLzABqsQoqztibPVywQcah7+911f+YoyWuJUPDKeYgKnUx0ZRmNsYoeN7LNwz2 BgFRCUF2uuUteNb/62fLdUhWQYY1+hKw4isIIbMsnihv0842jLgVnVEn2StcwC/I +emrPJexDKzx8EURirKjsXS7ocVOku4JVJ9zZKkVmxpvaP23V8h4D0NfAxKxbOJQ oBER3vbbbbds+mPclhTFITum2KSudKtNtsRDXFxBjX6paoxWQsc= =sp00 -----END PGP SIGNATURE-----