-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 15 Dec 2025 15:29:38 +0100 Source: glib2.0 Binary: libglib2.0-0 libglib2.0-0-dbgsym libglib2.0-bin libglib2.0-bin-dbgsym libglib2.0-dev libglib2.0-dev-bin libglib2.0-dev-bin-dbgsym libglib2.0-tests libglib2.0-tests-dbgsym libglib2.0-udeb Architecture: amd64 Version: 2.74.6-2+deb12u8 Distribution: bookworm Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) Changed-By: Emilio Pozuelo Monfort Description: libglib2.0-0 - GLib library of C routines libglib2.0-bin - Programs for the GLib library libglib2.0-dev - Development files for the GLib library libglib2.0-dev-bin - Development utilities for the GLib library libglib2.0-tests - GLib library of C routines - installed tests libglib2.0-udeb - GLib library of C routines - minimal runtime (udeb) Closes: 1121488 1122346 1122347 Changes: glib2.0 (2.74.6-2+deb12u8) bookworm; urgency=medium . * Team upload. * CVE-2025-13601: integer overflow into heap buffer overflow escaping very large strings in g_escape_uri_string (Closes: #1121488). * CVE-2025-14087: buffer overwrite when processing large GVariant strings. (Closes: #1122347). * CVE-2025-14512: interger overflow into buffer overwrite when processing file attributes in GIO's escape_byte_string (Closes: #1122346). Checksums-Sha1: 6cdf6ec8b2f77cb16abe778129a982ea7c4dab93 11573 glib2.0_2.74.6-2+deb12u8_amd64-buildd.buildinfo 08eb0274bacaca607ed78aa28bfe5d958e42de74 4043480 libglib2.0-0-dbgsym_2.74.6-2+deb12u8_amd64.deb 270941813001d643423d40baa40c26662c52503a 1401980 libglib2.0-0_2.74.6-2+deb12u8_amd64.deb a19bfa06add6af9c70cb201764a377b1589c7fee 152840 libglib2.0-bin-dbgsym_2.74.6-2+deb12u8_amd64.deb a866c27a262c8ec5382587b5c2da4bc2e3b63109 111756 libglib2.0-bin_2.74.6-2+deb12u8_amd64.deb 9e1ec0a5dc5a1a939e7e7a700009ffe3b2f59514 73488 libglib2.0-dev-bin-dbgsym_2.74.6-2+deb12u8_amd64.deb afd5dc5a9941aad59d4f249ab6a1dc25e3d6821f 152544 libglib2.0-dev-bin_2.74.6-2+deb12u8_amd64.deb 42c5663773be7caa2dfb1fb0c59e5fe03a802256 1604548 libglib2.0-dev_2.74.6-2+deb12u8_amd64.deb 9633423efd7dce3f5103c4fb31b8a00fb93c134f 4793340 libglib2.0-tests-dbgsym_2.74.6-2+deb12u8_amd64.deb 7ba5eb6f73ce00ceaf4f9d4ea684100425148f47 1861280 libglib2.0-tests_2.74.6-2+deb12u8_amd64.deb 1081ef90ef7716c7c7e28cf0bdee1ce590ca834d 2268520 libglib2.0-udeb_2.74.6-2+deb12u8_amd64.udeb Checksums-Sha256: 38ad1ff631ea6902aef2a08a447fd6fdae7b8b1e3ad7fbd6294435103dda9240 11573 glib2.0_2.74.6-2+deb12u8_amd64-buildd.buildinfo d6a2ed7721d2874c77faa90f2a5e3ba537bca9d5381c137c48465bd5c368c08c 4043480 libglib2.0-0-dbgsym_2.74.6-2+deb12u8_amd64.deb 42c565b6b7ef6366a943f061160e18f6cf436809dd17381af0f7fe540a0eeb6a 1401980 libglib2.0-0_2.74.6-2+deb12u8_amd64.deb 7068da54c121be8a644c514c1f2861bae7d04dd9a697e45a8e218a346d0c2be1 152840 libglib2.0-bin-dbgsym_2.74.6-2+deb12u8_amd64.deb 11d2bdb8e6b18d9c6fa277cf8d6bb7658598a1aa0f6186ae5829fb105f029367 111756 libglib2.0-bin_2.74.6-2+deb12u8_amd64.deb 1f678142909b04c105c22fd5ce3fac51d299ded1c8cb5d7d645c4a3554af71c4 73488 libglib2.0-dev-bin-dbgsym_2.74.6-2+deb12u8_amd64.deb 3dd75fa7e3e792c3cb17f1c55fa414b5ea0560f5f62d09a77c566214f9bcf7bc 152544 libglib2.0-dev-bin_2.74.6-2+deb12u8_amd64.deb 8e5402a75709c4641d0a5ba150b8566945cee234854219ca839b61e724ae1efa 1604548 libglib2.0-dev_2.74.6-2+deb12u8_amd64.deb ec46183a73b4c1d2edf5670dcd6580399869d9c66bc27326aae08077827f51c4 4793340 libglib2.0-tests-dbgsym_2.74.6-2+deb12u8_amd64.deb 81741dfa4a2eed2e73b5982558d325d463d67c26f01c2ce7592050dc21784826 1861280 libglib2.0-tests_2.74.6-2+deb12u8_amd64.deb 337410b3043e583e943da9f9a13fce7e3b9644abd76275a316164b16287a17e2 2268520 libglib2.0-udeb_2.74.6-2+deb12u8_amd64.udeb Files: e65f67a99b3801f542db709b3c450f7b 11573 libs optional glib2.0_2.74.6-2+deb12u8_amd64-buildd.buildinfo 9f95779786dbb5a8df26ef1be94757ba 4043480 debug optional libglib2.0-0-dbgsym_2.74.6-2+deb12u8_amd64.deb 809e7db994dd692ee975f8da7d483cf4 1401980 libs optional libglib2.0-0_2.74.6-2+deb12u8_amd64.deb 25176eb3fad3fdb0b74dc47056094261 152840 debug optional libglib2.0-bin-dbgsym_2.74.6-2+deb12u8_amd64.deb 7e9a5e64bb04ef5308e13d26eb29cac7 111756 misc optional libglib2.0-bin_2.74.6-2+deb12u8_amd64.deb 6216664fba79d2a7e7d69bcc736baa1c 73488 debug optional libglib2.0-dev-bin-dbgsym_2.74.6-2+deb12u8_amd64.deb 7baa4fd584a42ac37ca43ebf9fdc8e74 152544 libdevel optional libglib2.0-dev-bin_2.74.6-2+deb12u8_amd64.deb 4060d53c197901c72a8c86f36e66c0b8 1604548 libdevel optional libglib2.0-dev_2.74.6-2+deb12u8_amd64.deb 2b92693c4b15e90ebd1178e4ad20353f 4793340 debug optional libglib2.0-tests-dbgsym_2.74.6-2+deb12u8_amd64.deb f6dd9f3cb67dfbedb0f5af81bdfbe236 1861280 libs optional libglib2.0-tests_2.74.6-2+deb12u8_amd64.deb 700ef7e43f3ef98f30dd6af01e991001 2268520 debian-installer optional libglib2.0-udeb_2.74.6-2+deb12u8_amd64.udeb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEaPzFtKPtF0JrKPV5iZlfn74WV6kFAmlOpbYACgkQiZlfn74W V6nZFw/+K9BzyThRqwJKZJoew/KoMM1UgbQDCJ/LQiTKe/2q2NostiPjbuwrZZEf CH+oYwe4krdjWRb+9XcHUBFJh9Ade55yb+7YDas6EQ8OMGG/aKoy4yYHaxiqq1e1 zqfU4LgjsblM3VtpzUc974It+gn9qR3DymrINaImO3nyLIQyiD8+Qf1XCeDIRqwe yA9IqRK4l28hhA8v6K4oeuj1XKHEPOS8UM9Pvu70p66hVr3sYUZgVXCdZ+kFjQ6j k2iJFjx43CoHMdJD3Vb/MPvx3zDpVneIItU3uNJ3TKnMeTPYlKTEmabJDYQUHDc0 UwO0CFfXdXE6Ibgd0GVHu8vghmFu3GY3pw085ym8TutQbnLrKtxVD9H8d+PJYfjv +A6Abvs3mxCed9IMRtQrymPEpju604xHp772OKH8gqAFSIJBpoX7u/PAp5jEyBLh ls3BZI3TyVGBrr0huBKa86nlDVGVSjAZVJ86p4PQnAcmTfWhKTYEa2ga2gkf7rvG 3hSNPflWGtNWUQRCzqj8f3mK7IcZXaf+OSXm1V8opbs2wigfSjHIMvG4l0IV1zcH Qvod7rA0EmL4OjgW0lOi0uvdVg+zObKw6pLmtZl/HQ5rv+81q727d5c7IJNYCFJv oMJpqOdlTD8J8Dmpmpii1daPlONZSKOqQYMVGMgHrxsEumy9QmU= =5w40 -----END PGP SIGNATURE-----