-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 15 Dec 2025 15:29:38 +0100 Source: glib2.0 Binary: libglib2.0-0 libglib2.0-0-dbgsym libglib2.0-bin libglib2.0-bin-dbgsym libglib2.0-dev libglib2.0-dev-bin libglib2.0-dev-bin-dbgsym libglib2.0-tests libglib2.0-tests-dbgsym libglib2.0-udeb Architecture: armhf Version: 2.74.6-2+deb12u8 Distribution: bookworm Urgency: medium Maintainer: arm Build Daemon (arm-ubc-06) Changed-By: Emilio Pozuelo Monfort Description: libglib2.0-0 - GLib library of C routines libglib2.0-bin - Programs for the GLib library libglib2.0-dev - Development files for the GLib library libglib2.0-dev-bin - Development utilities for the GLib library libglib2.0-tests - GLib library of C routines - installed tests libglib2.0-udeb - GLib library of C routines - minimal runtime (udeb) Closes: 1121488 1122346 1122347 Changes: glib2.0 (2.74.6-2+deb12u8) bookworm; urgency=medium . * Team upload. * CVE-2025-13601: integer overflow into heap buffer overflow escaping very large strings in g_escape_uri_string (Closes: #1121488). * CVE-2025-14087: buffer overwrite when processing large GVariant strings. (Closes: #1122347). * CVE-2025-14512: interger overflow into buffer overwrite when processing file attributes in GIO's escape_byte_string (Closes: #1122346). Checksums-Sha1: ac4f642290358499be8b5c932d74da65bf4c506f 11416 glib2.0_2.74.6-2+deb12u8_armhf-buildd.buildinfo cb74fdaadebf9548e9597ba98790e4356ca81b54 3911288 libglib2.0-0-dbgsym_2.74.6-2+deb12u8_armhf.deb 72ab719f72bf0e59a857284756869334521fa48f 1231760 libglib2.0-0_2.74.6-2+deb12u8_armhf.deb 2529d7f87150069f47779138789dd7055ce5d8be 144328 libglib2.0-bin-dbgsym_2.74.6-2+deb12u8_armhf.deb cc55c3df0d3981097f19c982d290eed973edfb32 104988 libglib2.0-bin_2.74.6-2+deb12u8_armhf.deb b3e9dc407b15d87bd9d2bd6d741c938cd415c461 70668 libglib2.0-dev-bin-dbgsym_2.74.6-2+deb12u8_armhf.deb 11264f740415a70cbac4bb4c4b5c812bd08ba72b 149336 libglib2.0-dev-bin_2.74.6-2+deb12u8_armhf.deb 486df16ad3ccad31f658e94c4cd7c55ba9a50acf 1485276 libglib2.0-dev_2.74.6-2+deb12u8_armhf.deb 8fb55c52f28d5c9ff8cd794c4107dbafc70e6d99 4304336 libglib2.0-tests-dbgsym_2.74.6-2+deb12u8_armhf.deb 9a6ec3cffb5d2445cdcf427e3431434f8042a731 1754412 libglib2.0-tests_2.74.6-2+deb12u8_armhf.deb 22e757e9a2805736767637bccefabbb12c3cb44b 2097544 libglib2.0-udeb_2.74.6-2+deb12u8_armhf.udeb Checksums-Sha256: 9b5216193e432aebc21c9a295f3ba160fa3c57b7936a329dbbae62f2fd69caff 11416 glib2.0_2.74.6-2+deb12u8_armhf-buildd.buildinfo eb988bdb2e52a099060e683d10c5432fe340e556f1aae5f3ed62263ff5cbf023 3911288 libglib2.0-0-dbgsym_2.74.6-2+deb12u8_armhf.deb eddb7e3f3271ef40a34a6b7b1368d278ec539e3ffe02fa566dcf0cc1339380ea 1231760 libglib2.0-0_2.74.6-2+deb12u8_armhf.deb 127a2fdd1a7b5518f3810f5325f40fb45f7ea10b5516a48dd4a959ee0aebce15 144328 libglib2.0-bin-dbgsym_2.74.6-2+deb12u8_armhf.deb a812720894f606d306f1e4b04917e26e26f79e47187d0fe2abb37a84695007fa 104988 libglib2.0-bin_2.74.6-2+deb12u8_armhf.deb d486591c7235e1d6e9c9821455140a7792ed506b31c14ea1836d3d287b6dca2e 70668 libglib2.0-dev-bin-dbgsym_2.74.6-2+deb12u8_armhf.deb 652197dbc4f7fb9dd6b6f207b3bf4c3317d02e7ddfd97ff0a7b277533561f713 149336 libglib2.0-dev-bin_2.74.6-2+deb12u8_armhf.deb d91a69298bae0acf293c7e42937d4ff725679bcab513206d550565e7d70f4990 1485276 libglib2.0-dev_2.74.6-2+deb12u8_armhf.deb c228d4c6e4fb46f81c8c10a5f14823cb1d1c7059a05283191ab9af707cb74d1e 4304336 libglib2.0-tests-dbgsym_2.74.6-2+deb12u8_armhf.deb 3b2586d15be42ab6ca8b11b29448a9a2349f2d5bcb3e008282397fb9825631b6 1754412 libglib2.0-tests_2.74.6-2+deb12u8_armhf.deb a8482392b0de6e89c2e51cfd63d704314d8340dec578cd64e3d5e087d101e0f3 2097544 libglib2.0-udeb_2.74.6-2+deb12u8_armhf.udeb Files: 5cbb76dcf6182b368979a711237dbda7 11416 libs optional glib2.0_2.74.6-2+deb12u8_armhf-buildd.buildinfo 5ea0c0ce46563896eb686f6be513883f 3911288 debug optional libglib2.0-0-dbgsym_2.74.6-2+deb12u8_armhf.deb 531769e5c79b73dad09129651ae16662 1231760 libs optional libglib2.0-0_2.74.6-2+deb12u8_armhf.deb b4404c0cddfcc41e7c5f71b9051aa99a 144328 debug optional libglib2.0-bin-dbgsym_2.74.6-2+deb12u8_armhf.deb 8b8b7529d0ec8631599e789764efc1f2 104988 misc optional libglib2.0-bin_2.74.6-2+deb12u8_armhf.deb da771a4b2cc55aa12f7cae4283377534 70668 debug optional libglib2.0-dev-bin-dbgsym_2.74.6-2+deb12u8_armhf.deb d6674fad5c031a370089acdbeb89130a 149336 libdevel optional libglib2.0-dev-bin_2.74.6-2+deb12u8_armhf.deb 69b4252c97d69d4cedc48dc1609cfc12 1485276 libdevel optional libglib2.0-dev_2.74.6-2+deb12u8_armhf.deb a7689f7356beeb9b770583940c67c884 4304336 debug optional libglib2.0-tests-dbgsym_2.74.6-2+deb12u8_armhf.deb 814cf9ed83884337c0e4ae231197ff7d 1754412 libs optional libglib2.0-tests_2.74.6-2+deb12u8_armhf.deb 6e1330354f3260e5a172aa1e1807ff32 2097544 debian-installer optional libglib2.0-udeb_2.74.6-2+deb12u8_armhf.udeb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEpxWVfktWxVoKRwGgJ7tNDw2WyRsFAmlOpaIACgkQJ7tNDw2W yRvd/RAArWZBNilxgScu97js8osDFo1NRNgflS5PQ9Q5VK9sWsVleWBYauuPChbN j0zq/qIxY32tGjpS0Tl8KLD5w1gH9G+1uSgiiLmZdvdKEXT6CUDtlrB4T2Qg4HKe 6z/N/wcaqsCsY1CgLAYkQYGY2AYxIC+IUENUof265tIjrOrS/e/MCNAFdDWdzTVZ 98ZuzVs6kV/C9reysMC+ZPgYVPK5LgqdjbHYwNRDvcwZBg4Gd9mPWo5e5gszoKUJ 0tGYwmTqko1Z8rHwdt3ax4Rbp2AcZ0Yev+BoGsVX1/I9b8RFAs7dL1jn9gKPRV9s tRwo2WjmUIXpw+SdAA7mkaXwYk+evXCj2ARxmg1LW1qgeB4kmDSYJTFzqVbUnWm6 YZWZNZ/HAjEAOILAZ9km4TngpYfE7936WtZbfVoBAEHonXVeOCZxa6/3OakInXlG 6TWMctGCo+qh4gd1GzUvqLEXQK55DdnDUkULKSUkZg6lYYGrPMZKEXe4o3dkp/Ly /bC+fCJ/hU1oO+PFgf5jK1ZZyDobtoPxtTOXDUEMAGIiVQ4E497ibsHA0qyR1NHM rfVbVAqrZPyhG+2KBAFEfTAvoE530oqtQ35kqBb6dP0tFtzlyymZyWqBbWFfvz6c s03F5bQaNVO88jc5JDlFLixWfpxNSRZaFgGwHIh9vPULol/5CfQ= =AFKk -----END PGP SIGNATURE-----