-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 12 Dec 2025 18:43:13 +0000 Source: glib2.0 Binary: gir1.2-girepository-3.0 gir1.2-girepository-3.0-dev gir1.2-glib-2.0 gir1.2-glib-2.0-dev girepository-tools girepository-tools-dbgsym libgio-2.0-dev libgio-2.0-dev-bin libgio-2.0-dev-bin-dbgsym libgirepository-2.0-0 libgirepository-2.0-0-dbgsym libgirepository-2.0-dev libglib2.0-0t64 libglib2.0-0t64-dbgsym libglib2.0-bin libglib2.0-bin-dbgsym libglib2.0-dev libglib2.0-dev-bin libglib2.0-tests libglib2.0-tests-dbgsym libglib2.0-udeb Architecture: s390x Version: 2.84.4-3~deb13u2 Distribution: trixie Urgency: medium Maintainer: s390x Build Daemon (zani) Changed-By: Simon McVittie Description: gir1.2-girepository-3.0 - Introspection data for GIRepository library, API version 3.0 gir1.2-girepository-3.0-dev - GIR XML for GIRepository library, API version 3.0 gir1.2-glib-2.0 - Introspection data for GLib, GObject, Gio and GModule gir1.2-glib-2.0-dev - GIR XML for GLib, GObject, Gio and GModule girepository-tools - Tools for working with GObject-Introspection repositories libgio-2.0-dev - Development files for the GLib, GObject and GIO libraries libgio-2.0-dev-bin - Development utilities for GLib, GObject and GIO libraries libgirepository-2.0-0 - GLib runtime library for handling GObject introspection data libgirepository-2.0-dev - Development files for the GObject introspection library libglib2.0-0t64 - GLib library of C routines libglib2.0-bin - Programs for the GLib library libglib2.0-dev - Development metapackage for the GLib family of libraries libglib2.0-dev-bin - Development utilities for the GLib library libglib2.0-tests - GLib library of C routines - installed tests libglib2.0-udeb - GLib library of C routines - minimal runtime (udeb) Closes: 1121488 1122346 1122347 Changes: glib2.0 (2.84.4-3~deb13u2) trixie; urgency=medium . * d/patches: Add patches from 2.86.3 upstream to avoid integer overflows - d/p/gconvert-Error-out-if-g_escape_uri_string-would-overflow.patch, d/p/fuzzing-Add-fuzz-tests-for-g_filename_-to-from-_uri.patch: Fix an integer overflow when interpolating hundreds of megabytes of unescaped text into a URI, and add test coverage (CVE-2025-13601, glib#3827 upstream, Closes: #1121488) - d/p/gvariant-parser-Fix-potential-integer-overflow-parsing-by.patch: Fix an integer overflow when parsing very large strings in GVariant text format (CVE-2025-14087, glib#3834 upstream, Closes: #1122347) - d/p/gvariant-parser-Use-size_t-to-count-numbers-of-child-elem.patch, d/p/gvariant-parser-Convert-error-handling-code-to-use-size_t.patch: Fix other potential integer overflows parsing very large container types in GVariant text format, related to CVE-2025-14087 - d/p/gfileattribute-Fix-integer-overflow-calculating-escaping-.patch: Fix an integer overflow when escaping invalid characters in very large file attributes (CVE-2025-14512, glib#3845 upstream, Closes: #1122346) Checksums-Sha1: 5686684e38501e7a324e1d3e60476759fd32f868 84584 gir1.2-girepository-3.0-dev_2.84.4-3~deb13u2_s390x.deb ccfba8779844185f39f7fa510fb3d7eac66ad19e 61304 gir1.2-girepository-3.0_2.84.4-3~deb13u2_s390x.deb 985099fdff69ba811d4d2138dad24a1a4b21b049 916660 gir1.2-glib-2.0-dev_2.84.4-3~deb13u2_s390x.deb abc6719459210749ed12910731c11d398259a3d8 196996 gir1.2-glib-2.0_2.84.4-3~deb13u2_s390x.deb c95708de230ba143645157613ee2369df1aeec1f 314304 girepository-tools-dbgsym_2.84.4-3~deb13u2_s390x.deb 6ae049fc808b647c974796bba36e10b5bd6e6312 147972 girepository-tools_2.84.4-3~deb13u2_s390x.deb 135b34856258b4ac89ed3c965187de89fed8b1b1 15761 glib2.0_2.84.4-3~deb13u2_s390x-buildd.buildinfo 0a7b1a46add38aa244aadb233624bddb662ab816 79480 libgio-2.0-dev-bin-dbgsym_2.84.4-3~deb13u2_s390x.deb 569afa5051e9d4b590e20b1297bf916d849d7ddd 165808 libgio-2.0-dev-bin_2.84.4-3~deb13u2_s390x.deb f3e1fc105414598cd450d22a806ca30e727a8d79 1639440 libgio-2.0-dev_2.84.4-3~deb13u2_s390x.deb 041189547891a9595d120dc57ee9775c3effcdcf 329752 libgirepository-2.0-0-dbgsym_2.84.4-3~deb13u2_s390x.deb 549c5e87b534c73ec5d8cf4b83a86e44db8f50c1 142740 libgirepository-2.0-0_2.84.4-3~deb13u2_s390x.deb aad572b04e87b3a80514feb94e6af2f3cfc11c0e 214340 libgirepository-2.0-dev_2.84.4-3~deb13u2_s390x.deb e57ce35998a3bc38c3f25e6953739663a96b9f38 4496436 libglib2.0-0t64-dbgsym_2.84.4-3~deb13u2_s390x.deb 8ac2f301ae84ff822c67a30ec85af983df3a7945 1438200 libglib2.0-0t64_2.84.4-3~deb13u2_s390x.deb 63b6dc2f39746d1575a28be54f4e92c2736e32a7 166556 libglib2.0-bin-dbgsym_2.84.4-3~deb13u2_s390x.deb ad5d7da6f0e4663a75eddfe8da8061d5c30e5923 127132 libglib2.0-bin_2.84.4-3~deb13u2_s390x.deb b89de5a3bbf50c9bf88d9bb21f1b46d1ceab588c 55268 libglib2.0-dev-bin_2.84.4-3~deb13u2_s390x.deb fcff3992862da6639cc1ef639159cd70daeee271 56052 libglib2.0-dev_2.84.4-3~deb13u2_s390x.deb b94d3222b856db0c0336faa6a825997383e23e0a 5370912 libglib2.0-tests-dbgsym_2.84.4-3~deb13u2_s390x.deb aff089e888a844e1cac08fbe4833a80060952ff3 1947804 libglib2.0-tests_2.84.4-3~deb13u2_s390x.deb e02f67bc161ab06bd35cfd6755f7d3347a8e0a5a 2296736 libglib2.0-udeb_2.84.4-3~deb13u2_s390x.udeb Checksums-Sha256: c8252206a80c278c13a987ce21895a7c9404f3b986ab919959205c25dc544ba1 84584 gir1.2-girepository-3.0-dev_2.84.4-3~deb13u2_s390x.deb eabe1200b893d7f188b79c1bd2f66678c07b135e2c34fb5fbc96d95fa459bd86 61304 gir1.2-girepository-3.0_2.84.4-3~deb13u2_s390x.deb e01b734102ea63cd93e2d69834d25764fc3fc85df33bde895fb35afb1d620c07 916660 gir1.2-glib-2.0-dev_2.84.4-3~deb13u2_s390x.deb 00bc772fdaea69649883f136a5fa626a2c51b7d9f60abf3cad3817a580087e54 196996 gir1.2-glib-2.0_2.84.4-3~deb13u2_s390x.deb c486f9ae94f258fbf4297ae16ff512c4b39f30e1a3fdab91ab2efc5fcb323a42 314304 girepository-tools-dbgsym_2.84.4-3~deb13u2_s390x.deb 4c6492c11e0f91029a8eaa404946b494f1573da0c464b280c8eabe2c06db05b7 147972 girepository-tools_2.84.4-3~deb13u2_s390x.deb f13ae4367b2a97c0f58a8659f1b3ac5574aa87802267a7df8cfbfdc0b088ebfd 15761 glib2.0_2.84.4-3~deb13u2_s390x-buildd.buildinfo a7ff4c59d067420ba1f2f4d6bf9c2eb07a80f323281297ffd4ed79960fe51962 79480 libgio-2.0-dev-bin-dbgsym_2.84.4-3~deb13u2_s390x.deb 97a7836d57f9bd7b0c80a6ff8ca6e6db1e13ae27814e968bbb7f6fb563cc21d0 165808 libgio-2.0-dev-bin_2.84.4-3~deb13u2_s390x.deb 6b1fcc40f3acd6693b50812db8621d0b56ca7c669abb0411dad0485a936b21cb 1639440 libgio-2.0-dev_2.84.4-3~deb13u2_s390x.deb 6b3a9fa8e33ec11e4e7b29afb5fa604466bf240e62859056aabef7489ef402f3 329752 libgirepository-2.0-0-dbgsym_2.84.4-3~deb13u2_s390x.deb 05f4f93a8f15cb947c71b0ce590541f4258f5982e793e255de6714eef9393c94 142740 libgirepository-2.0-0_2.84.4-3~deb13u2_s390x.deb 91be78786a4c01301db5f02c62946850d6e25e4c9afec267330f7614e3f3660e 214340 libgirepository-2.0-dev_2.84.4-3~deb13u2_s390x.deb cc6a85b9966812b45e570a5351b66dd64ee1a7631e3977fe03c100f7d8140a06 4496436 libglib2.0-0t64-dbgsym_2.84.4-3~deb13u2_s390x.deb 7f3b66433fa74de544297719ab11318bc4234cb0b3cf658920d1a1ce44a7c4e4 1438200 libglib2.0-0t64_2.84.4-3~deb13u2_s390x.deb 2f0ee5c5209f435b7a538c8805a86088bab5d7cd674bcc4f6214ec0b4ed624c9 166556 libglib2.0-bin-dbgsym_2.84.4-3~deb13u2_s390x.deb 1904d002e7fda3b62ddef511f6514555446f405fb170a693148b3267e43743c5 127132 libglib2.0-bin_2.84.4-3~deb13u2_s390x.deb 26165c2de93a372f975935618199ed25ac5232c044c75183d4532f248bb06508 55268 libglib2.0-dev-bin_2.84.4-3~deb13u2_s390x.deb f406f120891a5e17c801632b0391a1550a90f8f087d93d92e6e35c959bbd80e4 56052 libglib2.0-dev_2.84.4-3~deb13u2_s390x.deb 40d85b7a8420e47292b0e68de255980bfecf40f6a801ef7662af3933df1909ea 5370912 libglib2.0-tests-dbgsym_2.84.4-3~deb13u2_s390x.deb 7317b135d75b07a40898afb647c43032b2371061089d826faeeae0e8eaa59254 1947804 libglib2.0-tests_2.84.4-3~deb13u2_s390x.deb 7b1464e1099f34057286c6bc416334baff49dd4a2d9bb5e2a0b9e5d946a9417d 2296736 libglib2.0-udeb_2.84.4-3~deb13u2_s390x.udeb Files: 838a9fd08f03967d8e9216d4142add04 84584 libdevel optional gir1.2-girepository-3.0-dev_2.84.4-3~deb13u2_s390x.deb f1b85faf12e3ee9d3082bd6f6e7619b7 61304 introspection optional gir1.2-girepository-3.0_2.84.4-3~deb13u2_s390x.deb b7e52ffb738e1162d58f776892e19788 916660 libdevel optional gir1.2-glib-2.0-dev_2.84.4-3~deb13u2_s390x.deb 964825a42cfc840fd5d7c204cb136ee4 196996 introspection optional gir1.2-glib-2.0_2.84.4-3~deb13u2_s390x.deb 31e0a38d78fad5a8dc696dfe270eb7c5 314304 debug optional girepository-tools-dbgsym_2.84.4-3~deb13u2_s390x.deb 8d2e81d8f227d26cd85b45cc974d39e5 147972 libdevel optional girepository-tools_2.84.4-3~deb13u2_s390x.deb 57c8006c522e78434f111e5ded89e00b 15761 libs optional glib2.0_2.84.4-3~deb13u2_s390x-buildd.buildinfo 1edbd718d2faa1cd45711177b0817878 79480 debug optional libgio-2.0-dev-bin-dbgsym_2.84.4-3~deb13u2_s390x.deb 96440a4cf3a60f50711e5ef808f5bda5 165808 libdevel optional libgio-2.0-dev-bin_2.84.4-3~deb13u2_s390x.deb 9d430d207f8aae882891b5b99efef8aa 1639440 libdevel optional libgio-2.0-dev_2.84.4-3~deb13u2_s390x.deb f471c2e2facde4a9f1ec8d12908d3a09 329752 debug optional libgirepository-2.0-0-dbgsym_2.84.4-3~deb13u2_s390x.deb bc82dd75a253510d8bed71ae4044c686 142740 libs optional libgirepository-2.0-0_2.84.4-3~deb13u2_s390x.deb 23ece9cbe631113ff8518cdf08d2929b 214340 libdevel optional libgirepository-2.0-dev_2.84.4-3~deb13u2_s390x.deb b501c6b3cc531bbce008391747af072f 4496436 debug optional libglib2.0-0t64-dbgsym_2.84.4-3~deb13u2_s390x.deb 672915e9a39c2ad187d99f637d8875cd 1438200 libs optional libglib2.0-0t64_2.84.4-3~deb13u2_s390x.deb 611c1ff2ee367edbb9d6e14a69d21334 166556 debug optional libglib2.0-bin-dbgsym_2.84.4-3~deb13u2_s390x.deb 495e3bfcceba548445755365bfd15d9c 127132 misc optional libglib2.0-bin_2.84.4-3~deb13u2_s390x.deb 91ad7110d5fa6355614f4d3cd534489a 55268 libdevel optional libglib2.0-dev-bin_2.84.4-3~deb13u2_s390x.deb 8937cb0a508ec999e1c3169c4c2abaf7 56052 libdevel optional libglib2.0-dev_2.84.4-3~deb13u2_s390x.deb 5b9e75eb10527aa631e6e3c3170cb82c 5370912 debug optional libglib2.0-tests-dbgsym_2.84.4-3~deb13u2_s390x.deb 1cb45655c2ff5a842ba60a37f3b9e36d 1947804 libs optional libglib2.0-tests_2.84.4-3~deb13u2_s390x.deb d872788a89171bb283952c7b2aa2f2b5 2296736 debian-installer optional libglib2.0-udeb_2.84.4-3~deb13u2_s390x.udeb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEgh4msZ+e2PZfd5KckaCrxAR3BY0FAmlIHmEACgkQkaCrxAR3 BY1KJBAAjbA8jKbNZDqXmqz+AYzXbxocT/jdaFEwUQNBS4XK3U44TWWC6TM/EcRv vMoawBSQ4gjoolO3RzYc10VJ6Rc3D/TOoit7E6mCdbXmA+Ep4SXqJDCjCLXvgHPO 7IoeQEd2lsMcZ0Jr74XR9KRPend8/IwuJf3K1hOsfA2spJFMVi+3mjT3G43d/uIU vKN/LxzsBBxWQmE+94TY8isgO+0onyvXgK0RhV0SJlYriDvHyojYXc0Qx5Ob/Fvn E8dBgawbFtH04SzYEBfVCzYjYdr8H2Esi3IurqpaueXmzRozw8835V3Pzn3Qd5Pl HGMoBB/GB4r1ooAnVyc6h/ck9AwgkrEerZjZkDh9NVTs0YlkOfKqbiE6eNoT2v23 figgKgoDXCKpljCSplnq+QC7WH4Si2WbJ+1tQjc5UhBSyRS6reO9+oKi5pohVydH rKNSI9Bniz1JjKPSTu/gyn/3ZK9RPCWawshcus5Xlq4y8zhrZtA5qWJQjyxIKDFB 933nKJ5tRUeRJhjMhvGCqJiFog/DwjyrF+e3erxIbEWwpdjrwXkJLmcgP36ng88Z TO5cKZQqiiQoXmHDHG2lDWg1oGZAqS3NcgJ+fkwLWm1O2SXRrwfifEgWWD8gw63p jJ7aQKe14CJYE18FpXjGFf1idxeQbEFhyr2n5EJlpYj9MFJ9rOU= =jgpc -----END PGP SIGNATURE-----