[From nobody Sun Aug 2 17:51:05 2026 Received: (at 1141316-close) by bugs.debian.org; 2 Aug 2026 16:50:30 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-113.1 required=4.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD,HAS_BUG_NUMBER, MD5_SHA1_SUM,PGPSIGNATURE,RCVD_IN_DNSWL_MED,SPF_HELO_PASS,SPF_PASS, USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 109; hammy, 150; neutral, 163; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mitropoulos.debian.org ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:48730) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wqZOQ-0098pg-15 for 1141316-close@bugs.debian.org; Sun, 02 Aug 2026 16:50:30 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mitropoulos.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wqZOO-00Fz0v-27 for 1141316-close@bugs.debian.org; Sun, 02 Aug 2026 16:50:28 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=Xja5yLlkSTjkFWVC5lpx+v1oeLBm3xPx0gjUuxE+6oM=; b=aHlj2UZXAJn4r+naWzKPz+MxMK HeBR95YWehq2gOZenKC7K13zDj7fNGOn1lHqzFIsNAzdVjRO1J/LewKYJ5BVtoKVzugKe9KVxxgXb GwBQ9VJdYdsLrvUt+T2X8kw3jj3mAkU4Dkp5ppB/PXcDm0xsCc4ua96f6gy5dauH4ElKtYoEvReOE ASeDeHsCZOOSu0f1tmmOz2/sWs8CwWIzDc4rt538w3pOCZsS0X0g9ZiDaQfZIp9jjaYmwLIx8z79m EzSSR25HBOMFDtWhr0svhH+DV9+VfATryjwMlzLPqfF0fH6xxvI/UEKRzWD4IjGytSN1jQif2Esn4 T0rQUMzQ==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wqZON-00000002buT-1zXM; Sun, 02 Aug 2026 16:50:27 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Simon McVittie <smcv@debian.org> To: 1141316-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: glib2.0 Debian: DAK Debian-Changes: glib2.0_2.88.3-2_source.changes Debian-Source: glib2.0 Debian-Version: 2.88.3-2 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1141316: fixed in glib2.0 2.88.3-2 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============8114730869231488506==" Message-Id: <E1wqZON-00000002buT-1zXM@fasolo.debian.org> Date: Sun, 02 Aug 2026 16:50:27 +0000 --===============8114730869231488506== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: glib2.0 Source-Version: 2.88.3-2 Done: Simon McVittie <smcv@debian.org> We believe that the bug you reported is fixed in the latest version of glib2.0, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1141316@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Simon McVittie <smcv@debian.org> (supplier of updated glib2.0 package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 02 Aug 2026 17:22:30 +0100 Source: glib2.0 Architecture: source Version: 2.88.3-2 Distribution: unstable Urgency: medium Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debi= an.org> Changed-By: Simon McVittie <smcv@debian.org> Closes: 1141316 Changes: glib2.0 (2.88.3-2) unstable; urgency=3Dmedium . * Backport patches from 2.89.0 to harden D-Bus introspection parsing - d/p/gdbusintrospection-Add-some-assertions-before-array-deref.patch, d/p/tests-Improve-D-Bus-introspection-test-paths.patch, d/p/gdbusintrospection-Fix-XML-parser-state-handling-for-node.patch, d/p/fuzzing-Add-a-fuzz-test-for-g_dbus_node_info_new_for_xml.patch: Avoid a possible integer underflow if parsing malformed D-Bus introspection XML sent by a malicious service (glib#3932 upstream, CVE-2026-58016, Closes: #1141316) * d/tests/1065022-futureproofing: Make the test pass more reliably, by ensuring that user-session-migration gets removed rather than making libglib2.0-0t64 be reinstalled Checksums-Sha1: bf8c4ac06a9768582eff50dab4f29167ef919fed 5091 glib2.0_2.88.3-2.dsc 2a94b1e955cb1d31060f7240e8a7638c4519508e 145756 glib2.0_2.88.3-2.debian.tar.= xz dff7f5b14b7cf6f15df098165b5d865ae224238c 15779444 glib2.0_2.88.3-2.git.tar.xz 40080502c431a3abaf23569f7a600bdc40973aa7 17556 glib2.0_2.88.3-2_source.build= info Checksums-Sha256: adc31bd6d4cb8684ca244c002465ea86d2a5be7f115e1ac6aeb48699f174bed6 5091 glib2.= 0_2.88.3-2.dsc 56cd728ff13c1d5b39ab9cf8001df330b1858054588e8490b34bff24a68b2010 145756 glib= 2.0_2.88.3-2.debian.tar.xz 9a25b1ee4914d57ee04f143239b23486c04df60165db9603b961583ef0ab9da4 15779444 gl= ib2.0_2.88.3-2.git.tar.xz 5b5b7a465fba88fbce71f291c509b11b956058e95fe97ef08a80548c1002e83c 17556 glib2= .0_2.88.3-2_source.buildinfo Files: c777505340d1585e560c7d32e80dc0ab 5091 libs optional glib2.0_2.88.3-2.dsc 491231247db8881178eff0807bf25431 145756 libs optional glib2.0_2.88.3-2.debia= n.tar.xz 7cece885a14f39308f253b27d6eee951 15779444 libs None glib2.0_2.88.3-2.git.tar= .xz 846a668d2b31cb74fd555617b7dffdea 17556 libs optional glib2.0_2.88.3-2_source= .buildinfo Git-Tag-Info: tag=3D054c63f5a9a53068744420901b2bd3ff3a3142d8 fp=3D7a073ad1ae6= 94fa25bff62e5235c099d3eb33076 Git-Tag-Tagger: Simon McVittie <smcv@debian.org> -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEN02M5NuW6cvUwJcqYG0ITkaDwHkFAmpvcAUACgkQYG0ITkaD wHnJ6RAAhBkvN7y95tekj8e1JQgcocvVo7NoafV0svkHeuZ78GPajJXNEcT325gH iYM8CkLSf/RPJJyYjQWHkdqPL7ToUSXoNBMRylkilk2ys5j9v75/ppIw/BOVHOOr 5ty8uJBJFR5G+8B5GjkCBOHjzwfvpmR7Og/uopFFDGICBvsSrUksYL+aEn2LuaS9 +1QG/eSiE0xHj397rv2MruVEZYkwvH4INlySEHWDMq4BdZ9TpOEOhsb5oi7qKswD lhmMHjhiPEAQix4BAfZx7IcZfjy85+yG7x9whix90nvwKeIbqXrIXgljnCpKiISe jp3rRXJmwaFgGRPUey5sW5J/TvPQ6B4aMWd532qXVREI87sUMYvWXNkm2ow09u4U evGrlaJjp57QC2BcONX0In7sN6esDTYOAMhH1rHlIhs0S+jLHiIpztUem9sV2hb+ Ucw7UONGGhcob+9JzeruQT15W3vBm4c8QhWhuSA3+ytEw1ERKZmWL7QBoNQWZFqm 3RKaJjMWWHMlIFp5q1n6Plrk0iiwClRfDLg4gTwz1GXcYrVRa36I2t67UcK4I5if x0IbSZg79ES5V0D5+BU+vSxOw1HACpC+WKfNc40xoun4GpfFLfiOYGf5sRGUezll 98iziz4YvWGwP6+Ty0VpWDztjwuNElscz0xPw2OUXVBhxrqpj04=3D =3DJvEb -----END PGP SIGNATURE----- --===============8114730869231488506== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCam91UwAKCRCb9qggYcy5 Ia0IAP9PLdePK2CxIVNg879Y9Za3O3Ct1zwo+pPQs8zEe10TxAD/ThP1qwb8PGsF Yc9GZpw2o3tWfT6i91zcIZxepON49wk= =SIEz -----END PGP SIGNATURE----- --===============8114730869231488506==-- ]