[From nobody Wed Aug 12 10:39:05 2026 Received: (at 1142717-close) by bugs.debian.org; 12 Aug 2026 09:36:04 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.1 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA, FVGT_m_MULTI_ODD,HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE, SPF_HELO_PASS,SPF_PASS,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 100; hammy, 150; neutral, 148; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mailly.debian.org ([2001:41b8:202:deb:6564:a62:52c3:4b72]:41868) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wu5NU-00Diaq-0D for 1142717-close@bugs.debian.org; Wed, 12 Aug 2026 09:36:04 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mailly.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wu5NS-005gw0-2F for 1142717-close@bugs.debian.org; Wed, 12 Aug 2026 09:36:02 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=kX1sgInOuVY7Ip82jenkM2ccUmon6gvvh2X8pTgXK8o=; b=Ka4nJCBramblavbEL2rktRj4XZ DLQcsd3Q6hvn6WQiHKxEMn6iYZRniDkzOL/su+rqS9s90AnKemVf2LcAPAYvw0hzALB4ZYDvvF5kQ eb4UXrrmZVnB1Sa0umV8OnMI1q40jj+1sII//e8f+1Tpw7YnmV/ja/hF5vcsJAcUhn5EnafKfILFK zq+KOBxk5HIiAmwmsU1fhs3u94eFx81IVBz955U5U9uJ/5v3tX0umlEwYaxG12l57Cn5pu/m3uSiH EN9ECM4sZHJowb3u1+SpyP+Q0Qwy/TXVsX/FcarYhW6sDtnJPYh/aru2gc6ORKA60hprhdnZibVMy KcLkoJPg==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wu5NR-0000000AB8l-3Pjn; Wed, 12 Aug 2026 09:36:01 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Simon McVittie <smcv@debian.org> To: 1142717-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: glib2.0 Debian: DAK Debian-Changes: glib2.0_2.88.3-3_source.changes Debian-Source: glib2.0 Debian-Version: 2.88.3-3 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1142717: fixed in glib2.0 2.88.3-3 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============1744282556570311029==" Message-Id: <E1wu5NR-0000000AB8l-3Pjn@fasolo.debian.org> Date: Wed, 12 Aug 2026 09:36:01 +0000 --===============1744282556570311029== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: glib2.0 Source-Version: 2.88.3-3 Done: Simon McVittie <smcv@debian.org> We believe that the bug you reported is fixed in the latest version of glib2.0, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1142717@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Simon McVittie <smcv@debian.org> (supplier of updated glib2.0 package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 12 Aug 2026 10:10:25 +0100 Source: glib2.0 Architecture: source Version: 2.88.3-3 Distribution: unstable Urgency: medium Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debi= an.org> Changed-By: Simon McVittie <smcv@debian.org> Closes: 1142717 Changes: glib2.0 (2.88.3-3) unstable; urgency=3Dmedium . * d/p/xdgmime-Check-if-caches-are-set-before-dumping-them.patch, d/p/Fix-CVE-2026-16118-heap-buffer-overflow-in-xdgmimemagic.c.patch: Add patches from upstream (to be released in 2.89.4) to address an out-of-bounds write if parsing a crafted XDG MIME magic file, and fix a related test failure on minimal systems (glib#3992 upstream, CVE-2026-16118, Closes: #1142717) Checksums-Sha1: 060a88b44df733ee92680f9c106d1f9a599f8b8d 5091 glib2.0_2.88.3-3.dsc 4dfd103c4aca09d825a83b736e8d57fc7cc5a080 146728 glib2.0_2.88.3-3.debian.tar.= xz cc1b678ad5c92135315fc3153bdb190bda22e887 15783988 glib2.0_2.88.3-3.git.tar.xz 661a1e16f75301d5ceec1602a4b1255016e5b862 17556 glib2.0_2.88.3-3_source.build= info Checksums-Sha256: 36848fbcc2718313c03b34150cec8ab921ffa3790d14d16bf5906b364c5a3798 5091 glib2.= 0_2.88.3-3.dsc 8109e35ac5fd6cfc72c913357b667a584bcdb8f20efa119337db407139f34bb7 146728 glib= 2.0_2.88.3-3.debian.tar.xz ada1e7b3c50596f80355a191c30f866762cb5d9417f487e4576b6bb17387f05c 15783988 gl= ib2.0_2.88.3-3.git.tar.xz e471ebe2691e20e582f7b25c0a06fe4e396f132e5086636d78811976e909029d 17556 glib2= .0_2.88.3-3_source.buildinfo Files: 09ef239c61ccff5d7b78e83c12328984 5091 libs optional glib2.0_2.88.3-3.dsc 16db7c7cb1714a7e9be8c3d37b826630 146728 libs optional glib2.0_2.88.3-3.debia= n.tar.xz 1592d1cb6e8da540059699d8e5192eda 15783988 libs None glib2.0_2.88.3-3.git.tar= .xz 8e9215742f85d5a2e0655d04ccc52813 17556 libs optional glib2.0_2.88.3-3_source= .buildinfo Git-Tag-Info: tag=3D46316932734b6f0fc0346a69bc8908a9ca4e7d30 fp=3D7a073ad1ae6= 94fa25bff62e5235c099d3eb33076 Git-Tag-Tagger: Simon McVittie <smcv@debian.org> -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEN02M5NuW6cvUwJcqYG0ITkaDwHkFAmp8ORoACgkQYG0ITkaD wHkr0g/+L0nOAYoTXNJgDrgSHMC5cN4jCSIyn8hFB3TxwwWy2AFzzwZpvBwSkqbD vk3bMBfz/DJszyp0GCO+dtX1RVTNIc5FO4kpLsBdVVBo41kWG56ID2fJSJGra+tt 2USkORUTFUmGCzJWiV2/9JowGWySgdaMXBjSBYwTvl+QN9xkzV+eXzTO17MMCaH4 XOVEfhCMHMiezFY23vIjl/9J+IT98INLJh4YtYNJsvub5tqoYa55UcCgkLYejkFP MgASBeA8yDs9YaztxLtibXqhTvmEIaFil1D1L4W2j786wL0VUHN6Kieb4hKohLV2 HvBga+zEfRJoXypIpdxTkNZRGRqSRaE9zwekjxfbLU4QQBFNV3qOUECpSgwJCv4w JgWsUXhD1EEGbSJGYDQi/Wdnx1hcvnmESScjnBCDxPjz6WzW3rzzOAAa7yidCVNS WX5t5MfPgNxdX3PCvBO14nePJ7jjCYD4YXvwif8x1oO6otbzaHAp29fXQ5fW2EZn QrbMZni76rrGjtX+IUAR9zswYvKz8ygqF1CMMVcDqjoNJoQkgKFHAT+clzXjymPy vJvPged4H+b6pzoTIM7mNWX08fMpMyRUEcRWLGPXW81M4LVnFF3xkQUPhPJlazl4 XcbcTCD7GWzUdhDx2FC2wsfkReBGAHTelPSXKN5NmhrlRuNuZDU=3D =3DjGDe -----END PGP SIGNATURE----- --===============1744282556570311029== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCanw+gQAKCRCb9qggYcy5 IZWSAP4swumJ8nxXpNEfWVjEoYHRzg3zq5YK0uNHcJDd5ieGcAD/UdlO6g0/9eMV CR80+QvB0hYhIOBLczftQGJybmQRZAc= =K7OP -----END PGP SIGNATURE----- --===============1744282556570311029==-- ]