[From nobody Wed Aug 12 21:51:04 2026 Received: (at 1142717-close) by bugs.debian.org; 12 Aug 2026 20:49:09 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-113.0 required=4.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,RCVD_IN_DNSWL_MED, SPF_HELO_PASS,SPF_PASS,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 93; hammy, 150; neutral, 173; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mitropoulos.debian.org ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:36790) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wuFsr-00F9I2-0O for 1142717-close@bugs.debian.org; Wed, 12 Aug 2026 20:49:09 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mitropoulos.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wuFso-00632P-0R for 1142717-close@bugs.debian.org; Wed, 12 Aug 2026 20:49:07 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=SFOTx/y1B5HEyvHZORjptafa69lOXLSSgX8dL9X3DzY=; b=g8Om3WR3G0P/aHwbwUV7Gng7JO XOlxn6f+vaJmvP2o6UlAeBe/ErtaLY/JnyuUKEnGuQyPcs7U71WJpiq159RlKZzPvS3vZTvMbXybH oRX1qAiwVJXZ80QDqy0LM8I8UQFXVwP8CXmT6vuy5VpZOqOJyeOeQEziDeVrt68/+rmbEcLh59toJ ZsNqgjUKByfPuiyKz8NGcLyRnjuoqVMYmQQJllEqvR5QGFsK+dZU8exTbftBf8kDFAkPpqOR08I09 lbQKnpNHwD5EbEXiSvqfYx4oSYxMLU7GhhwJDvjQuuKgzXNtwNkmgEUmfqbo0hq1jXjJQYjxAVgBS kOoK7r3g==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wuFsm-0000000CI3Z-3isd; Wed, 12 Aug 2026 20:49:04 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: Simon McVittie <smcv@debian.org> To: 1142717-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: glib2.0 Debian: DAK Debian-Changes: glib2.0_2.89.3-4_source.changes Debian-Source: glib2.0 Debian-Version: 2.89.3-4 Debian-Architecture: source Debian-Suite: experimental Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1142717: fixed in glib2.0 2.89.3-4 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============1827602880425734861==" Message-Id: <E1wuFsm-0000000CI3Z-3isd@fasolo.debian.org> Date: Wed, 12 Aug 2026 20:49:04 +0000 --===============1827602880425734861== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: glib2.0 Source-Version: 2.89.3-4 Done: Simon McVittie <smcv@debian.org> We believe that the bug you reported is fixed in the latest version of glib2.0, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1142717@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Simon McVittie <smcv@debian.org> (supplier of updated glib2.0 package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 12 Aug 2026 21:28:14 +0100 Source: glib2.0 Architecture: source Version: 2.89.3-4 Distribution: experimental Urgency: medium Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debi= an.org> Changed-By: Simon McVittie <smcv@debian.org> Closes: 1142717 Changes: glib2.0 (2.89.3-4) experimental; urgency=3Dmedium . * Merge from unstable - d/p/xdgmime-Check-if-caches-are-set-before-dumping-them.patch, d/p/Fix-CVE-2026-16118-heap-buffer-overflow-in-xdgmimemagic.c.patch: Add patches from upstream (to be released in 2.89.4) to address an out-of-bounds write if parsing a crafted XDG MIME magic file, and fix a related test failure on minimal systems (glib#3992 upstream, CVE-2026-16118, Closes: #1142717) * d/p/workarounds: Mark memory-monitor-psi tests as flaky (Mitigates: #1143197, #1143241) Checksums-Sha1: be33c1732a99c9dbfde2add3f590c0be5f7299d2 5075 glib2.0_2.89.3-4.dsc fe3033fd79d181078a9fc12726d29d0b351e65b9 145252 glib2.0_2.89.3-4.debian.tar.= xz 40ac9aa632a0202d5fe31a9ad3f15e901904ef50 17867576 glib2.0_2.89.3-4.git.tar.xz 03cf9e2f8f3d5a48a8a186becb6e57b3bb6ff40e 17556 glib2.0_2.89.3-4_source.build= info Checksums-Sha256: e547e77a3ded67585370610efb49326684c36f84c2baf1715c8d36282610a7ed 5075 glib2.= 0_2.89.3-4.dsc 01256d2c7d7d1e3f11beef4344d3d42e996c759e9a3ce38ad029f21aad61974b 145252 glib= 2.0_2.89.3-4.debian.tar.xz fd6b3647be124835deec286b643a7c593ba2a697139e6c95241e287bc2ba9818 17867576 gl= ib2.0_2.89.3-4.git.tar.xz ac998f5eb04f41f2a4c69ac2c797938c43ec4af25b59c0a62d7d6b74003e1c8a 17556 glib2= .0_2.89.3-4_source.buildinfo Files: 70d0f5f91ca1488c214d6df2cbe5abf3 5075 libs optional glib2.0_2.89.3-4.dsc a8c672480b890d175ecd9b0da4404584 145252 libs optional glib2.0_2.89.3-4.debia= n.tar.xz 723016c4074a6aa6651a49acfe5292cc 17867576 libs None glib2.0_2.89.3-4.git.tar= .xz c7e56fda286378178c61655d02606679 17556 libs optional glib2.0_2.89.3-4_source= .buildinfo Git-Tag-Info: tag=3Daded4d4c0b76d84d188d71c9622bb781642aed63 fp=3D7a073ad1ae6= 94fa25bff62e5235c099d3eb33076 Git-Tag-Tagger: Simon McVittie <smcv@debian.org> -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEN02M5NuW6cvUwJcqYG0ITkaDwHkFAmp82BsACgkQYG0ITkaD wHmB9g/8DEC+PtGNpNOpKt5jpJqjJnPKUyKVavZnZ2fl2KwGxtSC9GZR2dMIRlwJ cl4zXzXtqrx1fOkuK0sZg2EMKK1+D+ytfIAaP4LOb3NW7rJ7zq6b6K6WQ3Y/JJVM ySupgAbQjgd8Fk449Zeon6lvfzymCbdMHTHpDS75ZluE7Jkbn7/yfUtsavcXbdnL rMPKmM6Z2fL6G2Z4T0aSxCiDGKO9KL1ndPYad6MqGoL9bIni9OBXcqdkOhhtk6ji MixEoYZ1pY6krfggzPpImbjCH7oASTCmrYegfQW4RLYxwFYvrdlThQyqRH77XXZt BzcTReJpSHbXtXURt/OayusEZznIpMDJsZQQyX+kwJhGn0g4GrN2jIs/Sp6emK7y WGla00PBgikdHOoGWfGvUwJkhs43zfkGJGPGM4qOJdBZl+oT5WMsD7s/HF2LWnMb VoMiDnNLEB0hwmMPbKrXM0090F7K4VCDldplqrULUdQ0QHYpfupFe+ORfXANwFtc KgJ15gnOcMf6OmR2G6Pyz73WDz0t61defqyHAMIxx1m4OLYz+L1VRSvlFvlQola0 2qNGUhiHwRR1F2oRc8JOltJTzahBoKHeKDYj6MLMbmEH6q+ERANPdBe4/1dggiEV 60wLGuh9sVSPYjU0pVscZNKYbrC7Y7O4HQ82aLxmRzQLmemoxe0=3D =3D7oCK -----END PGP SIGNATURE----- --===============1827602880425734861== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCanzcQAAKCRCb9qggYcy5 IbxSAP0eLkflMj8rlYKPUCnjDt4GRr1qZYzpcj/BffRyxFXNLgEA30hB7XYdehtW 3IgKdKhxw6WpfmPmCjxzW2kA9F4/vg4= =mS1H -----END PGP SIGNATURE----- --===============1827602880425734861==-- ]