[From nobody Fri Aug 21 16:17:05 2026 Received: (at 1141316-close) by bugs.debian.org; 21 Aug 2026 15:14:32 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-113.0 required=4.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FOURLA,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,RCVD_IN_DNSWL_MED, SPF_HELO_PASS,SPF_PASS,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 4; hammy, 150; neutral, 355; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from mitropoulos.debian.org ([2001:648:2ffc:deb:216:61ff:fe9d:958d]:51032) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wxQwy-009CG9-0B for 1141316-close@bugs.debian.org; Fri, 21 Aug 2026 15:14:32 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by mitropoulos.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1wxQww-00EyWv-07 for 1141316-close@bugs.debian.org; Fri, 21 Aug 2026 15:14:30 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=zH30/yz+yrnxOGe9Etu6JufEYqhQTvzRRP7nBb1d5ME=; b=SmhvSkbW9AhxadBq/lg96krrG8 AtomyQJcc1hAKlZKzgsKSI1VYk1VW3xUJBSM5N5dauS1IoOEEkdUU93BawFXTSC0/dWqHODlYP8dl nwF6DQrK1k+8XFly6xxzIymhTJhTVcuZikbUiQ7K8t3lpIirl53wNOuGTsw4gNOpH9XKyvBKGrgar bC/Q8tGEzbZ47W0gz5wfwj/Gd9PNeINPkrnz4J9zfuF/lErLSiUn64alPcMEaHzDYcQdstK4rlPlq onvzn19Gb8MdobTtrgU09TTkhawB7G0MHdRX+jAjrRRlwF7ECtwgnaQSTjvSv1jH0WrGGB+3wEbNF sVF9Yb0A==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1wxQwu-0000000FFnC-3ZND; Fri, 21 Aug 2026 15:14:28 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: =?utf-8?q?Jeremy_B=C3=ADcha?= <jbicha@ubuntu.com> To: 1141316-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: glib2.0 Debian: DAK Debian-Changes: glib2.0_2.89.3-5_source.changes Debian-Source: glib2.0 Debian-Version: 2.89.3-5 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1141316: fixed in glib2.0 2.89.3-5 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============2843898304307456296==" Message-Id: <E1wxQwu-0000000FFnC-3ZND@fasolo.debian.org> Date: Fri, 21 Aug 2026 15:14:28 +0000 X-CrossAssassin-Score: 3 --===============2843898304307456296== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: glib2.0 Source-Version: 2.89.3-5 Done: Jeremy B=C3=ADcha <jbicha@ubuntu.com> We believe that the bug you reported is fixed in the latest version of glib2.0, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1141316@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Jeremy B=C3=ADcha <jbicha@ubuntu.com> (supplier of updated glib2.0 package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 21 Aug 2026 16:37:11 +0200 Source: glib2.0 Built-For-Profiles: derivative.ubuntu noudeb Architecture: source Version: 2.89.3-5 Distribution: unstable Urgency: medium Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debi= an.org> Changed-By: Jeremy B=C3=ADcha <jbicha@ubuntu.com> Closes: 1141316 1142717 1142835 Changes: glib2.0 (2.89.3-5) unstable; urgency=3Dmedium . * Release to unstable . glib2.0 (2.89.3-4) experimental; urgency=3Dmedium . * Merge from unstable - d/p/xdgmime-Check-if-caches-are-set-before-dumping-them.patch, d/p/Fix-CVE-2026-16118-heap-buffer-overflow-in-xdgmimemagic.c.patch: Add patches from upstream (to be released in 2.89.4) to address an out-of-bounds write if parsing a crafted XDG MIME magic file, and fix a related test failure on minimal systems (glib#3992 upstream, CVE-2026-16118, Closes: #1142717) * d/p/workarounds: Mark memory-monitor-psi tests as flaky (Mitigates: #1143197, #1143241) . glib2.0 (2.89.3-3) experimental; urgency=3Dmedium . [ Simon McVittie ] * Merge packaging from unstable - d/tests/1065022-futureproofing: Make the test pass more reliably, by ensuring that user-session-migration gets removed rather than making libglib2.0-0t64 be reinstalled * Drop patches added by 2.88.3-2, already part of 2.89.x . glib2.0 (2.89.3-2) experimental; urgency=3Dmedium . * d/p/gio-tests-services-Fix-installed-service-file-containing-.patch: Add patch from upstream to fix autopkgtest regression * d/changelog: Mention CVE-2026-15588, CVE-2026-58016 in the appropriate previous changelog entry . glib2.0 (2.89.3-1) experimental; urgency=3Dmedium . * New upstream release * debian/libglib2.0-0t64.symbols: Add new symbols . glib2.0 (2.89.2-1) experimental; urgency=3Dmedium . * New upstream release - Fixes possible integer underflow when parsing D-Bus introspection XML (CVE-2026-58016, Closes: #1141316) - Fixes resource exhaustion if a malicious client can contact a GDBusSer= ver (CVE-2026-15588, Closes: #1142835) * d/p: Refresh patches * d/libglib2.0-0t64.symbols: Add new symbol Checksums-Sha1: 92f5c3d181b04bdf2bd126fd09f1c7d47d33d99b 4809 glib2.0_2.89.3-5.dsc af3872a6ab841fbd4618d11dcda02317a2fea995 145180 glib2.0_2.89.3-5.debian.tar.= xz c14291048b10042d3ac029149f7e2baff3e6fac3 11637 glib2.0_2.89.3-5_source.build= info Checksums-Sha256: d051d1b8f572ce65c8959d97d6433c2c685c6374fbf52a71d11fbadfe210e701 4809 glib2.= 0_2.89.3-5.dsc 0fe2c3c9bf1a90376edb6ec3e4e602190b9df72c987cf3f3961e0a132d4aa5fb 145180 glib= 2.0_2.89.3-5.debian.tar.xz f57785267e300de810197e17b7dea6a05c60ee2aa8aa39ef041c0ea105c8208b 11637 glib2= .0_2.89.3-5_source.buildinfo Files: 51909061d0431c875d197b9aa150a732 4809 libs optional glib2.0_2.89.3-5.dsc f7eb67b8b062f653390d1b9ca48502f8 145180 libs optional glib2.0_2.89.3-5.debia= n.tar.xz 1677d300f3671162f2584bca30d78f2f 11637 libs optional glib2.0_2.89.3-5_source= .buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEETQvhLw5HdtiqzpaW5mx3Wuv+bH0FAmqIYuYACgkQ5mx3Wuv+ bH1LlBAA0sAu2oTrdbp5reAEPTYrtgzuEM3RZvfZZ9PFjyXnlrBOalJ9O7Oz3Al3 47bIKAyAPsqt18QXthdpdSsBmQ4awj5Lo4rlS4P2tFHkZ3tnTQKTcTlHGGdm26d2 DUw6CV9hmcT/ipoVRey/yTUdYO/1u0lrqpRJ4B5qJu6HBJ3lnqp2Uj6f7FINEd5R YMbKvhmierGBkSg84fmBHZluK8iSMZwdU7p/u9DZ2Wvp2CG5kyb2q2aWL/pwXrL1 XjKLQsFf9U7rOdtcT0ZusL8sfey6+u+v91wIyXUZ2xXsUru4RKbgRhXFfJQbGy7p sxHKGNmRlggpj5RrWJvoREqPkkj79RzwQbkzr6CaiDIjaLriaAfXVyCkc7+N5JdG HlVNUH3atAu5/Byi3tbai0ugZPiE/mzFe+1iM04vpvtY6e7tXGx12dKDna9nSeGI G7wHhHZ1MyZRgNr54oemzxdXGb9Ez2bLdbR+1XPiQ/VK6ITSSMxWjCWPjwaFBUJT SmPhiw9lCzetSFUfiDT0npX64ekOBBuNuqO3cZzvjc/ZJtW2VbNX1/EgNGfeSKZt NhsmDpSgcYN1/tzAG5ln2ID12U9j2/pKx67Xs7IBrypWhotsGiKOQ0K3/6MAxuVS 35tdNnm64rNfW4+VEWbUnxRmLhGtYdfYgSzN0lRj3TT59S++hYM=3D =3DHr3H -----END PGP SIGNATURE----- --===============2843898304307456296== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaohrVAAKCRCb9qggYcy5 IXH+AP0R8mwTIEyBKmcrkggETxFaZpjIF+KUDD87t3gw5J++1QD/QyE7CgRILhJy 69V7K18e3XWevkcrANrOpfcaj3rMJgg= =L7ZB -----END PGP SIGNATURE----- --===============2843898304307456296==-- ]