glib2.0_2.86.3-1_source.changes ACCEPTED into unstable

[Debian FTP Masters]

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Tue, 09 Dec 2025 13:31:14 +0000
Source: glib2.0
Architecture: source
Version: 2.86.3-1
Distribution: unstable
Urgency: medium
Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers at lists.alioth.debian.org>
Changed-By: Simon McVittie <smcv at debian.org>
Closes: 1121488
Changes:
 glib2.0 (2.86.3-1) unstable; urgency=medium
 .
   * New upstream security-fix release
     - Fix calculation of buffer sizes when escaping URI strings
       (CVE-2025-13601, glib#3827 upstream, Closes: #1121488)
     - Fix possible buffer underflow parsing GVariant strings/bytestrings
       (CVE-2025-14087, glib#3834 upstream)
     - Fix integer overflow in file attribute escaping
       (glib#3845 upstream)
     - Windows-specific changes not described in detail here
Checksums-Sha1:
 6c5f1de1cb4322de5a956c35d09595ce27343a97 4911 glib2.0_2.86.3-1.dsc
 ade0b6ba8926c1cc81e28c86ae2652f47ceff885 660708 glib2.0_2.86.3.orig-unicode-data.tar.xz
 123b02f7710316e8e2736b9842b5aab126155e59 5674820 glib2.0_2.86.3.orig.tar.xz
 dd39385b23fe0f208c6986f7c6958ce11056cbcb 141336 glib2.0_2.86.3-1.debian.tar.xz
 cd24e7eef10b8e068b11e0b9933d5d544af2dd8a 7389 glib2.0_2.86.3-1_source.buildinfo
Checksums-Sha256:
 220faab419941c9857badfc1b3507eb6b9620cdd9db50b0f33cd7b73650be2ac 4911 glib2.0_2.86.3-1.dsc
 c1742461e8c0e9673a3453a3127671169de9cb0138493e5c916f1b989530efcd 660708 glib2.0_2.86.3.orig-unicode-data.tar.xz
 b3211d8d34b9df5dca05787ef0ad5d7ca75dec998b970e1aab0001d229977c65 5674820 glib2.0_2.86.3.orig.tar.xz
 e40aa5391a2618996e4451e7091a2402fb06241959ee8cf00b6e63eba6a15cd2 141336 glib2.0_2.86.3-1.debian.tar.xz
 7ab905ec3a999d2124eccd70056799337ced4670d5f418ad1bb5d0baf0918424 7389 glib2.0_2.86.3-1_source.buildinfo
Files:
 a3508db218fa419d6483383943f5273f 4911 libs optional glib2.0_2.86.3-1.dsc
 2b38b2623d9b97ba703de7c94fd25ba2 660708 libs optional glib2.0_2.86.3.orig-unicode-data.tar.xz
 2383dcdbf3eeb35d9ab005532fb256ba 5674820 libs optional glib2.0_2.86.3.orig.tar.xz
 0095fd3043bf2f38a2f0d29a799bf348 141336 libs optional glib2.0_2.86.3-1.debian.tar.xz
 d03c281811ab2c4816911ae59337d58d 7389 libs optional glib2.0_2.86.3-1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=0PpL
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-gnome-maintainers/attachments/20251209/8dab2c57/attachment.sig>