glib2.0_2.84.1-3_source.changes ACCEPTED into unstable

[Debian FTP Masters]

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 09 May 2025 15:01:35 +0100
Source: glib2.0
Architecture: source
Version: 2.84.1-3
Distribution: unstable
Urgency: medium
Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers at lists.alioth.debian.org>
Changed-By: Simon McVittie <smcv at debian.org>
Closes: 1104930
Changes:
 glib2.0 (2.84.1-3) unstable; urgency=medium
 .
   [ Jeremy Bícha ]
   * d/p/gfileutils-Preserve-mode-during-atomic-updates.patch:
     Add a note that this fix for LP#2072586 was reverted in the upstream
     2.84.x branch as a behaviour change. It was kept in 2.85.x,
     and seems reasonable to keep for trixie.
 .
   [ Simon McVittie ]
   * d/p/gfileutils-Preserve-mode-during-atomic-updates.patch:
     Add a cross-reference to LP#2072586
   * d/p/gstring-carefully-handle-gssize-parameters.patch,
     d/p/gstring-Make-len_unsigned-unsigned.patch:
     Add patches from upstream to fix a buffer underflow with very large
     GString instances (Closes: #1104930, CVE-2025-4373)
   * d/p/gdate-Call-tzset-before-localtime_r.patch:
     Add patch from upstream to ensure that tzset() is called before
     localtime_r(); otherwise the behaviour of localtime_r() is unspecified.
   * These patches bring us up to date with upstream glib-2-84 branch commit
     2.84.1-15-gb3de15acf9, excluding changes that are not relevant to
     Debian architectures (macOS CI and Windows) and the revert of the fix
     for LP#2072586 (discussed above).
Checksums-Sha1:
 8a433f81ac0774934304c91ee54b60be5a1866fa 4925 glib2.0_2.84.1-3.dsc
 5f1d8d533a3c3f0eb20849b964aaadfd137efb8f 140100 glib2.0_2.84.1-3.debian.tar.xz
 30647ad6f221bf940638573a36b98bd2b1bdceb2 7406 glib2.0_2.84.1-3_source.buildinfo
Checksums-Sha256:
 8fbbbddd9ec3d309997fe4d792b78a39a2ac62b565a03a3706c49e5d02d9e6cd 4925 glib2.0_2.84.1-3.dsc
 832a246906ed73bd2a8e92b5b9a8625bf1a435062cc327d336fcf1ccce27603c 140100 glib2.0_2.84.1-3.debian.tar.xz
 ae65d9a8951b1dc36e04e23aa17ce862965f0e2cd1bddecf3f849c94733c18c1 7406 glib2.0_2.84.1-3_source.buildinfo
Files:
 564133e0c881d8d0ba35bd76b790b71f 4925 libs optional glib2.0_2.84.1-3.dsc
 0f56e195be84982c6af1efc27b2aa599 140100 libs optional glib2.0_2.84.1-3.debian.tar.xz
 ef419c007764e03c54e17ead4300dc80 7406 libs optional glib2.0_2.84.1-3_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=MSUy
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-gnome-maintainers/attachments/20250520/0e1dcfbc/attachment.sig>