-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 13 Feb 2026 12:35:33 +0100 Source: glib2.0 Binary: libglib2.0-data libglib2.0-doc Architecture: all Version: 2.74.6-2+deb12u9 Distribution: bookworm Urgency: medium Maintainer: all Build Daemon (x86-grnet-02) Changed-By: Andreas Henriksson Description: libglib2.0-data - Common files for GLib library libglib2.0-doc - Documentation files for the GLib library Closes: 1119919 1125752 1126549 1126550 1126551 Changes: glib2.0 (2.74.6-2+deb12u9) bookworm; urgency=medium . * Non-maintainer upload by the LTS Security Team. * Add patch to fix timezone handling with Debian & Ubuntu's symlinks (Closes: #1119919) (LP: #2130378) * CVE-2026-0988: Missing input validation in g_buffered_input_stream_peek (Closes: #1125752) * CVE-2026-1484: Integer overflow in base64 encoding can cause memory corruption. (Closes: #1126551) * CVE-2026-1485: Buffer underflow vulnerability in content type parsing caused by (signed) integer wrap for large inputs. (Closes: #1126550) * CVE-2026-1489: Integer overflow in unicode conversion can lead to memory corruption. (Closes: #1126549) Checksums-Sha1: 42b662ce75dcfae67c5a928b192941f187413821 8160 glib2.0_2.74.6-2+deb12u9_all-buildd.buildinfo 427725720f56431958e1a134ecfacb5809701060 1211164 libglib2.0-data_2.74.6-2+deb12u9_all.deb 9cce93aafab0ed5f4330011417009199f6b24f5f 1520712 libglib2.0-doc_2.74.6-2+deb12u9_all.deb Checksums-Sha256: e3ecdf0c81bd21a7436a94fc67cb491ee3f3c5d7caa950a203dc777c98dfeec6 8160 glib2.0_2.74.6-2+deb12u9_all-buildd.buildinfo d98434e097009dedd2f2382c48b7debab5b14261966c0e0506a991b2496bea5f 1211164 libglib2.0-data_2.74.6-2+deb12u9_all.deb 87a273d34af94a439764cf63fc81188f2527ae3280c29df58a907b33318eb8bc 1520712 libglib2.0-doc_2.74.6-2+deb12u9_all.deb Files: a77627b3490c62a477ea6b1629f8da58 8160 libs optional glib2.0_2.74.6-2+deb12u9_all-buildd.buildinfo 5b62e67ce7c9bb0841fe5d683c90728e 1211164 libs optional libglib2.0-data_2.74.6-2+deb12u9_all.deb 9e26a7a4b7100ffaf151388ad2a0ca1e 1520712 doc optional libglib2.0-doc_2.74.6-2+deb12u9_all.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE81O8NL+3kjBAqEvLmgPNRvTf/zcFAmnWlUAACgkQmgPNRvTf /zcX5Q//UsAjUbNaRvuWLFeXzpSRbhn9TfKW+5mBQPaZbg5WYqtx78sSecavreVl OCV5X79vGO3oPM6knbMYRSVailCb3ILNomwKYG8QrftSfGIj3NgWIE/sv5alqW3a 0phw4pIabHVZaTy/dHsvmxg/oIQ7rOMrKpN6tGD4VxWmTtovRbgdLNPW0MoRs/Dd CtrASLxfh+Jl3RuNcq8YPEZh5uIApC1cQbzeUJR8ZstacUkK8Zw3rSfy+1nT8YYn lO/fWJ4Xzre26Rs1Cw00x0uymLZeTaQJh7gJOyNO9nvQUeUcvrHNw7+6H9KuDD56 mVlAiHjD8IxI2TsFRXAn5/MABGCAQKcjEq2S7BQp1VWMtezFuFPGl/jLp/k2jvRb Z/Zw1Qrzq73cpzFA+W26JkkBOVPHX67X1s++yAt4Ml23lsLgQaUaUM2L/Xyiz47S onJYqkdrUFTuJWGoKEeaAnLrXxylFzQDSRbRkOCRxMVi4ZLrKZQ98ex0d0fwRO3e uEc9KBwveHB1/2pXwodyC3+C9RkDFaMRlyl2ca5acgTYGxYp5eyBKLr9i21FlccN LdNd+xs6dZ2XYVQUfhesxNPnnmdJSAOeB2/Apr17mSn206sirj2lVC7LXZUDrt+0 7jMYSq57mxBtIJiI8DZjIrjY7inNZ3cosUAKwm4gyoUhXMRZb2Q= =tEWZ -----END PGP SIGNATURE-----