-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Thu, 11 Feb 2021 17:08:14 +0000
Source: glib2.0
Architecture: source
Version: 2.66.7-1
Distribution: unstable
Urgency: high
Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org>
Changed-By: Simon McVittie <smcv@debian.org>
Changes:
glib2.0 (2.66.7-1) unstable; urgency=high
.
* New upstream release
- Fix another regression caused by the GHSL-2021-045 fixes in 2.66.6
- Warn and fail on integer overflow in g_byte_array_new_take()
for arrays larger than G_MAXUINT (similar to GHSL-2021-045)
- Disallow using currently-undefined D-Bus connection or server flags,
to prevent forward-compatibility problems with new security-sensitive
flags that are likely to be introduced in GLib 2.68
* Drop previous patches for GHSL-2021-045 regressions, applied upstream
Checksums-Sha1:
cd3871087153da67499ba5a68cac755502d59f5c 3383 glib2.0_2.66.7-1.dsc
734a6f1e1edb2292d08e658bfe7f49b41c7eb0c9 4844892 glib2.0_2.66.7.orig.tar.xz
13012697439a9df1397875b868d9c1953a3a01cf 98144 glib2.0_2.66.7-1.debian.tar.xz
e1e2aebaf578a007936825fe4f81c90b52c5cf68 7843 glib2.0_2.66.7-1_source.buildinfo
Checksums-Sha256:
c6779d39ff91a33991e071bcd1f0d0cd216378ddc9a5cd1f2e317337bd703ebd 3383 glib2.0_2.66.7-1.dsc
09f158769f6f26b31074e15b1ac80ec39b13b53102dfae66cfe826fb2cc65502 4844892 glib2.0_2.66.7.orig.tar.xz
6c2831123d2edd2497f303d411fd5fde9dfef22c1d23c14bafaed44b36cdb463 98144 glib2.0_2.66.7-1.debian.tar.xz
142e8acb6c8224333f0cd09eeb156ef55c66b67ff814783d2327c77a0e00c6ae 7843 glib2.0_2.66.7-1_source.buildinfo
Files:
5268d1b946561d2d1a6da08dce8ecc5a 3383 libs optional glib2.0_2.66.7-1.dsc
20d515238d2d22f1ec2057828fb59d52 4844892 libs optional glib2.0_2.66.7.orig.tar.xz
7fe42ccc532d468a8c9c80f4e24344ac 98144 libs optional glib2.0_2.66.7-1.debian.tar.xz
19f6430bd12901f684e5fdf9ce96e915 7843 libs optional glib2.0_2.66.7-1_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=yYPb
-----END PGP SIGNATURE-----
