-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 11 Mar 2021 10:23:38 +0000 Source: glib2.0 Architecture: source Version: 2.66.7-2 Distribution: unstable Urgency: medium Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org> Changed-By: Simon McVittie <smcv@debian.org> Closes: 984969 Changes: glib2.0 (2.66.7-2) unstable; urgency=medium . * d/changelog: Add bug numbers for integer overflows in previous versions * Add patches to fix a symlink attack affecting file-roller. When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION to replace a path that is a dangling symlink, previously it would have also created the target of the symlink as an empty file, which could conceivably be security-sensitive if the symlink is attacker-controlled. (Closes: #984969) Checksums-Sha1: 04da51880c9c4f28b10e520e71213d7f41b32c89 3386 glib2.0_2.66.7-2.dsc a81a7084b58b8df0e3a104abff245e4504fc1568 101748 glib2.0_2.66.7-2.debian.tar.xz ebce00137a2b0a601ec75b18aaf31769117ad406 7855 glib2.0_2.66.7-2_source.buildinfo Checksums-Sha256: 549f7f21ece26b3074cbb4560f37719d89c5356464a0f65cc18207b6de096793 3386 glib2.0_2.66.7-2.dsc c276bc7e31fbe0d3285faac4a4792dab4ab90ef953ba416adc33601c71355c53 101748 glib2.0_2.66.7-2.debian.tar.xz 15106f40dd930f0d2976db1ae1f3966827be0d599382e4187a04994ab009bb8f 7855 glib2.0_2.66.7-2_source.buildinfo Files: eef527563a08e3fc0e53e397ffb38ee0 3386 libs optional glib2.0_2.66.7-2.dsc af220345a6250f46a481415542a4544c 101748 libs optional glib2.0_2.66.7-2.debian.tar.xz 5033d3c10869491e455f7bcb578fb7b3 7855 libs optional glib2.0_2.66.7-2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEENuxaZEik9e95vv6Y4FrhR4+BTE8FAmBKDxMACgkQ4FrhR4+B TE8yeBAAox4c13Pll09dQUGrdH4hMYLq758aYR6TNiLQE6tYd52iYNwwi0jmGgBs Eq9McQ7U98zzPwq63+Mb3qdjwAiWbKYLIfr3/NuB6KTaimbmVMtZMc24n5xWMgFz LI8GgrLvgWvBx1/8pVILCG/YV3m+zuUEEeLKxTvlWfgs3Ttn8rOI8L/jfSCLscQM tTGH5NzGXlnjSCoaw67bqfTB1gCVRQVNMQFIFyHzW39ywjy4x1h7mLaNaw2/gXw1 ydzPUSFGaa5ewULVCW84OvfN3G06c0TDwXR1qTxQLayVUjZfUv1kc7MczE2mNRLM zK8v9qp62tnRPswq1477V5vZYXyWbKtRiy72QttKF+g+GeDjxGBeb8Jw3xvhid0X zOms5KBcBRtpx0vTwiatSepL9E9zZRfnOahneuLfrTJp+VwCuA2IBS6O85M1ABvn CHilKE9YevWyzaOhnKozg93189U5MVy8uaIdNlWWM6IjD8x2q2oSGcBc9dJoWKIh V0FMvq4Ms2t5/Iwv3xHhb39sOofGyAEIOjGqQLGss0ZJPAe6WSzE5lx1ujUbLnM1 ZEHGsUndl8adBjgSGudhSWVs/HELWWDu6OlKObmQEW+Jvvcal1H7Y3PeaQE31fok x0PNi4QqK4LJ1+fkJ+7NtXdYYQGadT/Z/PcnBdaKwqi+0pr+j9k= =txyC -----END PGP SIGNATURE-----
