-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Wed, 12 Aug 2026 10:10:25 +0100 Source: glib2.0 Architecture: source Version: 2.88.3-3 Distribution: unstable Urgency: medium Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org> Changed-By: Simon McVittie <smcv@debian.org> Closes: 1142717 Changes: glib2.0 (2.88.3-3) unstable; urgency=medium . * d/p/xdgmime-Check-if-caches-are-set-before-dumping-them.patch, d/p/Fix-CVE-2026-16118-heap-buffer-overflow-in-xdgmimemagic.c.patch: Add patches from upstream (to be released in 2.89.4) to address an out-of-bounds write if parsing a crafted XDG MIME magic file, and fix a related test failure on minimal systems (glib#3992 upstream, CVE-2026-16118, Closes: #1142717) Checksums-Sha1: 060a88b44df733ee92680f9c106d1f9a599f8b8d 5091 glib2.0_2.88.3-3.dsc 4dfd103c4aca09d825a83b736e8d57fc7cc5a080 146728 glib2.0_2.88.3-3.debian.tar.xz cc1b678ad5c92135315fc3153bdb190bda22e887 15783988 glib2.0_2.88.3-3.git.tar.xz 661a1e16f75301d5ceec1602a4b1255016e5b862 17556 glib2.0_2.88.3-3_source.buildinfo Checksums-Sha256: 36848fbcc2718313c03b34150cec8ab921ffa3790d14d16bf5906b364c5a3798 5091 glib2.0_2.88.3-3.dsc 8109e35ac5fd6cfc72c913357b667a584bcdb8f20efa119337db407139f34bb7 146728 glib2.0_2.88.3-3.debian.tar.xz ada1e7b3c50596f80355a191c30f866762cb5d9417f487e4576b6bb17387f05c 15783988 glib2.0_2.88.3-3.git.tar.xz e471ebe2691e20e582f7b25c0a06fe4e396f132e5086636d78811976e909029d 17556 glib2.0_2.88.3-3_source.buildinfo Files: 09ef239c61ccff5d7b78e83c12328984 5091 libs optional glib2.0_2.88.3-3.dsc 16db7c7cb1714a7e9be8c3d37b826630 146728 libs optional glib2.0_2.88.3-3.debian.tar.xz 1592d1cb6e8da540059699d8e5192eda 15783988 libs None glib2.0_2.88.3-3.git.tar.xz 8e9215742f85d5a2e0655d04ccc52813 17556 libs optional glib2.0_2.88.3-3_source.buildinfo Git-Tag-Info: tag=46316932734b6f0fc0346a69bc8908a9ca4e7d30 fp=7a073ad1ae694fa25bff62e5235c099d3eb33076 Git-Tag-Tagger: Simon McVittie <smcv@debian.org> -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEN02M5NuW6cvUwJcqYG0ITkaDwHkFAmp8ORoACgkQYG0ITkaD wHkr0g/+L0nOAYoTXNJgDrgSHMC5cN4jCSIyn8hFB3TxwwWy2AFzzwZpvBwSkqbD vk3bMBfz/DJszyp0GCO+dtX1RVTNIc5FO4kpLsBdVVBo41kWG56ID2fJSJGra+tt 2USkORUTFUmGCzJWiV2/9JowGWySgdaMXBjSBYwTvl+QN9xkzV+eXzTO17MMCaH4 XOVEfhCMHMiezFY23vIjl/9J+IT98INLJh4YtYNJsvub5tqoYa55UcCgkLYejkFP MgASBeA8yDs9YaztxLtibXqhTvmEIaFil1D1L4W2j786wL0VUHN6Kieb4hKohLV2 HvBga+zEfRJoXypIpdxTkNZRGRqSRaE9zwekjxfbLU4QQBFNV3qOUECpSgwJCv4w JgWsUXhD1EEGbSJGYDQi/Wdnx1hcvnmESScjnBCDxPjz6WzW3rzzOAAa7yidCVNS WX5t5MfPgNxdX3PCvBO14nePJ7jjCYD4YXvwif8x1oO6otbzaHAp29fXQ5fW2EZn QrbMZni76rrGjtX+IUAR9zswYvKz8ygqF1CMMVcDqjoNJoQkgKFHAT+clzXjymPy vJvPged4H+b6pzoTIM7mNWX08fMpMyRUEcRWLGPXW81M4LVnFF3xkQUPhPJlazl4 XcbcTCD7GWzUdhDx2FC2wsfkReBGAHTelPSXKN5NmhrlRuNuZDU= =jGDe -----END PGP SIGNATURE-----
