-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 13 Feb 2026 12:35:33 +0100 Source: glib2.0 Binary: libglib2.0-0 libglib2.0-0-dbgsym libglib2.0-bin libglib2.0-bin-dbgsym libglib2.0-dev libglib2.0-dev-bin libglib2.0-dev-bin-dbgsym libglib2.0-tests libglib2.0-tests-dbgsym libglib2.0-udeb Architecture: amd64 Version: 2.74.6-2+deb12u9 Distribution: bookworm Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-conova-01) Changed-By: Andreas Henriksson Description: libglib2.0-0 - GLib library of C routines libglib2.0-bin - Programs for the GLib library libglib2.0-dev - Development files for the GLib library libglib2.0-dev-bin - Development utilities for the GLib library libglib2.0-tests - GLib library of C routines - installed tests libglib2.0-udeb - GLib library of C routines - minimal runtime (udeb) Closes: 1119919 1125752 1126549 1126550 1126551 Changes: glib2.0 (2.74.6-2+deb12u9) bookworm; urgency=medium . * Non-maintainer upload by the LTS Security Team. * Add patch to fix timezone handling with Debian & Ubuntu's symlinks (Closes: #1119919) (LP: #2130378) * CVE-2026-0988: Missing input validation in g_buffered_input_stream_peek (Closes: #1125752) * CVE-2026-1484: Integer overflow in base64 encoding can cause memory corruption. (Closes: #1126551) * CVE-2026-1485: Buffer underflow vulnerability in content type parsing caused by (signed) integer wrap for large inputs. (Closes: #1126550) * CVE-2026-1489: Integer overflow in unicode conversion can lead to memory corruption. (Closes: #1126549) Checksums-Sha1: 4aefe8800a1fa6b6b6e94970cac0b261ad9cf8ac 11585 glib2.0_2.74.6-2+deb12u9_amd64-buildd.buildinfo 4891862a2d08156436acb841256cbef49632b09c 4045652 libglib2.0-0-dbgsym_2.74.6-2+deb12u9_amd64.deb 3daa8c17daf200e67653bea9fb4261256b642f4e 1403216 libglib2.0-0_2.74.6-2+deb12u9_amd64.deb b776cfc752ac017485f24949cf79c7b16f357586 152832 libglib2.0-bin-dbgsym_2.74.6-2+deb12u9_amd64.deb adb67cd528148ed84bfbda2f8516d5aafcc15ab6 112080 libglib2.0-bin_2.74.6-2+deb12u9_amd64.deb 94d2b4c8c9293b5cf871672483ffd192a6eadb51 73476 libglib2.0-dev-bin-dbgsym_2.74.6-2+deb12u9_amd64.deb dd66984d55c5862cc1b3bcbbca9576698ab85e35 152744 libglib2.0-dev-bin_2.74.6-2+deb12u9_amd64.deb deed4ea6f198284c1d1345fbc8fcd2313c6df369 1606256 libglib2.0-dev_2.74.6-2+deb12u9_amd64.deb 659c42fa5e3060d112be8fa7742ffdf7f75958f2 4793952 libglib2.0-tests-dbgsym_2.74.6-2+deb12u9_amd64.deb 6934ebd51317c2ecf020cdd9073f7d8159f21ad0 1862668 libglib2.0-tests_2.74.6-2+deb12u9_amd64.deb c92525f3e23500d212fb148a43829d8c640aebcb 2269376 libglib2.0-udeb_2.74.6-2+deb12u9_amd64.udeb Checksums-Sha256: 47b230fe94cd8c226729df9aea8f5a413511b17666041bd769b732bc68b5c96c 11585 glib2.0_2.74.6-2+deb12u9_amd64-buildd.buildinfo 23ed08ecd6ba8eb0cdff2cb238c926417d816fa14cad721e47ac0e9eef9583dd 4045652 libglib2.0-0-dbgsym_2.74.6-2+deb12u9_amd64.deb 7ff85197685d89e150e342b29a59aab1beee400050ba7da73de81cd999ffee5a 1403216 libglib2.0-0_2.74.6-2+deb12u9_amd64.deb f8db009f90a1ada82587ad7a420d75fa8cc9f0be6a55aa5368a7572fbe14bfae 152832 libglib2.0-bin-dbgsym_2.74.6-2+deb12u9_amd64.deb 453789271a177354bc05c5f9b7cbcf1872c52ac555d1c78b46eba28b0b215061 112080 libglib2.0-bin_2.74.6-2+deb12u9_amd64.deb 793f204df41529b7a57b357a1ed52ba435ee81829f7272504a5e15ab7e812d53 73476 libglib2.0-dev-bin-dbgsym_2.74.6-2+deb12u9_amd64.deb 02dc46a3ab08d194e370a0d7ff0d7d92700478658948040a56290e97a030a5c5 152744 libglib2.0-dev-bin_2.74.6-2+deb12u9_amd64.deb 217766f170553e14884f7d67c0636b833da43c1e4a65dfe41268ba1292001ccd 1606256 libglib2.0-dev_2.74.6-2+deb12u9_amd64.deb 556e90e45941aa7776315c6eb29460be60a55c90f2b2d87bd07254285feeec8d 4793952 libglib2.0-tests-dbgsym_2.74.6-2+deb12u9_amd64.deb b0b3cba704cc16b14f071a327c2c565a22bb34dfea5134576e9b355810865db9 1862668 libglib2.0-tests_2.74.6-2+deb12u9_amd64.deb c31c17377d60d46149fa0bc9005542d21a5d2555c4a0f108464625a82807077d 2269376 libglib2.0-udeb_2.74.6-2+deb12u9_amd64.udeb Files: aa314987c110dded36c5f3743dbf6858 11585 libs optional glib2.0_2.74.6-2+deb12u9_amd64-buildd.buildinfo bc9ea5b71c97fa349dcf84db18211816 4045652 debug optional libglib2.0-0-dbgsym_2.74.6-2+deb12u9_amd64.deb 0285a2e88f28faa17284d92e3ba6f166 1403216 libs optional libglib2.0-0_2.74.6-2+deb12u9_amd64.deb 201e74752816870853d953d4c730a5a3 152832 debug optional libglib2.0-bin-dbgsym_2.74.6-2+deb12u9_amd64.deb c24db92f9d095b53dad52af272001f55 112080 misc optional libglib2.0-bin_2.74.6-2+deb12u9_amd64.deb a7e24ee8dae21ca12593b2e44f047958 73476 debug optional libglib2.0-dev-bin-dbgsym_2.74.6-2+deb12u9_amd64.deb 81652228787264ba5802ff7fb69ec4d0 152744 libdevel optional libglib2.0-dev-bin_2.74.6-2+deb12u9_amd64.deb 2a79759ac1fdbdbb45cc0a8e861e7ac3 1606256 libdevel optional libglib2.0-dev_2.74.6-2+deb12u9_amd64.deb d230c24c0ba7191d2eddb81fe876f2d9 4793952 debug optional libglib2.0-tests-dbgsym_2.74.6-2+deb12u9_amd64.deb 864f4f113738e3473d8be0d5d30fef89 1862668 libs optional libglib2.0-tests_2.74.6-2+deb12u9_amd64.deb fb0609a59096e079f762a5a98ba2cd3a 2269376 debian-installer optional libglib2.0-udeb_2.74.6-2+deb12u9_amd64.udeb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE7cQ9mRD4+dWjjrb6PkCWRKsh20cFAmnWlcIACgkQPkCWRKsh 20cTeRAAkDnWyTOFoYIzl1vMZxLihI6h3j/iaGhdLJRZCAAF/sNjvUBMWNicYnaM 3cupX6aTovSMAICcfIc4TFuLrMxin8qXmxwic/VMO7xkDKpFqXVuYaKWw6B5Aoei 32+EKmeBxliUAUvjUcHXbnbBany3pHkZx/g8r0MahLiZqj+EcH2Rv3cmT5vf5Hq+ Y2MrBTTbULOqYtDYYxVrWGFIxtKT2Ui5xv/c9hbaaFD5J1GMSkYGHYjnMArTd5EB 1gFnLDLUBMGuWJvjELe2DhJyz2tk4ebFriEUGXRbabquoKk6TuIzTPwDVE+87mRl t3bPwmrJtDOkk4JwURSD1LyyObktKqUja+YMT/ZJUG87Oq74oihomiP6FmR0uTri pgqG4PQtp5q14XvDvYChwxnJv3g3mTVSAv6h/HAHkj3wXGAJhO+erLK4adLEckER SUbC7UNgp/QFoo1itU4zJeSJG27Y+oIdWqcb00KWHkFiaKu7064wWBARIG9Q8d4M Cmk53W/RXRqxR/eoOJ7SwfDCROE0k11qVS3qAAlIUCrLUb/c31+gTMoLNJJLb3r1 ODoAMEj5yHqLufWQ3KaNZi4LWZevL0TK+M7f+QAGsPBrbk8p+7guCf87qw2+bqER zk9/XARd010QRhirsPTxWd38d8Ldp+GpevyafTDAVTaCKVXrHuA= =URSI -----END PGP SIGNATURE-----