-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 13 Feb 2026 12:35:33 +0100 Source: glib2.0 Binary: libglib2.0-0 libglib2.0-0-dbgsym libglib2.0-bin libglib2.0-bin-dbgsym libglib2.0-dev libglib2.0-dev-bin libglib2.0-dev-bin-dbgsym libglib2.0-tests libglib2.0-tests-dbgsym libglib2.0-udeb Architecture: i386 Version: 2.74.6-2+deb12u9 Distribution: bookworm Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) Changed-By: Andreas Henriksson Description: libglib2.0-0 - GLib library of C routines libglib2.0-bin - Programs for the GLib library libglib2.0-dev - Development files for the GLib library libglib2.0-dev-bin - Development utilities for the GLib library libglib2.0-tests - GLib library of C routines - installed tests libglib2.0-udeb - GLib library of C routines - minimal runtime (udeb) Closes: 1119919 1125752 1126549 1126550 1126551 Changes: glib2.0 (2.74.6-2+deb12u9) bookworm; urgency=medium . * Non-maintainer upload by the LTS Security Team. * Add patch to fix timezone handling with Debian & Ubuntu's symlinks (Closes: #1119919) (LP: #2130378) * CVE-2026-0988: Missing input validation in g_buffered_input_stream_peek (Closes: #1125752) * CVE-2026-1484: Integer overflow in base64 encoding can cause memory corruption. (Closes: #1126551) * CVE-2026-1485: Buffer underflow vulnerability in content type parsing caused by (signed) integer wrap for large inputs. (Closes: #1126550) * CVE-2026-1489: Integer overflow in unicode conversion can lead to memory corruption. (Closes: #1126549) Checksums-Sha1: 6c4455dfb77e2b6cd242dc6c625165b64c40507c 11485 glib2.0_2.74.6-2+deb12u9_i386-buildd.buildinfo 36b208029054fd969574b5ab6dbf649f444fdd33 3328760 libglib2.0-0-dbgsym_2.74.6-2+deb12u9_i386.deb 4a5ec6598d66bda07fd83731042b24f554b6f991 1473636 libglib2.0-0_2.74.6-2+deb12u9_i386.deb df9274f1a01c06e07786f2f0dd27fbde48202c50 131416 libglib2.0-bin-dbgsym_2.74.6-2+deb12u9_i386.deb 2ed960aeff7ca9595be1619f94fc2afe67ed8213 115412 libglib2.0-bin_2.74.6-2+deb12u9_i386.deb 54f2ee99f516eb62fb21bcc1329fa6c65a38fb76 65688 libglib2.0-dev-bin-dbgsym_2.74.6-2+deb12u9_i386.deb 01bfb2d7d60b817b352b5847a69731578d478970 153204 libglib2.0-dev-bin_2.74.6-2+deb12u9_i386.deb eb8ac0176a1924920a21bbbc9e685b12345f2417 1723320 libglib2.0-dev_2.74.6-2+deb12u9_i386.deb 1196567644770e4415e967761c8edc794223bb6e 3995192 libglib2.0-tests-dbgsym_2.74.6-2+deb12u9_i386.deb d49088f95b889103c53e7ee375f65dbc675ca093 1774756 libglib2.0-tests_2.74.6-2+deb12u9_i386.deb c896de9dcbb49a89704a8a64b7a155171a8a292c 2334876 libglib2.0-udeb_2.74.6-2+deb12u9_i386.udeb Checksums-Sha256: 480a6b6c87acc850bdf9fd8791801232754696200007cd9d2192d1d33e4f1356 11485 glib2.0_2.74.6-2+deb12u9_i386-buildd.buildinfo 9e1405bcd48782a9943272e51eddfb11c973af40cf163351f87890961e5adc78 3328760 libglib2.0-0-dbgsym_2.74.6-2+deb12u9_i386.deb b29fac9486146be26bc1bc9bacd2d0ba86874856594fa2bba84a3e395f880d68 1473636 libglib2.0-0_2.74.6-2+deb12u9_i386.deb c9a11b485854fd7a6e5a851110acc064957062462b7c803468b4def151f301da 131416 libglib2.0-bin-dbgsym_2.74.6-2+deb12u9_i386.deb a0f472b571b3da5b1f3c508bcfc9d690bae6380d028c81f3bedc30875cbb4c8f 115412 libglib2.0-bin_2.74.6-2+deb12u9_i386.deb a438a781453e349e6167477d78f90bc35618c06e1e157b1808d3be8369b01db4 65688 libglib2.0-dev-bin-dbgsym_2.74.6-2+deb12u9_i386.deb 27a9c3a4be16a8d7e648f20138fa503b2cb7e50e99c3badf3710c859bdf1ed60 153204 libglib2.0-dev-bin_2.74.6-2+deb12u9_i386.deb e1e8c38fb1f23139e4f0835f4b994abde5ff487cb4a40ff6c94009977f7e7056 1723320 libglib2.0-dev_2.74.6-2+deb12u9_i386.deb 41a6c4a7e7afa834eb8f184f2ffbf9f596890d4b2b4c6defb2eb124d4152f60e 3995192 libglib2.0-tests-dbgsym_2.74.6-2+deb12u9_i386.deb e0bd1492aff1fddf1bceeccff519eef80a0923788b0f1c58784217dda96aebb7 1774756 libglib2.0-tests_2.74.6-2+deb12u9_i386.deb e5283ef80c5b1eb4f50190b2987f68dbb8a2da87f9162040d6d8d3bfd7476c70 2334876 libglib2.0-udeb_2.74.6-2+deb12u9_i386.udeb Files: 6d5b9c949745f10236830453f1233555 11485 libs optional glib2.0_2.74.6-2+deb12u9_i386-buildd.buildinfo 9420252bf9be63b44a0f2c5ddc28c79c 3328760 debug optional libglib2.0-0-dbgsym_2.74.6-2+deb12u9_i386.deb ac81f55cb59cd3ecf77177599d8e8f8e 1473636 libs optional libglib2.0-0_2.74.6-2+deb12u9_i386.deb 9615625ecd17308cfe25b05861336dd3 131416 debug optional libglib2.0-bin-dbgsym_2.74.6-2+deb12u9_i386.deb 38ccb8db60f1a7a166f892e9d2e2dd01 115412 misc optional libglib2.0-bin_2.74.6-2+deb12u9_i386.deb 2070357b034c58e80f4354e10b1d5ce9 65688 debug optional libglib2.0-dev-bin-dbgsym_2.74.6-2+deb12u9_i386.deb 90186f4d4008070d6b558ac4cdbd0a65 153204 libdevel optional libglib2.0-dev-bin_2.74.6-2+deb12u9_i386.deb 78f8113e1ef560358ba506cc31538b96 1723320 libdevel optional libglib2.0-dev_2.74.6-2+deb12u9_i386.deb 955ed62c7f82ff1cf94f9687fcce085d 3995192 debug optional libglib2.0-tests-dbgsym_2.74.6-2+deb12u9_i386.deb 8b17424ac219fd40146e4f8e07d2ca14 1774756 libs optional libglib2.0-tests_2.74.6-2+deb12u9_i386.deb 20654fac134865b12725d2518ef7fd30 2334876 debian-installer optional libglib2.0-udeb_2.74.6-2+deb12u9_i386.udeb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE5ZI1lXv5WjhHIVjsN8Ugyu9dQiQFAmnWlgUACgkQN8Ugyu9d QiSACg/9GjpFoUKnGG9oEUl7Sb7VNyHSKX1/rr9o5NK4mwXPHJI7/vLGRusyqozv qZvMFAwCX/Kt59yIuGUZLvHbLc8JXVL0FYF8EoYEndvwi0uWCQAipLOvxMS13Kk7 Ux891dsdQyb9M86RhFUDEnPM1XiOaXAtdXCF7aTtnP8hDwRQTWcUx4rYKtl+Sz3W hAI5syIQM2oIzHr5hI5jSFa0m/ybvt58kQScmso6GeClv4hjTztiubk9oOJpM1vb oo1wQfi4QXSBWvbFkjD3m/ci4OVCtn+PQmLVTKm6mjIYL8LuegsLtrE2wmZ0TaXM 5Z630Vk6XcsY+/Gm1Kms1cwo+JsMMK2bURrBzZih6amusXa0ELVaAujMqpwBGaQq WqOpfqDyTqv2K57tHOTZSGKBhrICCQY0XR/8gHXhzyzPmXJ0xIF/80F1MW4KZGXn tBHEOfbEb8MLuqxAcKcGqps1tj1Ucr1OirpJIhLcdA65rr+cxM1pHxfcTGPv0lPn mdPhWAaQOaEugwQKq+frbtB1tkVsU9GDLLtXlNTiXxLmVfFc8oibH0pKY5guzViH e/sdeO2s3JWZb+S9DJsLGQMNT0Yh70bKZugeIOINBNmyEWqiRWfuZVGd2feMGdzJ /RVt/x336jDQOiUuE0i7FLzdA2YTF4agQwaJGRElpFjynp0M3s0= =Vzdc -----END PGP SIGNATURE-----