-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 23 Aug 2026 15:20:28 +0100
Source: glib2.0
Binary: libglib2.0-data libglib2.0-doc
Architecture: all
Version: 2.84.4-3~deb13u5
Distribution: trixie
Urgency: medium
Maintainer: all Build Daemon (x86-csail-02) <buildd_all-x86-csail-02@buildd.debian.org>
Changed-By: Simon McVittie <smcv@debian.org>
Description:
 libglib2.0-data - Common files for GLib library
 libglib2.0-doc - Documentation files for the GLib library
Closes: 1142717
Changes:
 glib2.0 (2.84.4-3~deb13u5) trixie; urgency=medium
 .
   * Add patches from upstream 2.89.x to fix parsing of XDG MIME magic
     datafiles
     - d/p/CVE-2026-16118/xdgmime-Check-if-caches-are-set-before-dumping-them.patch:
       Fix a crash when running tests on a minimal system
     - d/p/CVE-2026-16118/Fix-CVE-2026-16118-heap-buffer-overflow-in-xdgmimemagic.c.patch:
       Fix an out-of-bounds write if parsing attacker-controlled MIME-magic
       data. This is unlikely to be exploitable in practice, because an
       attacker with write access to $XDG_DATA_HOME/mime/magic is likely
       to have other ways to cause arbitrary code execution.
       (CVE-2026-16118, glib#3992 upstream, Closes: #1142717)
Checksums-Sha1:
 e90f2f3d9b66893364f254c1f6cae0a03145e738 9041 glib2.0_2.84.4-3~deb13u5_all-buildd.buildinfo
 995b0c632683123f6a9e1e03fc040a449c451fbb 1286548 libglib2.0-data_2.84.4-3~deb13u5_all.deb
 fb09278379099d8f28f46c2b7d5c80f3fc67d056 2659884 libglib2.0-doc_2.84.4-3~deb13u5_all.deb
Checksums-Sha256:
 36dd3408b048220f428cd9784e2ac31a3bdb096551afeebe4ea3a4b9f7169100 9041 glib2.0_2.84.4-3~deb13u5_all-buildd.buildinfo
 11c671d0a21dd99215bc62fc0219a1fcbb1482f36329ab6b85732e09ddff9e1c 1286548 libglib2.0-data_2.84.4-3~deb13u5_all.deb
 6fe41523c32a3d10a15cd02b086faadd279476fd9fa882dd455d7853b2eee7d9 2659884 libglib2.0-doc_2.84.4-3~deb13u5_all.deb
Files:
 7a3828a45af624740b891fa63226600c 9041 libs optional glib2.0_2.84.4-3~deb13u5_all-buildd.buildinfo
 cd378bccc47d338a9fbc081d7ca579e9 1286548 libs optional libglib2.0-data_2.84.4-3~deb13u5_all.deb
 0d93f5a1708a61c7278e5e747008f2b7 2659884 doc optional libglib2.0-doc_2.84.4-3~deb13u5_all.deb

-----BEGIN PGP SIGNATURE-----
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=Ge61
-----END PGP SIGNATURE-----