-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Mon, 06 May 2024 21:28:59 +0100 Source: glib2.0 Binary: libglib2.0-0 libglib2.0-0-dbgsym libglib2.0-bin libglib2.0-bin-dbgsym libglib2.0-dev libglib2.0-dev-bin libglib2.0-dev-bin-dbgsym libglib2.0-tests libglib2.0-tests-dbgsym libglib2.0-udeb Architecture: mipsel Version: 2.74.6-2+deb12u1 Distribution: bookworm-security Urgency: high Maintainer: mipsel Build Daemon (mipsel-osuosl-05) Changed-By: Simon McVittie Description: libglib2.0-0 - GLib library of C routines libglib2.0-bin - Programs for the GLib library libglib2.0-dev - Development files for the GLib library libglib2.0-dev-bin - Development utilities for the GLib library libglib2.0-tests - GLib library of C routines - installed tests libglib2.0-udeb - GLib library of C routines - minimal runtime (udeb) Changes: glib2.0 (2.74.6-2+deb12u1) bookworm-security; urgency=high . * d/patches: Backport GDBus fixes from 2.80.1 - If local users send signals on the D-Bus system bus that spoof a trusted sender, do not deliver them to signal subscriptions for the trusted sender's well-known bus name (CVE-2024-34397) - Fix a use-after-free when subscribing to signals with an arg0 match rule, originally from 2.79.0 and necessary to make the test for CVE-2024-34397 pass reliably - Add a local backport of g_set_str(), required by the above - Add proposed fix for a race condition that can cause a unit test to regress after the above * d/gbp.conf, d/control.in: Use debian/bookworm branch for Debian 12 Checksums-Sha1: e208fc5d79b64f2c9b100c6d38ec142ffb845cd9 11185 glib2.0_2.74.6-2+deb12u1_mipsel-buildd.buildinfo 51de73fb9825a84753004a39bc0d3cadf17496a2 4078612 libglib2.0-0-dbgsym_2.74.6-2+deb12u1_mipsel.deb e2a8b70562b9d60b1d3384fb1cb86d7ee3a7c02a 1202628 libglib2.0-0_2.74.6-2+deb12u1_mipsel.deb c46340206b306fef3ddbec223db549d0296a05db 147256 libglib2.0-bin-dbgsym_2.74.6-2+deb12u1_mipsel.deb a0981041f46cd946d331a21e33e57dadb05cc086 104672 libglib2.0-bin_2.74.6-2+deb12u1_mipsel.deb 5ace7bd0cf9d8d35650a9af61b39b33164c75e52 72732 libglib2.0-dev-bin-dbgsym_2.74.6-2+deb12u1_mipsel.deb 87f12449277a3ec2d7aa522f7d21ecbce7464226 148996 libglib2.0-dev-bin_2.74.6-2+deb12u1_mipsel.deb d943cb9ab373b0850ce2f64f1730c325703c801e 1730240 libglib2.0-dev_2.74.6-2+deb12u1_mipsel.deb 6cb8b00340b1e53415ac2b25177184b4ca5c86e1 4450544 libglib2.0-tests-dbgsym_2.74.6-2+deb12u1_mipsel.deb 7a205998a6ab3a9f2945cc88e3075411188c6479 1555804 libglib2.0-tests_2.74.6-2+deb12u1_mipsel.deb d706565ff77523cad0b587653a53c656a565091b 2069408 libglib2.0-udeb_2.74.6-2+deb12u1_mipsel.udeb Checksums-Sha256: a0d140d1fe82a9898edd4318d9b98240c88517ea59f14ce4c83034eba79930cc 11185 glib2.0_2.74.6-2+deb12u1_mipsel-buildd.buildinfo c5da5cac47adeca38c6deff2524a0e55dc0ccde61ceb1fb0e5b1d32117609cfc 4078612 libglib2.0-0-dbgsym_2.74.6-2+deb12u1_mipsel.deb b0a733341f847ee0b502c35d9412f9636737d7eb123529fa0573a01ebffd6629 1202628 libglib2.0-0_2.74.6-2+deb12u1_mipsel.deb 95bbab4b693f8b16ea9542210c1af306de1550ea2450fe9622ec083b76d1ee10 147256 libglib2.0-bin-dbgsym_2.74.6-2+deb12u1_mipsel.deb 2d0c2d76d8d88fcb0fcc9ecb53a60e23d2a1f945b73778809d93dd6bdee85ef5 104672 libglib2.0-bin_2.74.6-2+deb12u1_mipsel.deb 6cee25a0f3ec0185c54c5f9ed1ad9df2655cf0122009b1b138456b52f4f3a11d 72732 libglib2.0-dev-bin-dbgsym_2.74.6-2+deb12u1_mipsel.deb e3ae34068413458e5280a7e9e177ebd46a940ce92fa9e06d6a2366f040a9f902 148996 libglib2.0-dev-bin_2.74.6-2+deb12u1_mipsel.deb 18562aa5c376485bbcc8624eacee2f14573fcff43d663094e6183ee9fb253581 1730240 libglib2.0-dev_2.74.6-2+deb12u1_mipsel.deb cc3e1d40f2809a964aba49223fd5e05cb656eb8c753bf99f91d643eae7dc13b6 4450544 libglib2.0-tests-dbgsym_2.74.6-2+deb12u1_mipsel.deb 3859d58a525a992be2b731aadd9e790f702a1f91843afa9a53870bb4479c3362 1555804 libglib2.0-tests_2.74.6-2+deb12u1_mipsel.deb 2c2f9a17a9ad8a343c4637af53da0f088a806b4ffb7d897843c138badfada6a2 2069408 libglib2.0-udeb_2.74.6-2+deb12u1_mipsel.udeb Files: b0563019d3472cd9c4ce27e9638db311 11185 libs optional glib2.0_2.74.6-2+deb12u1_mipsel-buildd.buildinfo 35ca329a7863a7627677d621f4d5f12f 4078612 debug optional libglib2.0-0-dbgsym_2.74.6-2+deb12u1_mipsel.deb 098380eabd85b57585f73352579ae6f4 1202628 libs optional libglib2.0-0_2.74.6-2+deb12u1_mipsel.deb a69b86642885c7ad44b4f71a5970c7fa 147256 debug optional libglib2.0-bin-dbgsym_2.74.6-2+deb12u1_mipsel.deb 0c971b5c4dcf6d6b1640eeae3377f940 104672 misc optional libglib2.0-bin_2.74.6-2+deb12u1_mipsel.deb 1c0d5cd30aff3f4022069d06ad683bc9 72732 debug optional libglib2.0-dev-bin-dbgsym_2.74.6-2+deb12u1_mipsel.deb 992a49757139da45a89910e2b46ad7ed 148996 libdevel optional libglib2.0-dev-bin_2.74.6-2+deb12u1_mipsel.deb c79629e806f7a83493b9ab4caa65c277 1730240 libdevel optional libglib2.0-dev_2.74.6-2+deb12u1_mipsel.deb acc1ff199b1bed4b4321c9f13b039eb7 4450544 debug optional libglib2.0-tests-dbgsym_2.74.6-2+deb12u1_mipsel.deb 674290982c9dd530941b511546968209 1555804 libs optional libglib2.0-tests_2.74.6-2+deb12u1_mipsel.deb e0306c7fd392bd1149a3855b824d7160 2069408 debian-installer optional libglib2.0-udeb_2.74.6-2+deb12u1_mipsel.udeb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEuQAPGkYIXAAfq7z1C2Vm2FYVKKAFAmY6UFwACgkQC2Vm2FYV KKAt/Q//b75XVY2mVV4Z/4SBfAB+DqTTKRP9rdMJL2PKK+TY2QmbghocUNEMv0ZS UGDCTe6Upq4o6GBatJ2wqG3k7TsS2AuO+OvwQG1ltT/JCK/tWhd1ddwVaW3tyAts LDy0QkD3VoFB7siVpZ73wtwmg32q2MDfTFQfwk0FeImUVyuIgspPWZ/n8zNHAFdz Xwfwm7Huz6R/srVlXXNlVIQmHMr7JbQmJ+IvPPGewXdh+e6ZuYpZGuVfet0mAarG nJTSPMWvwN2YtTVmglGBiJGkLs+y/wTQCfNvKONvDWdhd/QXwxw2T4ZhJLY/OWyq yqjSPlZC8vgcmi7PaYC9P8MjAxYGF12KjS/+P4ONyiPDLLEsNpYhxlPbdU5qysAq lvsZ1VYMgKBbZRx4wcxG8RS0QTnOhWy5u5SUOtvhbUz6A8NnqyKtobroe/IWhzsX 62AXYkMuxG/A72i8ZUROM0nK0AyworKexKhBfrxxqeshXew4p9fXQfzS7TNUncVu b//ksfRL6eu6F5qNX1ap95QviOxSwwhXY5UQl5CxaaA10t956Eq9N07748y9XZsb kdRI/8Uh+nvsWJImfPZKZBNlZ1vG7QDy3XcIqJuHPx5a6tddalt2H8J+WLl+JWKy Eki0VHdZnNFDYFfP4q9BEf08mkIyW08mQzRFZoN1ec/Y7hrKMV4= =1uDv -----END PGP SIGNATURE-----