• Accepted glib2.0 2.84.1-3 (source) into unstable

    From Debian FTP Masters@21:1/5 to All on Tue May 20 12:10:01 2025
    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA512

    Format: 1.8
    Date: Fri, 09 May 2025 15:01:35 +0100
    Source: glib2.0
    Architecture: source
    Version: 2.84.1-3
    Distribution: unstable
    Urgency: medium
    Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org>
    Changed-By: Simon McVittie <smcv@debian.org>
    Closes: 1104930
    Changes:
    glib2.0 (2.84.1-3) unstable; urgency=medium
    .
    [ Jeremy BĂ­cha ]
    * d/p/gfileutils-Preserve-mode-during-atomic-updates.patch:
    Add a note that this fix for LP#2072586 was reverted in the upstream
    2.84.x branch as a behaviour change. It was kept in 2.85.x,
    and seems reasonable to keep for trixie.
    .
    [ Simon McVittie ]
    * d/p/gfileutils-Preserve-mode-during-atomic-updates.patch:
    Add a cross-reference to LP#2072586
    * d/p/gstring-carefully-handle-gssize-parameters.patch,
    d/p/gstring-Make-len_unsigned-unsigned.patch:
    Add patches from upstream to fix a buffer underflow with very large
    GString instances (Closes: #1104930, CVE-2025-4373)
    * d/p/gdate-Call-tzset-before-localtime_r.patch:
    Add patch from upstream to ensure that tzset() is called before
    localtime_r(); otherwise the behaviour of localtime_r() is unspecified.
    * These patches bring us up to date with upstream glib-2-84 branch commit
    2.84.1-15-gb3de15acf9, excluding changes that are not relevant to
    Debian architectures (macOS CI and Windows) and the revert of the fix
    for LP#2072586 (discussed above).
    Checksums-Sha1:
    8a433f81ac0774934304c91ee54b60be5a1866fa 4925 glib2.0_2.84.1-3.dsc
    5f1d8d533a3c3f0eb20849b964aaadfd137efb8f 140100 glib2.0_2.84.1-3.debian.tar.xz
    30647ad6f221bf940638573a36b98bd2b1bdceb2 7406 glib2.0_2.84.1-3_source.buildinfo
    Checksums-Sha256:
    8fbbbddd9ec3d309997fe4d792b78a39a2ac62b565a03a3706c49e5d02d9e6cd 4925 glib2.0_2.84.1-3.dsc
    832a246906ed73bd2a8e92b5b9a8625bf1a435062cc327d336fcf1ccce27603c 140100 glib2.0_2.84.1-3.debian.tar.xz
    ae65d9a8951b1dc36e04e23aa17ce862965f0e2cd1bddecf3f849c94733c18c1 7406 glib2.0_2.84.1-3_source.buildinfo
    Files:
    564133e0c881d8d0ba35bd76b790b71f 4925 libs optional glib2.0_2.84.1-3.dsc
    0f56e195be84982c6af1efc27b2aa599 140100 libs optional glib2.0_2.84.1-3.debian.tar.xz
    ef419c007764e03c54e17ead4300dc80 7406 libs optional glib2.0_2.84.1-3_source.buildinfo

    -----BEGIN PGP SIGNATURE-----

    iQIzBAEBCgAdFiEEegc60a5pT6Jb/2LlI1wJnT6zMHYFAmgsUdAACgkQI1wJnT6z MHanHhAAgFrgZ8RYomw4ibfOe0tuuP1VT8YnG9DiZ4Z2mCeYekiDhb8Z/xnnvXmO h7ejIINcboNQsySgBY9dbcIB+XnqgFtXc6swRonOB4FQlXHjE0TF7kGmqadAOmQq YukC9qFcXRVN2AtgiX5DYxgcoj+yE/Gyk2qFfNiJa7O9/+jx1Z3TAzm8sip2Q6Jc zjcj3MW/u4bjvdB4p/JEKzU5zmaNeBe0rtG6Gv22pZgr/8rW3TG8glnAdT4gVNVY j0exWPM31iBVnTIscCKJkhMk4ddZ1+BxDecCMtco3ENpFdu64/Mytzq4Z0vm2Gk0 /fMgHx8QFJNdSzDhE4m+6vBOgTU8LvsfottzBm09OCWNjo9+CZ1qaxaThEsYldCJ xJbosIUziu9Xx6xupSj/JzhAbUUwzWLbb2n0myUaUXy83Gun98XEsXAV2qgHeLfE ElqM/aon/85699qe6MMSz1fs3TQkS12jPoJHkehRpE2+0TbAL5AV4nD3YSAhLa7i IihECF3BkS7MnLBhw5VgXm6EJRvoCvBVi0ShU+C+FqAO6B7+uSSkQrznlRerK/yw rZfU8z0XemoUX2jcNzYeVpM/DJNMAlsBeaTL3duCQlbhNaqU8aO0KYuPlVRyI46R 8L7h5dolcsHaV9CYUj9xzMuilzckKiL0y/R9FXMs0KekPtyZ7Rg=
    =MSUy
    -----END PGP SIGNATURE-----


    --=============="01863116140462480=Content-Type: application/pgp-signature

    -----BEGIN PGP SIGNATURE-----

    iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaCxULwAKCRCb9qggYcy5 IX+5AQCnM4V9+Ec1WBM7CPDSXLrbR43xquaUffFrihc3lhNmRAD+ODo2EsFYScuE uVTvFwtvkGezTKae2VS9wFJ6AasPPg0=hzid
    -----END PGP SIGNATURE-----

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)