[ubuntu/jammy-updates] glib2.0 2.72.4-0ubuntu2.9 (Accepted)

[Ubuntu Archive Robot]

glib2.0 (2.72.4-0ubuntu2.9) jammy-security; urgency=medium

  * SECURITY UPDATE: integer overflow in Base64 encoding
    - debian/patches/CVE-2026-1484-1.patch: use gsize to prevent potential
      overflow in glib/gbase64.c.
    - debian/patches/CVE-2026-1484-2.patch: ensure that the out value is
      within allocated size in glib/gbase64.c.
    - CVE-2026-1484
  * SECURITY UPDATE: buffer underflow via header length
    - debian/patches/CVE-2026-1485.patch: do not overflow if header is
      longer than MAXINT in gio/gcontenttype.c.
    - CVE-2026-1485
  * SECURITY UPDATE: integer overflow via Unicode case conversion
    - debian/patches/CVE-2026-1489-1.patch: use size_t for output_marks
      length in glib/guniprop.c.
    - debian/patches/CVE-2026-1489-2.patch: do not convert size_t to gint
      in glib/guniprop.c.
    - debian/patches/CVE-2026-1489-3.patch: ensure we do not overflow size
      in glib/guniprop.c.
    - debian/patches/CVE-2026-1489-4.patch: add test debug information when
      parsing input files in glib/tests/unicode.c.
    - CVE-2026-1489

Date: 2026-01-28 19:44:10.166325+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/glib2.0/2.72.4-0ubuntu2.9
-------------- next part --------------
Sorry, changesfile not available.