Debian alert DLA-4128-1 (glib2.0)

From:
             
 
Adrian Bunk <bunk@debian.org>
To:
             
 
debian-lts-announce@lists.debian.org
Subject:
             
 
[SECURITY] [DLA 4128-1] glib2.0 security update
Date:
             
 
Mon, 14 Apr 2025 12:57:00 +0300
Message-ID:
             
 
<Z/zb7DKJkdTIJzAV@localhost>
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian LTS Advisory DLA-4128-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/                          Adrian Bunk
April 13, 2025                                https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : glib2.0
Version        : 2.66.8-1+deb11u6
CVE ID         : CVE-2025-3360

Integer overflow in g_date_time_new_from_iso8601() has been fixed in the 
GNOME library glib2.0.

For Debian 11 bullseye, this problem has been fixed in version
2.66.8-1+deb11u6.

We recommend that you upgrade your glib2.0 packages.

For the detailed security status of glib2.0 please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/glib2.0

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----
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=GfcI
-----END PGP SIGNATURE-----