2021-03-30 20:09:46 by Thomas Klausner | Files touched by this commit (9) | |
Log message:
*: update for dbus path change
|
2021-03-30 11:37:51 by Dan Cirnat | Files touched by this commit (4) | |
Log message:
glib2: Update to 2.68.0
Revert to adam's commit
Overview of changes in GLib 2.68.0
==================================
* Bugs fixed:
- !1987 build: Drop gconstructor_as_data_h usage from glib-compile-schemas
- !1989 glib.supp: Generalize some suppressions
- !1992 gbytesicon: Fix error in g_bytes_icon_new() documentation
- !1994 glocalfileoutputstream: Tidy up error handling
- !1995 tests: Fix copy/paste error in queue test
* Translation updates:
- Czech
- Finnish
- Italian
- Korean
- Lithuanian
- Polish
- Romanian
- Slovenian
- Turkish
|
2021-03-23 14:48:27 by Adam Ciarcinski | Files touched by this commit (5) |
Log message:
glib2: downgraded to 2.66.8
Overview of changes in GLib 2.66.8
==================================
* Fix a security issue when using `g_file_replace()` with
`G_FILE_CREATE_REPLACE_DESTINATION`
* Bugs fixed:
- file-roller symlink attack
- Backport !2325 “file-roller symlink attack” to glib-2-66
- Backport !1976 “Use the right permissions for directory watching on \
Win32” to glib-2-66
|
2021-03-22 07:54:20 by Adam Ciarcinski | Files touched by this commit (6) | |
Log message:
glib2: updated to 2.68.0
Overview of changes in GLib 2.68.0
==================================
* Bugs fixed:
- !1987 build: Drop gconstructor_as_data_h usage from glib-compile-schemas
- !1989 glib.supp: Generalize some suppressions
- !1992 gbytesicon: Fix error in g_bytes_icon_new() documentation
- !1994 glocalfileoutputstream: Tidy up error handling
- !1995 tests: Fix copy/paste error in queue test
* Translation updates:
- Czech
- Finnish
- Italian
- Korean
- Lithuanian
- Polish
- Romanian
- Slovenian
- Turkish
|
2021-02-21 13:47:16 by Adam Ciarcinski | Files touched by this commit (4) | |
Log message:
glib2 glib2-tools gdbus-codegen: updated to 2.66.7
Overview of changes in GLib 2.66.7
==================================
* Fix various regressions caused by rushed security fixes in 2.66.6
(work by Simon McVittie and Jan Alexander Steffens) (!1933, !1943)
* Fix a silent integer truncation when calling `g_byte_array_new_take()` for
byte arrays bigger than `G_MAXUINT` (work by Krzesimir Nowak) (!1944)
* Disallow using currently-undefined D-Bus connection or server flags to prevent
forward-compatibility problems with new security-sensitive flags likely to be
released in GLib 2.68 (work by Simon McVittie) (!1945)
* Bugs fixed:
- !1933 [2.66] Fix regressions in 2.66.6 where negative gssize indicates strlen()
- !1943 Backport !1941 “gkeyfilesettingsbackend: Fix basename handling when \
group is unset” to glib-2-66
- !1944 Backport !1942 “gbytearray: Do not accept too large byte arrays” to \
glib-2-66
- !1945 Backport !1934 “gdbus: Reject attempts to set future connection or \
server flags” to glib-2-66
Overview of changes in GLib 2.66.6
==================================
* Fix various instances within GLib where `g_memdup()` was vulnerable to a
silent integer truncation and heap overflow problem (discovered by
Kevin Backhouse, work by Philip Withnall)
* Bugs fixed:
- !1927 Backport !1926 “Add g_memdup2()” to glib-2-66
Overview of changes in GLib 2.66.5
==================================
* Fix some issues with handling over-long (invalid) input when parsing for \
`GDate` (!1824)
* Don’t load GIO modules or parse other GIO environment variables when `AT_SECURE`
is set (i.e. in a setuid/setgid/setcap process). GIO has always been
documented as not being safe to use in privileged processes, but people persist
in using it unsafely, so these changes should harden things against potential
attacks at least a little. Unfortunately they break a couple of projects which
were relying on reading `DBUS_SESSION_BUS_ADDRESS`, so GIO continues to read
that for setgid/setcap (but not setuid) processes. This loophole will be closed
in GLib 2.70 (see issue 2316), which should give modules 6 months to change
their behaviour. (Work by Simon McVittie and Philip Withnall)
* Fix `g_spawn()` searching `PATH` when it wasn’t meant to (work by
Simon McVittie and Thomas Haller) (!1913)
* Bugs fixed:
- giomodule: Loads GIO modules even if setuid, etc.
- g_private_replace ordering issue
- GIO security hardening causing gnome-keyring to regress when session bus is \
provided by dbus-launch (dbus-x11)
- gthread: Destroy value after replacing it in g_private_replace()
- Backport !1821 “gdate: Limit length of dates which can be parsed as \
valid” to glib-2-66
- gdatetime.c: Fix MSVC builds for lack of NAN items
- Backport !1827 “Windows: fix FD_READ condition flag still set on \
recoverable UDP socket errors.” to glib-2-66
- Backport !1862 “gio: Ignore various environment variables when running as \
setuid” to glib-2-66
- Backport !1868 “gdesktopappinfo: Fix validation of XDG_CURRENT_DESKTOP” \
to glib-2-66
- Backport !1902 “spawn: Don't set a search path if we don't want to search \
PATH” to glib-2-66
- Backport !1920 “Resolve GDBus regressions in setcap/setgid programs” to \
glib-2-66
|
2020-12-20 12:06:40 by Patrick Welche | Files touched by this commit (6) |
Log message:
Update glib2 to 2.66.4
Overview of changes in GLib 2.66.4
==================================
* Fix some issues in parsing floating point seconds in `GDateTime`
(!1791, !1797)
* Fix some issues in handling invalid UTF-8 when parsing for `GDate` (!1788)
* Bugs fixed:
- #2264 GPtrArray might call qsort() with NULL data
- Backport !1771 macos: fix frexpl checks in cross-compilation to glib-2-66
- Backport !1788 gdate: Validate input as UTF-8 before parsing to glib-2-66
- Backport !1791 gdatetime: Disallow NAN as a number of seconds in a GDateTime \
to glib-2-66
- Backport !1794 gio-tool-info: Prevent criticals if mount options are not \
available to glib-2-66
- Backport !1797 gdatetime: Improve ISO 8601 parsing to avoid floating point \
checks to glib-2-66
|
2020-11-21 12:30:49 by Adam Ciarcinski | Files touched by this commit (4) | |
Log message:
gdbus-codegen glib2 glib2-tools: updated to 2.66.3
Overview of changes in GLib 2.66.3
==================================
* Fix awkward bug with `GPollFD` handling in some situations (work by Claudio
Saavedra and Eugene M)
* Fix sending FDs attached to very large D-Bus messages (work by Simon McVittie
and Giovanni Campagna)
* Bugs fixed:
- Main loop ignores GPollFD sources when there is at least one source ready \
with priority higher than default one
- Backport !1718 “gtrace: Add G_GNUC_PRINTF annotation” to glib-2-66
- Backport !1713 “gmain: g_main_context_check() can skip updating polled FD \
sources” to glib-2-66
- Backport !1711 “Fix race in socketclient-slow test” to glib-2-66
- Backport !1725 “gdbus: Cope with sending fds in a message that takes \
multiple writes” to glib-2-66
- Backport !1734 “glocalfileinfo: Use a single timeout source at a time for \
hidden file cache” to glib-2-66
Overview of changes in GLib 2.66.2
==================================
* Important and time-critical fix to DST transitions which will happen in Europe
on 2020-10-25 on distributions which use the ‘slim’ tzdata format (which is
now the default in tzdata/tzcode 2020b) (work by Claudi M., LRN)
* Further timezone handling changes to restore support for changing the timezone
when `/etc/localtime/` changes (work by António Fernandes, Sebastian Keller)
* Fix deadlock on Windows when `G_SLICE` is set in the environment (diagnosis by
Christoph Reiter)
* Fix UTF-8 validation when escaping URI components (thanks to Marc-André \
Lureau) (!1680)
* Bugs fixed:
- fstatat is available only on macOS 10.10+
- top bar time is incorrect, timezone map in control center is broken
- Setting G_SLICE makes Windows programs hang since 2.66
- Backport !1680 “guri: Fix UTF-8 validation when escaping URI components” \
to glib-2-66
- Backport !1684 “glocalfileinfo: Fix use of fstatat() on macOS < 10.10” \
to glib-2-66
- uri: add missing (not)nullable annotations
- Backport !1691 “gmain: Fix possible locking issue in source unref” to \
glib-2-66
- Backport !1692 “gsignal: Plug g_signal_connect_object leak” to glib-2-66
- Backport !1661 “Lookup fallback time zones in the cache to improve \
performance” to glib-2-66
- Backport !1698 “gslice: Inline win32 implementation of g_getenv() to avoid \
deadlock” to glib-2-66
- Backport !1683 “Fix the 6-days-until-the-end-of-the-month bug” to glib-2-66
- Backport !1706 “Add various missing nullable annotations” to glib-2-66
* Translation updates:
- Chinese (Taiwan)
- Portuguese
- Slovak
Overview of changes in GLib 2.66.1
==================================
* A performance problem where timezones were reloaded from disk every time a
`GTimeZone` was created has been fixed
`/etc/localtime` will not take effect until a process restarts; future changes
in a subsequent 2.66.x release will improve this
* Security fix for incorrect scope/zone ID parsing in URIs (!1669)
* Bugs fixed:
- Invalid Pointer Arithmetic in g_path_get_basename
- GDBus DBUS_COOKIE_SHA1 mechanism may use too old a key
- gtk3/glib crash on gimp
- Time zone cache is constantly invalidated if TZ is NULL
- gthreadedresolver: faulty logic in parse_res_txt
- Define G_MSVC_SYMBOL_PREFIX correctly for ARM
- Minor Coverity fixes
- Fix various signedness warnings
- glocalfile: Never require G_LOCAL_FILE_STAT_FIELD_ATIME
- trash portal: Handle portal failures
- gio-tool-trash: Prevent recursion to speed up emptying trash
- glist: Clarify that g_list_free() and friends only free an entire list
- utils: Limit the scope of the variable `max`
- Fix g_module_symbol() under Windows sometimes not succeeding
- guri: Fix URI scope parsing
- gdatetime: Avoid integer overflow creating dates too far in the past
* Translation updates:
- Danish
- Greek, Modern (1453-)
- Hebrew
- Latvian
- Portuguese
- Russian
|
2020-10-01 11:13:18 by Thomas Klausner | Files touched by this commit (1) | |
Log message:
glib2: remove patch that was removed from distinfo during last update
|
2020-09-29 12:43:34 by Patrick Welche | Files touched by this commit (8) | |
Log message:
Update glib2 to 2.66.0
Highlights:
* Fixes to the new `statx()` calls - note that since GLib 2.65.2 uses `statx()`
(if available) instead of `stat()`/`fstat()`/`lstat()`/`fstatat()`, syscall
sandboxing for third party applications might need to be updated
* Fix deadlock in `g_subprocess_communicate_async()` (work by Alexander Larsson) \
(#2182)
* Add `%f`/microsecond placeholder support to `g_date_time_format()` (work by \
Johan Bjäreholt) (!1605)
* Add `GUri` API for parsing, building and representing URIs according to
[RFC 3986](https://tools.ietf.org/html/rfc3986) (work by Marc-Andre Lureau) (#110)
* D-Bus credentials support on macOS (#507)
* Year 2038 fixes involving new API in `GBookmarkFile` (#1931)
For full details, see:
https://gitlab.gnome.org/GNOME/glib/-/blob/2.66.0/NEWS
|
2020-09-18 13:18:29 by Thomas Klausner | Files touched by this commit (3) |
Log message:
glib2: disable deprecation warnings
glib2 complains about it, but gsettings-desktop-schemas is actively
using these paths and not planning to stop anytime soon.
This deprecation warning causes lots of unnecessary warnings in
pkgin upgrade logs.
Bump PKGREVISION.
|