From 5bc9710fa644115b39bcc6fbed3b44397fd5bfa5 Mon Sep 17 00:00:00 2001 From: Philip Withnall Date: Thu, 4 Feb 2021 18:07:19 +0000 Subject: [PATCH] 2.67.3 Signed-off-by: Philip Withnall --- NEWS | 92 +++++++++++++++++++++++++++++++++++++++++++++++++++++ meson.build | 2 +- 2 files changed, 93 insertions(+), 1 deletion(-) diff --git a/NEWS b/NEWS index f46fa6675..d70847889 100644 --- a/NEWS +++ b/NEWS @@ -1,3 +1,95 @@ +Overview of changes in GLib 2.67.3 +================================== + +* Add new `g_memdup2()` API to replace `g_memdup()`, which is vulnerable to a + silent integer truncation and heap overflow problem if not used carefully + (discovered by Kevin Backhouse, work by Philip Withnall) (#2319) + +* Add new `g_dbus_object_path_escape()` and `g_dbus_object_path_unescape()` APIs + to provide one way of escaping arbitrary bytestrings for use in D-Bus object + paths (work by Lars Karlitski and Frederic Martinsons) (#968) + +* Use `bash-completion.pc` (if available) to provide the path to install + completion files into (work by Frederic Martinsons) (#1054) + +* Fix support for public/private trigraphs in `glib-mkenums` (work by Matthias Klumpp) (!1870) + +* Add `glib_debug` configure option to allow disabling debug infrastructure in + builds with debug symbols enabled (work by Ole André Vadla Ravnås) (!1889) + +* Fix a regression where `PATH` would always be searched when using `g_spawn()`, + even when it wasn’t supposed to (work by Simon McVittie and Thomas Haller) (!1902) + +* Override `gio-querymodules` in Meson when used as a submodule (work by Xavier Claessens) (!1909) + +* Bugs fixed: + - #344 gdbus(1) command-line completion issues + - #968 gdbus: add g_dbus_object_path_{un,}escape + - #1054 Use pkg-config to get path for bash-completion file installation + - #1180 GUnixInputStream and GUnixOutputStream don't consider TTYs pollable + - #2011 Add additional unit tests for D-Bus name watching + - #2226 clang++ compilation fails on clusterfuzz + - #2292 Cannot find a common ancestor when running CI style check jobs + - #2299 GObject introspection annotation of g_closure_new_object() is wrong + - #2305 GIO security hardening causing gnome-keyring to regress when session bus is provided by dbus-launch (dbus-x11) + - #2314 gdatetime: math library link issue + - #2319 GHSL-2021-045: integer overflow in g_bytes_new/g_memdup + - !610 Various memory leak cleanups to GSettings tests + - !1804 Add more GIR annotations to gparam.c and gsignal.c + - !1823 Fix more warnings + - !1843 gfile: Add Linux kernel headers compatibility kludge + - !1847 Port to QNX + - !1853 ginetaddress: Handle systems without IPv6 support + - !1859 docs: update g_action_group_activate_action() remote activation semantics + - !1860 glocalfile: Fix an uninitialized variable + - !1865 tests: Add more debug information to gdbus-connection-slow + - !1868 gdesktopappinfo: Fix validation of XDG_CURRENT_DESKTOP + - !1870 mkenums: Support public/private trigraph again + - !1873 Fix possible integer overflow of g_socket_send_message() + - !1876 Fixing g_socket_send_message() documentation to make it clearer + - !1877 Fix more warnings + - !1878 Another fix on g_socket_send_message() + - !1879 Fix more warnings + - !1880 GError documentation tweaks + - !1881 docs: Move ‘Notes’ section from README to NEWS + - !1883 gutils: Document caching of XDG directory variables + - !1884 gthread-win32: Use SetThreadDescription Win32 API for setting thread name + - !1887 ci: Fix msys-mingw32 CI builds due to package rename + - !1888 docs: Add documentation for GLIB_VERSION_CUR_STABLE and PREV_STABLE + - !1889 build: Add glib_debug option + - !1890 gtype: Improve formatting of GType documentation + - !1891 Fix more warnings + - !1893 gwin32appinfo: Fix printf length sub-specifier + - !1894 gsocket: Fix SO_NOSIGPIPE regression on Darwin + - !1898 gtestutils: Add g_test_get_path() API + - !1899 m4macros: replace obsolete macros AC_TRY_RUN and AC_TRY_LINK in glib-2.0.m4 + - !1900 [th/gsignal-cleanup] minor changes to GSignal related code + - !1901 Check if the remote already exists before adding it. + - !1902 spawn: Don't set a search path if we don't want to search PATH + - !1903 m4macros: Increment serial number of glib-2.0.m4 + - !1905 Start to ignore known leaks under AddressSanitizer + - !1906 gdbus-serialization: Don't leak string containing first serialization + - !1908 Fix straightforward memory leaks in tests + - !1909 Meson: override gio-querymodules program + - !1910 gio: Add explicit virtual g-i annotations for undiscovered invoker relationship + - !1911 Fix more warnings + - !1915 Mark g_key_file_get_comment() key parameter as nullable + - !1919 atomic: Fix type check of g_atomic_pointer_compare_and_exchange() + - !1921 guri: Mark g_uri_get_host as nullable + - !1925 gapplication: Fix a memory leak + +* Translation updates: + - Czech + - Friulian + - Galician + - Hungarian + - Portuguese + - Portuguese (Brazil) + - Romanian + - Spanish + - Ukrainian + + Overview of changes in GLib 2.67.2 ================================== diff --git a/meson.build b/meson.build index 7505cf1b0..0d892fb2d 100644 --- a/meson.build +++ b/meson.build @@ -1,5 +1,5 @@ project('glib', 'c', 'cpp', - version : '2.67.2', + version : '2.67.3', # NOTE: We keep this pinned at 0.49 because that's what Debian 10 ships meson_version : '>= 0.49.2', default_options : [