+ Fix several security vulnerabilities of varying severity (see
below for details):
+ Bugs fixed:
- (CVE-2025-13601) (#YWH-PGM9867-134) Incorrect calculation of
buffer size in g_escape_uri_string()
- (#YWH-PGM9867-145) Buffer underflow on Glib through
glib/gvariant via bytestring_parse() or string_parse() leads
to OOB Write
- GIO: Integer overflow in file attribute escaping
- G_FILE_MONITOR_WATCH_HARD_LINK does not monitor files on
Windows
- gconvert: Error out if g_escape_uri_string() would overflow
- gvariant-parser: Fix potential integer overflow parsing
(byte)strings
- gfileattribute: Fix integer overflow calculating escaping for
byte strings
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/glib2?expand=0&rev=588
+ Fix tests when run against pcre2 10.47
+ Bugs fixed:
- GRegex tests fail with pcre2 10.47: different error for
^(a)\g{3
- g_get_user_special_dir doesn't strip trailing slash from
$HOME/
- gresolver: Fix loopback detection of IPv6 addresses
- gregex: Handle PCRE2_ERROR_MISSING_NUMBER_TERMINATOR if
defined
- Fix g_memory_monitor_base_query_mem_ratio on Solaris
- gutils: Strip all trailing slashes
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/glib2?expand=0&rev=586
[bnc#1253497]
- dbus-launch only works with dbus-1-daemon, not dbus-broker
[bnc#1253497]
- Update to version 2.86.1+11:
+ gregex: Handle PCRE2_ERROR_MISSING_NUMBER_TERMINATOR if
defined.
+ gutils: Strip all trailing slashes (boo#1253163)
+ gio: add fallback implementation of
g_memory_monitor_base_query_mem_ratio.
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/glib2?expand=0&rev=584
- Update to version 2.86.1:
+ Bugs fixed:
- GIRepository: union fields offsets for compiled typelibs all
have offset 0xffff
- `gio/tests/socket-listener` requires dlsym
- GLib.OptionContext's get_help() includes width of invisible
options
- Memory leak related to g_get_home_dir
- Gio.AppInfo.launch_default_for_uri_async crashes with
non-existent paths
- GNetworkMonitor's netlink backend doesn't notify connectivity
change
- ghash: Fix entry_is_big for CHERI architecture
- ghash: Handle all table sizes in iterator
- gbookmarkfile: Escape icon href and mime-type
- docs: Add Luca Bacci as a co-maintainer of the Windows code
- tests: Fix clang compilation warnings
- gmem: Replace SIZE_OVERFLOWS with g_size_checked_mul
- gstrfuncs: Check string length in g_strescape
- gutils: Improve load_user_special_dirs' user-dirs.dirs parser
- gutils: Handle singletons in unlocked functions
- ghostutils: Treat 0x80 (and above) as non-ASCII
- various fixes to user-dirs.dirs handling in gutils
- girnode: Fix computation of union member offsets
- gopenuriportal: Fix a crash when the file can’t be opened
- gtype: Use transfer none for types (un)ref functions
- gnetworkmonitorbase: Add missing notify::connectivity signal
+ Updated translations.
OBS-URL: https://build.opensuse.org/request/show/1312849
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/glib2?expand=0&rev=582
+ Fix test failure when building against gobject-introspection
≥1.83.4
+ Bugs fixed:
- 2.84.0 build failure on Linux:
../gio/gnetworkmonitornetlink.c:47:10: fatal error:
netlink/netlink_route.h: No such file or directory
- test failure with gobject-introspection 1.83.4: warning:
element doc:format from state 3 is unknown, ignoring
- gio/trash does not handle special characters well
- `g_cancellable_connect()` documentation incorrect
- g_cancellable_connect(): is it safe to unref cancellable from
callback?
- Crash with some registry key values in GWin32AppInfo
- Memory sanitizer fixes
- gobject: Be consistent in using atomic logic to handle the
GParamSpecPool
- gsettings: Port docs to gi-docgen format, add missing
annotations and make various improvements
- tests: Don't install runner scripts without installed_tests
- docs: Document GSignalFlags members added after 2.0
- tests: Add a test for g_object_freeze_notify() being called
too often
- gfileinfo: Slightly expand docs for
g_file_info_get_attribute_as_string()
- gi: Dynamically set doc-format
- tests: Various fixes to create temporary files in /tmp rather
than the build directory
- gdbusnameowning: Convert docs to gi-docgen linking syntax
- giounix-private: Fix macro for checking for epoll_create1()
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/glib2?expand=0&rev=570
+ Fix a double-unref crash which affects many apps which use
pygobject to export objects on D-Bus
+ Bugs fixed:
- Fix regression: lollypop crashes on startup
- Revert "gdbus: Fix leak of method invocation when registering
an object with closures"
- ci: Add release component to automate tarball publishing
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/glib2?expand=0&rev=563
- Update to version 2.80.4:
+ Bugs fixed:
- GLib unit tests fail on macOS runner due to localhost being
out of addresses
- Random failures to build glib 2.80.3
- Backport !4111 “gioerror: Map EADDRNOTAVAIL to
G_IO_ERROR_CONNECTION_REFUSED” to glib-2-80
- Backport !3373 and !4117 “Handle files >4GB in
g_file_load_contents()“ to glib-2-80
- Backport !4020 and !4122: fixes to GIR install locations and
build race fixes
- Backport !4110 “gthreadedresolver: ref-sink returned records
in lookup_records()” to glib-2-80
OBS-URL: https://build.opensuse.org/request/show/1186458
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/glib2?expand=0&rev=546
- Update to version 2.80.3:
+ Bugs fixed:
- g_socket_client_connect_to_host_async leaks memory when
target host doesn't respond to ARP.
- gi_repository_find_by_gtype is nondeterministic.
- Crash in error path of g_dbus_connection_export_menu_model().
- Backport !4057 “gdbusmessage: Clean the cached arg0 when
setting the message body” to glib-2-80.
- Backport !4058 “Tests: Build fixes when running `meson test`
without previous builds“ to glib-2-80
- Partially backport !4059 “tests: Fix various memory leaks and
valgrind / ASAN errors” to glib-2-80
- Backport !4066 “Fix several GCC 14 warnings to please
msys2-mingw32 CI” to glib-2-80
- Backport !4065 “girepository: Don't assume a bitfield has a
fixed size” to glib-2-80
- Backport !4073 “gmenuexporter: Fix a NULL pointer dereference
on an error handling path” to glib-2-80
- Backport !4078 “tests: Fix clang compilation failure due to
unrecognised option in pragma” to glib-2-80.
- Backport !4033 “girepository: Keep an ordered list of the
loaded typelibs” to glib-2-80
- Backport !4104 “gsocketclient: Fix a leak of the task data on
an error path” to glib-2-80
+ Updated translations. (forwarded request 1179899 from dimstar)
OBS-URL: https://build.opensuse.org/request/show/1180002
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/glib2?expand=0&rev=279
- Update to version 2.80.3:
+ Bugs fixed:
- g_socket_client_connect_to_host_async leaks memory when
target host doesn't respond to ARP.
- gi_repository_find_by_gtype is nondeterministic.
- Crash in error path of g_dbus_connection_export_menu_model().
- Backport !4057 “gdbusmessage: Clean the cached arg0 when
setting the message body” to glib-2-80.
- Backport !4058 “Tests: Build fixes when running `meson test`
without previous builds“ to glib-2-80
- Partially backport !4059 “tests: Fix various memory leaks and
valgrind / ASAN errors” to glib-2-80
- Backport !4066 “Fix several GCC 14 warnings to please
msys2-mingw32 CI” to glib-2-80
- Backport !4065 “girepository: Don't assume a bitfield has a
fixed size” to glib-2-80
- Backport !4073 “gmenuexporter: Fix a NULL pointer dereference
on an error handling path” to glib-2-80
- Backport !4078 “tests: Fix clang compilation failure due to
unrecognised option in pragma” to glib-2-80.
- Backport !4033 “girepository: Keep an ordered list of the
loaded typelibs” to glib-2-80
- Backport !4104 “gsocketclient: Fix a leak of the task data on
an error path” to glib-2-80
+ Updated translations.
OBS-URL: https://build.opensuse.org/request/show/1179899
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/glib2?expand=0&rev=544
