- Update to version 2.86.3:
+ Fix several security vulnerabilities of varying severity (see
below for details):
+ Bugs fixed:
- (CVE-2025-13601) (#YWH-PGM9867-134) Incorrect calculation of
buffer size in g_escape_uri_string()
- (#YWH-PGM9867-145) Buffer underflow on Glib through
glib/gvariant via bytestring_parse() or string_parse() leads
to OOB Write
- GIO: Integer overflow in file attribute escaping
- G_FILE_MONITOR_WATCH_HARD_LINK does not monitor files on
Windows
- gconvert: Error out if g_escape_uri_string() would overflow
- gvariant-parser: Fix potential integer overflow parsing
(byte)strings
- gfileattribute: Fix integer overflow calculating escaping for
byte strings
OBS-URL: https://build.opensuse.org/request/show/1321633
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/glib2?expand=0&rev=588
- Update to version 2.86.2:
+ Fix tests when run against pcre2 10.47
+ Bugs fixed:
- GRegex tests fail with pcre2 10.47: different error for
^(a)\g{3
- g_get_user_special_dir doesn't strip trailing slash from
$HOME/
- gresolver: Fix loopback detection of IPv6 addresses
- gregex: Handle PCRE2_ERROR_MISSING_NUMBER_TERMINATOR if
defined
- Fix g_memory_monitor_base_query_mem_ratio on Solaris
- gutils: Strip all trailing slashes
OBS-URL: https://build.opensuse.org/request/show/1318509
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/glib2?expand=0&rev=586
- dbus-launch only works with dbus-1-daemon, not dbus-broker
[bnc#1253497]
- dbus-launch only works with dbus-1-daemon, not dbus-broker
[bnc#1253497]
- Update to version 2.86.1+11:
+ gregex: Handle PCRE2_ERROR_MISSING_NUMBER_TERMINATOR if
defined.
+ gutils: Strip all trailing slashes (boo#1253163)
+ gio: add fallback implementation of
g_memory_monitor_base_query_mem_ratio.
OBS-URL: https://build.opensuse.org/request/show/1317769
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/glib2?expand=0&rev=584
- Update to version 2.86.1:
+ Bugs fixed:
- GIRepository: union fields offsets for compiled typelibs all
have offset 0xffff
- `gio/tests/socket-listener` requires dlsym
- GLib.OptionContext's get_help() includes width of invisible
options
- Memory leak related to g_get_home_dir
- Gio.AppInfo.launch_default_for_uri_async crashes with
non-existent paths
- GNetworkMonitor's netlink backend doesn't notify connectivity
change
- ghash: Fix entry_is_big for CHERI architecture
- ghash: Handle all table sizes in iterator
- gbookmarkfile: Escape icon href and mime-type
- docs: Add Luca Bacci as a co-maintainer of the Windows code
- tests: Fix clang compilation warnings
- gmem: Replace SIZE_OVERFLOWS with g_size_checked_mul
- gstrfuncs: Check string length in g_strescape
- gutils: Improve load_user_special_dirs' user-dirs.dirs parser
- gutils: Handle singletons in unlocked functions
- ghostutils: Treat 0x80 (and above) as non-ASCII
- various fixes to user-dirs.dirs handling in gutils
- girnode: Fix computation of union member offsets
- gopenuriportal: Fix a crash when the file can’t be opened
- gtype: Use transfer none for types (un)ref functions
- gnetworkmonitorbase: Add missing notify::connectivity signal
+ Updated translations.
OBS-URL: https://build.opensuse.org/request/show/1312849
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/glib2?expand=0&rev=582
- Update to version 2.84.1:
+ Fix test failure when building against gobject-introspection
≥1.83.4
+ Bugs fixed:
- 2.84.0 build failure on Linux:
../gio/gnetworkmonitornetlink.c:47:10: fatal error:
netlink/netlink_route.h: No such file or directory
- test failure with gobject-introspection 1.83.4: warning:
element doc:format from state 3 is unknown, ignoring
- gio/trash does not handle special characters well
- `g_cancellable_connect()` documentation incorrect
- g_cancellable_connect(): is it safe to unref cancellable from
callback?
- Crash with some registry key values in GWin32AppInfo
- Memory sanitizer fixes
- gobject: Be consistent in using atomic logic to handle the
GParamSpecPool
- gsettings: Port docs to gi-docgen format, add missing
annotations and make various improvements
- tests: Don't install runner scripts without installed_tests
- docs: Document GSignalFlags members added after 2.0
- tests: Add a test for g_object_freeze_notify() being called
too often
- gfileinfo: Slightly expand docs for
g_file_info_get_attribute_as_string()
- gi: Dynamically set doc-format
- tests: Various fixes to create temporary files in /tmp rather
than the build directory
- gdbusnameowning: Convert docs to gi-docgen linking syntax
- giounix-private: Fix macro for checking for epoll_create1()
OBS-URL: https://build.opensuse.org/request/show/1266969
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/glib2?expand=0&rev=570
- Update to version 2.80.4:
+ Bugs fixed:
- GLib unit tests fail on macOS runner due to localhost being
out of addresses
- Random failures to build glib 2.80.3
- Backport !4111 “gioerror: Map EADDRNOTAVAIL to
G_IO_ERROR_CONNECTION_REFUSED” to glib-2-80
- Backport !3373 and !4117 “Handle files >4GB in
g_file_load_contents()“ to glib-2-80
- Backport !4020 and !4122: fixes to GIR install locations and
build race fixes
- Backport !4110 “gthreadedresolver: ref-sink returned records
in lookup_records()” to glib-2-80
OBS-URL: https://build.opensuse.org/request/show/1186458
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/glib2?expand=0&rev=546
