- Update to version 2.76.5:
+ Bugs fixed:
- Possible SEGV (null pointer deref) in
distribute_method_call().
- Possible SEGV (null pointer deref) in _g_resource_file_new().
- Backport !3529 “gmenuexporter: synchronization in
org_gtk_Menus_get_interface.” to glib-2-76.
- Backport !3547 “glib/gfileutils.c: use 64 bits for value in
get_tmp_file()” to glib-2-76.
- Backport !3554 “gresourcefile: Fix crash if called with a
badly escaped URI” to glib-2-76.
- Backport !3555 “gkeyfile: Fix overwriting of GError” to
glib-2-76.
- Backport !3539 “gdbusmessage: Validate required headers have
the right type” to glib-2-76.
OBS-URL: https://build.opensuse.org/request/show/1108903
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/glib2?expand=0&rev=519
- Update to version 2.76.0:
+ Fix several regressions in handling `GFileInfo` attributes
+ Bugs fixed:
- ETAG_VALUE not set in GFileInfo when requested
- File attributes are not set when their value is FALSE/NULL
- gfile: Fix file size detection when copying on btrfs
- glocalfileinfo:
. Mark the lost+found dir as hidden again
. Ensure that is-backup is always set
+ Updated translations.
- Rebase patches with quilt.
- Update to version 2.75.4:
+ Emit a critical warning when acquiring the notification queue
during GObject finalization. A type's `finalize()`
implementation should not call public API that emits property
notifications.
+ Updated translations.
- Rebase glib2-suppress-schema-deprecated-path-warning.patch with
quilt.
- Fix license files in packages: COPYING in the source tree is
a symlink to LICENSES/LGPL-2.1-or-later.txt, but rpm's %license
macro copies the symlink, not the target. Explicitly package
LICENSES/LGPL-2.1-or-later.txt in this case (boo#1208497).
- Update to version 2.75.3:
+ Drop the implementation of GSlice, and make the API use the
system `malloc()` internally.
+ Use a thread-spawning thread to keep thread scheduler settings
consistent; fixes GThreadPool critical warnings due to failing
to set scheduler settings in some situations.
+ GIR annotation improvements for multiple APIs.
+ Optimise printing of nested maybes in `g_variant_print()`.
+ Use `tap` test protocol within GLib, and support TAP 13/14.
+ Fix a regression in glib-compile-schemas 2.75.2 causing schemas
and override files to be sorted incorrectly.
+ Support per-desktop overrides in `GSettingsAction`.
+ Various optimisations to `GString`.
+ Reduce allocations in message printing functions if there’s
nothing to format.
+ Add inline version of `g_strdup()`, allowing the compiler to do
`NULL` folding and constant folding on `strlen()` calls.
+ Add a `GPathBuf` API for building and manipulating file paths.
+ Add `g_string_free_and_steal()` and use it to warn on unused
results from`g_string_free (_, FALSE)`.
+ Add `g_free_sized()` and `g_aligned_free_sized()` to mirror the
upcoming `free_sized()` function in C23; use these if porting
away from `g_slice_free()`.
+ Fix underspecified dependencies on generated headers in
`meson.build`, which should reduce spurious build failures.
+ Updated translations.
- Update to version 2.75.2:
+ Add `g_ptr_array_sort_values()` and
`g_ptr_array_sort_values_with_data()` APIs.
+ Some fixes for activation of UWP apps on Windows.
+ Support Markdown output from `gdbus-codegen`.
- Changes from version 2.75.1:
+ Add new `GFileInfo` properties for large thumbnails.
+ Fix missing input validation in `GDBusMenuModel`.
+ Change default `g_desktop_app_info_search()` algorithm to
include substring matches.
+ Various GVariant security fixes when handling untrusted data.
+ Add support for XDG Activation protocol in `GAppLaunchContext`.
+ Return `application/x-zerosize` rather than `text/plain` as
content type for empty files.
+ Deprecate `-Druntime_libdir` configure option because it was
unused.
+ Check for snap plugs when accessing portals.
+ Add `GArray` and `GPtrArray` constructors to take or copy C
arrays.
+ Add `GHashTable` methods to get and steal hash table keys and
values as `GPtrArray`s.
+ Change the default D-Bus system bus socket address from
`/var/run/dbus/system_bus_socket` to
`/run/dbus/system_bus_socket`, in line with changes in
dbus.git.
- Drop glib2-dbus-socket-path.patch: fixed upstream.
OBS-URL: https://build.opensuse.org/request/show/1072740
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/glib2?expand=0&rev=507
- Add 99783e0408f8ae9628d2c7a30eb99806087da711.patch:
gsocketclient: Fix passing NULL to g_task_get_cancellable().
Fix a regression from commit abddb42d14, where it could pass
`NULL` to `g_task_get_cancellable()`, triggering a critical
warning. This could happen because the lifetime of `data->task`
is not as long as the lifetime of the `ConnectionAttempt`, but
the code assumed it was.
Fix the problem by keeping a strong ref to that `GCancellable`
around until the `ConnectionAttempt` is finished being destroyed.
OBS-URL: https://build.opensuse.org/request/show/999241
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/glib2?expand=0&rev=486
- Update to version 2.66.7:
+ Fix various regressions caused by rushed security fixes in
2.66.6.
+ Fix a silent integer truncation when calling
`g_byte_array_new_take()` for byte arrays bigger than
`G_MAXUINT`.
+ Disallow using currently-undefined D-Bus connection or server
flags to prevent forward-compatibility problems with new
security-sensitive flags likely to be released in GLib 2.68.
+ Bugs fixed: glgo#GNOME/GLib!1933, glgo#GNOME/GLib!1943,
glgo#GNOME/GLib!1944, glgo#GNOME/GLib!1945.
OBS-URL: https://build.opensuse.org/request/show/871216
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/glib2?expand=0&rev=446
- Update to version 2.66.6:
+ Fix various instances within GLib where `g_memdup()` was
vulnerable to a silent integer truncation and heap overflow
problem (glgo#GNOME/GLib#2319).
- Update to version 2.66.5:
+ Fix some issues with handling over-long (invalid) input when
parsing for `GDate`.
+ Don’t load GIO modules or parse other GIO environment variables
when `AT_SECURE` is set (i.e. in a setuid/setgid/setcap
process). GIO has always been documented as not being safe to
use in privileged processes, but people persist in using it
unsafely, so these changes should harden things against
potential attacks at least a little. Unfortunately they break a
couple of projects which were relying on reading
`DBUS_SESSION_BUS_ADDRESS`, so GIO continues to read that for
setgid/setcap (but not setuid) processes. This loophole will be
closed in GLib 2.70 (see issue #2316), which should give
modules 6 months to change their behaviour.
+ Fix `g_spawn()` searching `PATH` when it wasn’t meant to.
+ Bugs fixed: bgo#2168, bgo#2210, bgo#2305, glgo#GNOME/GLib!1820,
glgo#GNOME/GLib!1824, glgo#GNOME/GLib!1831,
glgo#GNOME/GLib!1836, glgo#GNOME/GLib!1864,
glgo#GNOME/GLib!1872, glgo#GNOME/GLib!1913,
glgo#GNOME/GLib!1922.
- Rebase/refresh patches:
+ glib2-dbus-socket-path.patch
+ glib2-fate300461-gettext-gkeyfile-suse.patch
+ glib2-gdbus-codegen-version.patch
+ glib2-suppress-schema-deprecated-path-warning.patch
OBS-URL: https://build.opensuse.org/request/show/869723
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/glib2?expand=0&rev=444
