+ Fix several security vulnerabilities of varying severity (see
below for details):
+ Bugs fixed:
- (CVE-2025-13601) (#YWH-PGM9867-134) Incorrect calculation of
buffer size in g_escape_uri_string()
- (#YWH-PGM9867-145) Buffer underflow on Glib through
glib/gvariant via bytestring_parse() or string_parse() leads
to OOB Write
- GIO: Integer overflow in file attribute escaping
- G_FILE_MONITOR_WATCH_HARD_LINK does not monitor files on
Windows
- gconvert: Error out if g_escape_uri_string() would overflow
- gvariant-parser: Fix potential integer overflow parsing
(byte)strings
- gfileattribute: Fix integer overflow calculating escaping for
byte strings
OBS-URL: https://build.opensuse.org/package/show/GNOME:Factory/glib2?expand=0&rev=588
20 lines
709 B
XML
20 lines
709 B
XML
<?xml version="1.0"?>
|
|
<services>
|
|
<service name="obs_scm" mode="manual">
|
|
<param name="scm">git</param>
|
|
<param name="url">https://gitlab.gnome.org/GNOME/glib.git</param>
|
|
<param name="revision">2.86.3</param>
|
|
<param name="versionformat">@PARENT_TAG@+@TAG_OFFSET@</param>
|
|
<param name="versionrewrite-pattern">(.*)\+0</param>
|
|
<param name="versionrewrite-replacement">\1</param>
|
|
<!-- <param name="changesgenerate">enable</param> -->
|
|
</service>
|
|
<service name="tar" mode="buildtime"/>
|
|
<service name="recompress" mode="buildtime">
|
|
<param name="file">*.tar</param>
|
|
<param name="compression">zst</param>
|
|
</service>
|
|
<service name="set_version" mode="manual" />
|
|
</services>
|
|
|