[From nobody Sat Sep 19 12:07:06 2026 Received: (at 1138235-close) by bugs.debian.org; 19 Sep 2026 11:05:59 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.2 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 113; hammy, 150; neutral, 155; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from muffat.debian.org ([2607:f8f0:614:1::1274:33]:41132) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1x7stL-004PA3-0f for 1138235-close@bugs.debian.org; Sat, 19 Sep 2026 11:05:59 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by muffat.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1x7stL-000qPJ-2t for 1138235-close@bugs.debian.org; Sat, 19 Sep 2026 11:05:58 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=OZ76H1bFT9E2two+pAD5jCwRuGScVzjMuWwzrsl4TH0=; b=W8Ngh04wAp4prP9AkJpBk4jMaS 5BtEehKd1S0V8ra6PzwOVow++zA1TJfbp4kBV+M/POPE/X9R1CdTLCT/MDYweiXQQN+pZB2Ahtdhj I/lrd9Mj7ROH3RDqqBIHNA+yYjqQcK/5EP2cWT7C+d4qDQuvCG7t5MalIytjD5CvUP7aRHZ8EOyTM X786BH0FecGyqFoGY+h+W4IU8oUZH31iJEHWXeSd2PJmOJ9m/Q6WLdTNzDYulx3kUou01iuFQkdNW AkOodx0vc/kd4DPsg0ogX6m2QW72HWilE5a9emBQ5x9GBi3v+t18XKNV3jmSbCuCjkIbtW5RA+Gid pAXZZiTg==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1x7stK-0000000Gft1-0ijT; Sat, 19 Sep 2026 11:05:58 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: =?utf-8?q?Jeremy_B=C3=ADcha?= <jbicha@ubuntu.com> To: 1138235-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: glib-networking Debian: DAK Debian-Changes: glib-networking_2.90.0-1_source.changes Debian-Source: glib-networking Debian-Version: 2.90.0-1 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1138235: fixed in glib-networking 2.90.0-1 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============7267305373103645175==" Message-Id: <E1x7stK-0000000Gft1-0ijT@fasolo.debian.org> Date: Sat, 19 Sep 2026 11:05:58 +0000 --===============7267305373103645175== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: glib-networking Source-Version: 2.90.0-1 Done: Jeremy B=C3=ADcha <jbicha@ubuntu.com> We believe that the bug you reported is fixed in the latest version of glib-networking, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1138235@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Jeremy B=C3=ADcha <jbicha@ubuntu.com> (supplier of updated glib-networking pa= ckage) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 19 Sep 2026 12:30:11 +0200 Source: glib-networking Built-For-Profiles: derivative.ubuntu noudeb Architecture: source Version: 2.90.0-1 Distribution: unstable Urgency: high Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debi= an.org> Changed-By: Jeremy B=C3=ADcha <jbicha@ubuntu.com> Closes: 1138235 Changes: glib-networking (2.90.0-1) unstable; urgency=3Dhigh . * New upstream release - SECURITY UPDATE - Fix infinite loop in certificate verification - CVE-2026-10028 (Closes: #1138235) - SECURITY UPDATE - Fix out-of-bounds read through tls/openssl/gtlsclientconnection-openssl.c via g_tls_client_connection_openssl_get_property() - CVE-2026-2574 - SECURITY UPDATE - Fix out-of-bounds read through tls/openssl/gtlsclientconnection-openssl.c via g_tls_client_connection_openssl_get_property() - CVE-2026-60018 - SECURITY UPDATE - Fix uninitialized memory dereference through g_tls/openssl/gtlscbio.c via g_tls_bio_new_from_iostream() and g_tls_bio_new_from_datagram_based() - CVE-2026-60019 * Opt into Salsa CI * Update debhelper compat to 14 * Update Standards Version to 4.7.4 * Misc packaging updates Checksums-Sha1: f5d9ceab3ff619db8438bf3bc69e725acb129286 2411 glib-networking_2.90.0-1.dsc 275c658bb2c27bd8a03e0b3142dd2a203dcbcb81 290168 glib-networking_2.90.0.orig.= tar.xz 54a6437df46191cf0852a2f82e83ff5354fae690 12740 glib-networking_2.90.0-1.debi= an.tar.xz 6a8f0a24e8aa32301fdd55a7ff5902041471c759 11432 glib-networking_2.90.0-1_sour= ce.buildinfo Checksums-Sha256: 3846cfbf8853c399f90fbe78b205c486e430fef12bb0cb295755d789d5332f9f 2411 glib-n= etworking_2.90.0-1.dsc 83a75e3d9c36b66ee86d3281c2fc997816101968a5126ba322b2acb9a74dd8c0 290168 glib= -networking_2.90.0.orig.tar.xz a8d8fbdfc51a2f21c6aea1bf651ffa9bb787380051672d3e4fd28435c7c8e44c 12740 glib-= networking_2.90.0-1.debian.tar.xz 816394e00963fbce08240cd76a761f139fbef66e24ddd0c43c7e382512444332 11432 glib-= networking_2.90.0-1_source.buildinfo Files: 8d194d12467d3ba9adf0256f63a99d40 2411 libs optional glib-networking_2.90.0-1= .dsc 87d6ce1d1dab10fb20ea783ca55e40a1 290168 libs optional glib-networking_2.90.0= .orig.tar.xz edcfd467f8f92be6ee34484dc82f3e84 12740 libs optional glib-networking_2.90.0-= 1.debian.tar.xz 8ecdbb3107f03a4fdb9340bc4dc38c48 11432 libs optional glib-networking_2.90.0-= 1_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEETQvhLw5HdtiqzpaW5mx3Wuv+bH0FAmquZqEACgkQ5mx3Wuv+ bH2BhRAA2KmkJ2ik5foVa6clLBPqKN3B00jssbc0zMmInT4FZbiWHdor9lhDTpRG igU+xeE2p+kq0j7HypllKhiyF5gqa/3SvM+jyMtEjvsREDqfMRtzHaqp5xJqoizX cdM+Oj+9UVdUS2NCO01V63SY26khwwQbkP2Izu1r9ymFKJCcmgwMwqaFS0jyexN5 9slVoHog7N00lxkIGCkLa5+82po6ciBqLNcEoKPZrWZoZd5e9lEz3AfKMFmhjAgc y7jWX6RfiJnJTNl7eqMZVVoS1snAEzUCgjEgitIQp0nlZwosM52KYMTJKwMaunlO Twpd0wMqD/bUSdsM2eFbZtuls/h2ZWTBbW9+hBylrfFUUVuMLScTqkVTpkDDkiOy T+3ItzLlt+0pPa7hBt5CbYM4VoIiCLhC1L5DOQIPcwqiTbAdcZd3NKSAM761aoda FNJwwxo/fXFbP31Xt0Y2UfDAuvkYQlbOBPy6J3U0uhSymopqlhlyXyb+zQcTz5Gw ViLx3QgsIp5qOykNM3PkxeJFE1IT+HHUeThs8BURQqJGjx2chCT95aK75kV8eivB W6gdIAwOwebShGc23fm1dlzaPcvoRvfy5Xg3/IaezFFvS2vEMB0p1YjuRAC90Tmq KCsqDmYK1vId08TpVKhQwIbPEBRMx58Hu7kl18EOahhdO4E/Yiw=3D =3DEBzA -----END PGP SIGNATURE----- --===============7267305373103645175== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaq5slgAKCRCb9qggYcy5 IbqXAPoDICGh37p1h1Vf/8Dsgtc3jg1Ri+7q9fdR/YnU3DmTaQEA80PFERHjFIwu NYdCfuiXsMDNwrCST8n0kql7Bnplcwc= =Yhza -----END PGP SIGNATURE----- --===============7267305373103645175==-- ]