[From nobody Sun Sep 20 08:43:05 2026 Received: (at 1138235-close) by bugs.debian.org; 20 Sep 2026 07:42:06 +0000 X-Spam-Checker-Version: SpamAssassin 4.0.1-bugs.debian.org_2005_01_02 (2024-03-25) on buxtehude.debian.org X-Spam-Level: X-Spam-Status: No, score=-114.2 required=4.0 tests=ALL_TRUSTED,BAYES_00, DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FVGT_m_MULTI_ODD, HAS_BUG_NUMBER,MD5_SHA1_SUM,PGPSIGNATURE,USER_IN_DKIM_WELCOMELIST autolearn=ham autolearn_force=no version=4.0.1-bugs.debian.org_2005_01_02 X-Spam-Bayes: score:0.0000 Tokens: new, 91; hammy, 150; neutral, 179; spammy, 0. spammytokens: hammytokens:0.000-+--HX-Debian:DAK, 0.000-+--H*rp:D*ftp-master.debian.org, 0.000-+--HX-DAK:process-upload, 0.000-+--UD:debian.tar.xz, 0.000-+--H*r:sk:fasolo. Return-path: <envelope@ftp-master.debian.org> Received: from muffat.debian.org ([2607:f8f0:614:1::1274:33]:46816) by buxtehude.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1x8CBa-008OQK-0h for 1138235-close@bugs.debian.org; Sun, 20 Sep 2026 07:42:06 +0000 Received: via submission from C=NA, ST=NA, L=Ankh Morpork, O=Debian SMTP, OU=Debian SMTP CA, CN=fasolo.debian.org, EMAIL=hostmaster@fasolo.debian.org (verified) by muffat.debian.org with esmtps (TLS1.3:ECDHE_SECP256R1__RSA_PSS_RSAE_SHA256__AES_256_GCM:256) (Exim 4.96) (envelope-from <envelope@ftp-master.debian.org>) id 1x8CBa-001jGn-2x for 1138235-close@bugs.debian.org; Sun, 20 Sep 2026 07:42:05 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=ftp-master.debian.org; s=smtpauto.fasolo; h=Date:Message-Id:Content-Type: Subject:MIME-Version:To:Reply-To:From:Cc:Content-Transfer-Encoding:Content-ID :Content-Description:In-Reply-To:References; bh=WGmo9rbQ4VDv+lq1midBCw2esatmyo2YaeVWzdRJvy0=; b=qPbYMsMbn4/z7eyFYokWhWA8IP hJRbnZd8v8njfUcdCWmwT/GsiUzxD+oZy1e0+ttcLWhbBi0XWGgfMxD1u/FCGeIDeJojU+UFM0+pe 61mVP1UxKZ0WlYUOx53Dv8bSb5UH7SmxmLbHaqD1Tyk2HAT5/j2DsbpMqJEzd4BWC1QhV1Z2VCUo7 hR9zIYztzm0iqlDVqKJE2slEbbIBXyxzsI0FzwerhhHum9B0WVa8gO1zQrEY4J9aVBLuBiAnmvYPh 5am45rL6jpa2bdOWG9jLNnze6IGdRF4ml2HRe2wJ16Q4AeY6m8zpDryGq8hdx1VNJhtrApusFr5ec MN2FViVA==; Received: from dak by fasolo.debian.org with local (Exim 4.98.2) (envelope-from <envelope@ftp-master.debian.org>) id 1x8CBZ-00000002efp-0n43; Sun, 20 Sep 2026 07:42:05 +0000 From: Debian FTP Masters <ftpmaster@ftp-master.debian.org> Reply-To: =?utf-8?q?Jeremy_B=C3=ADcha?= <jbicha@ubuntu.com> To: 1138235-close@bugs.debian.org X-DAK: dak process-upload X-Debian: DAK X-Debian-Package: glib-networking Debian: DAK Debian-Changes: glib-networking_2.90.0-2_source.changes Debian-Source: glib-networking Debian-Version: 2.90.0-2 Debian-Architecture: source Debian-Suite: unstable Debian-Archive-Action: accept MIME-Version: 1.0 Subject: Bug#1138235: fixed in glib-networking 2.90.0-2 Content-Type: multipart/signed; micalg="pgp-sha256"; protocol="application/pgp-signature"; boundary="===============2424945687163682505==" Message-Id: <E1x8CBZ-00000002efp-0n43@fasolo.debian.org> Date: Sun, 20 Sep 2026 07:42:05 +0000 X-CrossAssassin-Score: 2 --===============2424945687163682505== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Source: glib-networking Source-Version: 2.90.0-2 Done: Jeremy B=C3=ADcha <jbicha@ubuntu.com> We believe that the bug you reported is fixed in the latest version of glib-networking, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 1138235@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Jeremy B=C3=ADcha <jbicha@ubuntu.com> (supplier of updated glib-networking pa= ckage) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmaster@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 20 Sep 2026 09:18:39 +0200 Source: glib-networking Built-For-Profiles: derivative.ubuntu noudeb Architecture: source Version: 2.90.0-2 Distribution: unstable Urgency: high Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debi= an.org> Changed-By: Jeremy B=C3=ADcha <jbicha@ubuntu.com> Closes: 1138235 Changes: glib-networking (2.90.0-2) unstable; urgency=3Dhigh . * New upstream release - SECURITY UPDATE - Fix infinite loop in certificate verification - CVE-2026-10028 (Closes: #1138235) - SECURITY UPDATE - Fix out-of-bounds read through tls/openssl/gtlsclientconnection-openssl.c via g_tls_client_connection_openssl_get_property() - CVE-2026-2574 - SECURITY UPDATE - Fix out-of-bounds read through tls/openssl/gtlsclientconnection-openssl.c via g_tls_client_connection_openssl_get_property() - CVE-2025-60018 - SECURITY UPDATE - Fix uninitialized memory dereference through g_tls/openssl/gtlscbio.c via g_tls_bio_new_from_iostream() and g_tls_bio_new_from_datagram_based() - CVE-2025-60019 * Opt into Salsa CI * Update debhelper compat to 14 * Update Standards Version to 4.7.4 * Misc packaging updates Checksums-Sha1: 6fce2703eb3f49a8f5c3ab4c5223dfa6afcf6040 2411 glib-networking_2.90.0-2.dsc 275c658bb2c27bd8a03e0b3142dd2a203dcbcb81 290168 glib-networking_2.90.0.orig.= tar.xz 744ac9e9d96b4fb3560bdb9c5e5837d21173e255 12736 glib-networking_2.90.0-2.debi= an.tar.xz 1dc4ce599cee2288da5781460b21efbcf6a93779 11432 glib-networking_2.90.0-2_sour= ce.buildinfo Checksums-Sha256: 8d4ee18104dfb4538cb3e4eac285a4c7b73cc9d87fa8352c2c9bb46537319d53 2411 glib-n= etworking_2.90.0-2.dsc 83a75e3d9c36b66ee86d3281c2fc997816101968a5126ba322b2acb9a74dd8c0 290168 glib= -networking_2.90.0.orig.tar.xz 2935ad06c9c679b47b4338ff062922a41823ab1cf92eaa8d907f6c7ec727a27c 12736 glib-= networking_2.90.0-2.debian.tar.xz 4d2ad1cea750ee031e76ce47c52ad880a0e849ada8830e51ed57f5847b3a40d6 11432 glib-= networking_2.90.0-2_source.buildinfo Files: 5f385e6bebb851b1d9622eed67978eb9 2411 libs optional glib-networking_2.90.0-2= .dsc 87d6ce1d1dab10fb20ea783ca55e40a1 290168 libs optional glib-networking_2.90.0= .orig.tar.xz ee5f431d7ae854241f9959dca70b0b3c 12736 libs optional glib-networking_2.90.0-= 2.debian.tar.xz a78b34627754de3dd7ba0d38f4db0857 11432 libs optional glib-networking_2.90.0-= 2_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEETQvhLw5HdtiqzpaW5mx3Wuv+bH0FAmqviOIACgkQ5mx3Wuv+ bH2zvRAA4tBI7/aYyGW4TdtVqNWaCF1hset5TGW4uz94sq5dvtatK6KIFYerHXi7 hT2v7vs2nNAIbOjZlnBDjEWsGHD/F63x9mSXcUgw4BZBvXrdnCSqX6vtfEgJ3z4F 4TNhCPNsxdG1kicrvyiHi5QRcntyI8eyJly4JBJ/xWpQGcZTpf7+nSRWLS0UiUKC s4crRMktqYg8/ufShDjfILO2cXX0zC6s48Tkfn5ScOAYBs0ZKWZ4GYD323JW52wF mMtxpf3Onsqk81fGtMnBD1TJ8+xZL4vTCIL8xoGrHCnTSa5urIHmZvMiddbrjvrm 6LcoKn+8TI2FPgoJg03YciH2YdZ2QQSJu4+iQjEfy7nlRn/HLRawSPGeFycW0fL/ 9O2XuG+nd1FPC1dfreIdlwBh7TfCNZCGAXLzvs9cPQql+fIGVbyRUuJNR4435EzW 8XInRRKIr1ko2pMI/xnN5GyvBY+3Ojhu3usEEhfnPLx6yov3FplASxEfoPaJKaaO tj2mUNdb5HjL03hoKdlqg9T1nwNWo7Hn7Q4w0q6bFKZaXxx6wYovzZKnyF/k3nbc t/b+sVuSNLDiDVGcfTwd5drzOwYX/fggRDsPw9tAAS53OB43wXfQG575zL18IicR VXaJLKf7wgWnMNUEd6jE5wQP/RwJ3brh4Nxz4oTF4y71h1etiI8=3D =3DLxRn -----END PGP SIGNATURE----- --===============2424945687163682505== Content-Type: application/pgp-signature -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQTziqJOuF8J+ZI8pJSb9qggYcy5IQUCaq+OTQAKCRCb9qggYcy5 IW6dAPkBGZRnStY1zqu5clc9vIdwafbB+ox/cnLNE09ltytnPwD/fJ+POcZpM0Jy V2XB6PYrDquolfmjXnGqoJsEUfuM4gk= =DgMx -----END PGP SIGNATURE----- --===============2424945687163682505==-- ]