glib2.0_2.66.4-2_source.changes ACCEPTED into unstable
Debian FTP Masters
ftpmaster at ftp-master.debian.org
Wed Jan 27 21:18:25 GMT 2021
Accepted:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Wed, 27 Jan 2021 11:33:06 +0000
Source: glib2.0
Architecture: source
Version: 2.66.4-2
Distribution: unstable
Urgency: medium
Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers at lists.alioth.debian.org>
Changed-By: Simon McVittie <smcv at debian.org>
Closes: 977961
Changes:
glib2.0 (2.66.4-2) unstable; urgency=medium
.
* d/patches: Update patch series to upstream commit 2.66.4-18-g872181c4f
(excluding Windows-specific changes)
- Security hardening: in GIO, ignore various environment variables
if GIO is (inadvisably) used in a setuid process without sanitizing
the environment first, similar to CVE-2012-3524
- Reject very long date strings early, instead of spending time
normalizing and parsing them
- Fix recursion in GPrivate
* d/p/spawn-Don-t-set-a-search-path-if-we-don-t-want-to-search-.patch:
Make the g_spawn family only search PATH if G_SPAWN_SEARCH_PATH is used.
Previously, they would sometimes search /usr/bin:/bin:. for an
executable they should have only loaded from the current working
directory. In particular, this made gtk+3.0 fail its build-time tests
if ImageMagick display(1) happened to be installed. (Closes: #977961)
Checksums-Sha1:
281f4efcf645262994ecaa9240a4c6ae95bbd04c 3386 glib2.0_2.66.4-2.dsc
13d0c4654e112115eccc1eabcad178a99e337498 104948 glib2.0_2.66.4-2.debian.tar.xz
5f4f9b41747b67741c559aad29a2725e4faa580f 7884 glib2.0_2.66.4-2_source.buildinfo
Checksums-Sha256:
d2c21ef86e308b136e23c7a73bcf166a2bd21866bc086b65756edb7c827768c5 3386 glib2.0_2.66.4-2.dsc
ce847bdda56dff8346aa25476513c53d0008051f9a16d2e2282458ec40dcf52a 104948 glib2.0_2.66.4-2.debian.tar.xz
364a7f80113484a6aa8b966522158899ff7fb44f10671ee9f9ec285287089351 7884 glib2.0_2.66.4-2_source.buildinfo
Files:
19aa2273d0d7c5c3c93b7346a13a2015 3386 libs optional glib2.0_2.66.4-2.dsc
72f978576c0b5850094cb8ac31f9d635 104948 libs optional glib2.0_2.66.4-2.debian.tar.xz
14ee3104839ef3d9a54c04d0ad4d98a0 7884 libs optional glib2.0_2.66.4-2_source.buildinfo
-----BEGIN PGP SIGNATURE-----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=9Rqb
-----END PGP SIGNATURE-----
Thank you for your contribution to Debian.
More information about the pkg-gnome-maintainers
mailing list