glib-networking_2.90.0-1_source.changes ACCEPTED into unstable

[Debian FTP Masters]

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sat, 19 Sep 2026 12:30:11 +0200
Source: glib-networking
Built-For-Profiles: derivative.ubuntu noudeb
Architecture: source
Version: 2.90.0-1
Distribution: unstable
Urgency: high
Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers at lists.alioth.debian.org>
Changed-By: Jeremy Bícha <jbicha at ubuntu.com>
Closes: 1138235
Changes:
 glib-networking (2.90.0-1) unstable; urgency=high
 .
   * New upstream release
     - SECURITY UPDATE - Fix infinite loop in certificate verification
       - CVE-2026-10028 (Closes: #1138235)
     - SECURITY UPDATE - Fix out-of-bounds read through
       tls/openssl/gtlsclientconnection-openssl.c via
       g_tls_client_connection_openssl_get_property()
       - CVE-2026-2574
     - SECURITY UPDATE - Fix out-of-bounds read through
       tls/openssl/gtlsclientconnection-openssl.c via
       g_tls_client_connection_openssl_get_property()
       - CVE-2026-60018
     - SECURITY UPDATE - Fix uninitialized memory dereference through
       g_tls/openssl/gtlscbio.c via
       g_tls_bio_new_from_iostream() and g_tls_bio_new_from_datagram_based()
       - CVE-2026-60019
   * Opt into Salsa CI
   * Update debhelper compat to 14
   * Update Standards Version to 4.7.4
   * Misc packaging updates
Checksums-Sha1:
 f5d9ceab3ff619db8438bf3bc69e725acb129286 2411 glib-networking_2.90.0-1.dsc
 275c658bb2c27bd8a03e0b3142dd2a203dcbcb81 290168 glib-networking_2.90.0.orig.tar.xz
 54a6437df46191cf0852a2f82e83ff5354fae690 12740 glib-networking_2.90.0-1.debian.tar.xz
 6a8f0a24e8aa32301fdd55a7ff5902041471c759 11432 glib-networking_2.90.0-1_source.buildinfo
Checksums-Sha256:
 3846cfbf8853c399f90fbe78b205c486e430fef12bb0cb295755d789d5332f9f 2411 glib-networking_2.90.0-1.dsc
 83a75e3d9c36b66ee86d3281c2fc997816101968a5126ba322b2acb9a74dd8c0 290168 glib-networking_2.90.0.orig.tar.xz
 a8d8fbdfc51a2f21c6aea1bf651ffa9bb787380051672d3e4fd28435c7c8e44c 12740 glib-networking_2.90.0-1.debian.tar.xz
 816394e00963fbce08240cd76a761f139fbef66e24ddd0c43c7e382512444332 11432 glib-networking_2.90.0-1_source.buildinfo
Files:
 8d194d12467d3ba9adf0256f63a99d40 2411 libs optional glib-networking_2.90.0-1.dsc
 87d6ce1d1dab10fb20ea783ca55e40a1 290168 libs optional glib-networking_2.90.0.orig.tar.xz
 edcfd467f8f92be6ee34484dc82f3e84 12740 libs optional glib-networking_2.90.0-1.debian.tar.xz
 8ecdbb3107f03a4fdb9340bc4dc38c48 11432 libs optional glib-networking_2.90.0-1_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=EBzA
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-gnome-maintainers/attachments/20260919/ff3d4c8c/attachment.sig>