glib-networking_2.90.0-2_source.changes ACCEPTED into unstable

[Debian FTP Masters]

Thank you for your contribution to Debian.



Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Sun, 20 Sep 2026 09:18:39 +0200
Source: glib-networking
Built-For-Profiles: derivative.ubuntu noudeb
Architecture: source
Version: 2.90.0-2
Distribution: unstable
Urgency: high
Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers at lists.alioth.debian.org>
Changed-By: Jeremy Bícha <jbicha at ubuntu.com>
Closes: 1138235
Changes:
 glib-networking (2.90.0-2) unstable; urgency=high
 .
   * New upstream release
     - SECURITY UPDATE - Fix infinite loop in certificate verification
       - CVE-2026-10028 (Closes: #1138235)
     - SECURITY UPDATE - Fix out-of-bounds read through
       tls/openssl/gtlsclientconnection-openssl.c via
       g_tls_client_connection_openssl_get_property()
       - CVE-2026-2574
     - SECURITY UPDATE - Fix out-of-bounds read through
       tls/openssl/gtlsclientconnection-openssl.c via
       g_tls_client_connection_openssl_get_property()
       - CVE-2025-60018
     - SECURITY UPDATE - Fix uninitialized memory dereference through
       g_tls/openssl/gtlscbio.c via
       g_tls_bio_new_from_iostream() and g_tls_bio_new_from_datagram_based()
       - CVE-2025-60019
   * Opt into Salsa CI
   * Update debhelper compat to 14
   * Update Standards Version to 4.7.4
   * Misc packaging updates
Checksums-Sha1:
 6fce2703eb3f49a8f5c3ab4c5223dfa6afcf6040 2411 glib-networking_2.90.0-2.dsc
 275c658bb2c27bd8a03e0b3142dd2a203dcbcb81 290168 glib-networking_2.90.0.orig.tar.xz
 744ac9e9d96b4fb3560bdb9c5e5837d21173e255 12736 glib-networking_2.90.0-2.debian.tar.xz
 1dc4ce599cee2288da5781460b21efbcf6a93779 11432 glib-networking_2.90.0-2_source.buildinfo
Checksums-Sha256:
 8d4ee18104dfb4538cb3e4eac285a4c7b73cc9d87fa8352c2c9bb46537319d53 2411 glib-networking_2.90.0-2.dsc
 83a75e3d9c36b66ee86d3281c2fc997816101968a5126ba322b2acb9a74dd8c0 290168 glib-networking_2.90.0.orig.tar.xz
 2935ad06c9c679b47b4338ff062922a41823ab1cf92eaa8d907f6c7ec727a27c 12736 glib-networking_2.90.0-2.debian.tar.xz
 4d2ad1cea750ee031e76ce47c52ad880a0e849ada8830e51ed57f5847b3a40d6 11432 glib-networking_2.90.0-2_source.buildinfo
Files:
 5f385e6bebb851b1d9622eed67978eb9 2411 libs optional glib-networking_2.90.0-2.dsc
 87d6ce1d1dab10fb20ea783ca55e40a1 290168 libs optional glib-networking_2.90.0.orig.tar.xz
 ee5f431d7ae854241f9959dca70b0b3c 12736 libs optional glib-networking_2.90.0-2.debian.tar.xz
 a78b34627754de3dd7ba0d38f4db0857 11432 libs optional glib-networking_2.90.0-2_source.buildinfo

-----BEGIN PGP SIGNATURE-----
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=LxRn
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-gnome-maintainers/attachments/20260920/5b792b5a/attachment-0001.sig>