diff options
author | Philip Withnall <pwithnall@gnome.org> | 2024-05-07 17:44:49 +0100 |
---|---|---|
committer | Philip Withnall <pwithnall@gnome.org> | 2024-05-07 17:44:49 +0100 |
commit | d18807b5ffc6dedc2db5225b044063f65720bf56 (patch) | |
tree | b7d955fe8d20b36e6baa612d91efb3dd48a65934 | |
parent | 428f92c7a8b312c1ea17a2eedde1338bd147f338 (diff) |
2.78.52.78.5
Signed-off-by: Philip Withnall <pwithnall@gnome.org>
-rw-r--r-- | NEWS | 24 | ||||
-rw-r--r-- | meson.build | 2 |
2 files changed, 25 insertions, 1 deletions
@@ -1,3 +1,27 @@ +Overview of changes in GLib 2.78.5, 2024-05-07 +============================================== + +* Fix CVE-2024-34397: GDBus signal subscriptions for well-known names are + vulnerable to unicast spoofing (#3268, work by Simon McVittie, reported by + Alicia Boya García) + +* Bugs fixed: + - #3168 gvfs-udisks2-volume-monitor SIGSEGV in g_content_type_guess_for_tree() + due to filename with bad encoding (Ondrej Holy) + - #3268 CVE-2024-34397: GDBus signal subscriptions for well-known names are + vulnerable to unicast spoofing (Simon McVittie) + - !3825 glib-2-78: ci: Drop FreeBSD 12 CI runner as it’s EOL + - !3960 gcontenttype: Make filename valid utf-8 string before processing + - !4040 Backport !4038 “gdbusconnection: Don't deliver signals if the sender + doesn't match” to glib-2-78 + - !4043 CI: Ignore MSYS2 CI failures for this older stable-branch + +* Translation updates: + - English (United Kingdom) (Andi Chandler) + - Georgian (Ekaterine Papava) + - Portuguese (Brazil) (Juliano de Souza Camargo) + + Overview of changes in GLib 2.78.4, 2024-01-21 ============================================== diff --git a/meson.build b/meson.build index 813c9b77c..b9a908d31 100644 --- a/meson.build +++ b/meson.build @@ -1,5 +1,5 @@ project('glib', 'c', - version : '2.78.4', + version : '2.78.5', # NOTE: See the policy in docs/meson-version.md before changing the Meson dependency meson_version : '>= 0.60.0', default_options : [ |