Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package glib-networking for openSUSE:Factory
checked in at 2026-10-30 18:09:27
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/glib-networking (Old)
and /work/SRC/openSUSE:Factory/.glib-networking.new.1255 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "glib-networking"
Fri Oct 30 18:09:27 2026 rev:91 rq:1393560 version:2.90.1
Changes:
--------
--- /work/SRC/openSUSE:Factory/glib-networking/glib-networking.changes
2026-08-22 21:33:43.602041575 +0200
+++
/work/SRC/openSUSE:Factory/.glib-networking.new.1255/glib-networking.changes
2026-10-30 18:12:53.959771901 +0100
@@ -1,0 +2,67 @@
+Sat Oct 24 10:13:41 UTC 2026 - Dominique Leuenberger <[email protected]>
+
+- Update to version 2.90.1:
+ * Bugs fixed:
+ + CVE-2026-103963: Unbounded TLS 1.3 session ticket queue growth in
+ glib-networking allows remote denial of service
+ + CVE-2026-112963: glib-networking macOS OpenSSL backend incorrectly
+ trusts non-SSL policy certificates as TLS anchors
+ + CVE-2026-113624: glib-networking TLS client session cache key not rebuilt
+ after certificate property change, allowing stale session resumption
+ + CVE-2026-113622: glib-networking: Missing TLS purpose validation in
+ glib-networking OpenSSL backend allows Extended Key Usage bypass
+ + CVE-2026-113623: glib-networking: Unbounded memory growth in glib-
+ networking GnuTLS backend application data buffer during TLS handshake
+ allows remote denial of service
+ + openssl: consult errno on syscall failure
+ * Updated translations.
+
+-------------------------------------------------------------------
+Wed Sep 30 16:48:33 UTC 2026 - Dominique Leuenberger <[email protected]>
+
+- Update version dependencies according to meson.build.
+
+-------------------------------------------------------------------
+Fri Sep 11 10:47:18 UTC 2026 - Dominique Leuenberger <[email protected]>
+
+- Update to version 2.90.0:
+ + Bugs fixed:
+ - meson: Remove version checks that are always true
+ + Updated translations.
+
+-------------------------------------------------------------------
+Thu Aug 20 08:15:53 CEST 2026 - Bjørn Lie <[email protected]>
+
+- Update to version 2.90.alpha:
+ + Bugs fixed:
+ - test fails with openssl 3.4.x
+ - (CVE-2025-60018) (#YWH-PGM9867-106) Out of Bond Reads on
+ glib-networking through tls/openssl/gtlscertificate-openssl.c
+ via "g_tls_certificate_openssl_get_property()" due to
+ Incorrect BIO_write Return Value Validation in Certificate
+ PEM Export
+ - (CVE-2026-2574) (#YWH-PGM9867-150) OOB Read on
+ glib-networking through
+ tls/openssl/gtlsclientconnection-openssl.c via
+ g_tls_client_connection_openssl_get_property()
+ - (CVE-2026-10028) (#YWH-PGM9867-278) Infinite loop in
+ certification path building
+ - meson: Introduce option for enable/disable tests
+ - openssl: check return value of g_tls_bio_alloc() and BIO_new()
+ - openssl: delete support for OCSP stapling
+ - Fix file database and PKCS11 test failures and update CI!
+ - Fix miscellaneous safety issues reported by bug hunters
+ - Delete gtlshttp
+ - Fix connection test reusing a GError
+ - openssl: fix error code confusion
+ - ci: add catch for reporting stack traces
+ - Require OpenSSL 1.1.1 or newer
+ - Some fixes found with kiro
+ - Fix various memory leaks
+ - openssl: refactor error handling code
+ - openssl: use ERR_clear_error() all over the place
+ - gnutls: always notify accepted-cas property after handshake
+ + Updated translations.
+- Drop CVE-2026-10028.patch: Fixed upstream.
+
+-------------------------------------------------------------------
@@ -1532,0 +1600 @@
+
Old:
----
CVE-2026-10028.patch
glib-networking-2.80.1.tar.xz
New:
----
glib-networking-2.90.1.tar.xz
----------(Old B)----------
Old: + Updated translations.
- Drop CVE-2026-10028.patch: Fixed upstream.
----------(Old E)----------
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ glib-networking.spec ++++++
--- /var/tmp/diff_new_pack.g5TEmU/_old 2026-10-30 18:13:01.056068966 +0100
+++ /var/tmp/diff_new_pack.g5TEmU/_new 2026-10-30 18:13:01.066069385 +0100
@@ -18,7 +18,7 @@
%define gio_real_package %(rpm -q --qf '%%{name}' --whatprovides gio)
Name: glib-networking
-Version: 2.80.1
+Version: 2.90.1
Release: 0
Summary: Network-related GIO modules for glib
License: LGPL-2.1-or-later
@@ -27,9 +27,6 @@
Source0: %{name}-%{version}.tar.xz
Source99: baselibs.conf
-# PATCH-FIX-UPSTREAM CVE-2026-10028.patch bsc#1267979 [email protected] -- tls:
detect cycles when setting issuer property
-Patch0: CVE-2026-10028.patch
-
BuildRequires: ca-certificates-mozilla
# For directory ownership
BuildRequires: dbus-1
@@ -38,8 +35,8 @@
BuildRequires: pkgconfig
# If this BuildRequires changes because of a gio library version change,
change gio_real_package accordingly
BuildRequires: pkgconfig(gio-2.0)
-BuildRequires: pkgconfig(glib-2.0) >= 2.69.0
-BuildRequires: pkgconfig(gnutls) >= 3.6.5
+BuildRequires: pkgconfig(glib-2.0) >= 2.73.3
+BuildRequires: pkgconfig(gnutls) >= 3.7.4
BuildRequires: pkgconfig(gsettings-desktop-schemas)
BuildRequires: pkgconfig(libproxy-1.0) >= 0.4.16
BuildRequires: pkgconfig(systemd)
++++++ _scmsync.obsinfo ++++++
--- /var/tmp/diff_new_pack.g5TEmU/_old 2026-10-30 18:13:01.173073864 +0100
+++ /var/tmp/diff_new_pack.g5TEmU/_new 2026-10-30 18:13:01.184074324 +0100
@@ -1,6 +1,7 @@
-mtime: 1786975796
-commit: a033a3dbd6fde934715c7943ee6b4ac2b11c7b9cf9b6154b1a4743d1593d1989
+mtime: 1792836906
+commit: f942dbeae702719f828acd9e93da223c1712717f70c1e1080de029ba7de39359
url: https://src.opensuse.org/GNOME/glib-networking
-revision: a033a3dbd6fde934715c7943ee6b4ac2b11c7b9cf9b6154b1a4743d1593d1989
+revision: f942dbeae702719f828acd9e93da223c1712717f70c1e1080de029ba7de39359
+trackingbranch: factory
projectscmsync: https://src.opensuse.org/GNOME/_ObsPrj
++++++ _service ++++++
--- /var/tmp/diff_new_pack.g5TEmU/_old 2026-10-30 18:13:01.277078218 +0100
+++ /var/tmp/diff_new_pack.g5TEmU/_new 2026-10-30 18:13:01.286078595 +0100
@@ -3,7 +3,7 @@
<service name="obs_scm" mode="manual">
<param name="scm">git</param>
<param
name="url">https://gitlab.gnome.org/GNOME/glib-networking.git</param>
- <param name="revision">2.80.1</param>
+ <param name="revision">2.90.1</param>
<param name="versionformat">@PARENT_TAG@+@TAG_OFFSET@</param>
<param name="versionrewrite-pattern">v?(.*)\+0</param>
<param name="versionrewrite-replacement">\1</param>
++++++ build.specials.obscpio ++++++
++++++ build.specials.obscpio ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/.gitignore new/.gitignore
--- old/.gitignore 1970-01-01 01:00:00.000000000 +0100
+++ new/.gitignore 2026-10-24 12:15:06.000000000 +0200
@@ -0,0 +1,5 @@
+*.obscpio
+*.osc
+_build.*
+.pbuild
+osc-collab.*
++++++ glib-networking-2.80.1.tar.xz -> glib-networking-2.90.1.tar.xz ++++++
++++ 34488 lines of diff (skipped)
++++++ glib-networking.obsinfo ++++++
--- /var/tmp/diff_new_pack.g5TEmU/_old 2026-10-30 18:13:02.351123179 +0100
+++ /var/tmp/diff_new_pack.g5TEmU/_new 2026-10-30 18:13:02.361123598 +0100
@@ -1,5 +1,5 @@
name: glib-networking
-version: 2.80.1
-mtime: 1736373066
-commit: 1417a8dd98c46c208853c5ed95de61c384acea21
+version: 2.90.1
+mtime: 1792781884
+commit: ece5af2e7ffafe974c5c6ed6195000ff26a82aa5
