glib2.0 (2.80.0-6ubuntu3.4) noble-security; urgency=medium
* SECURITY UPDATE: Integer Overflow
- debian/patches/CVE-2025-4373-1.patch: carefully handle gssize
in glib/gstring.c.
- debian/patches/CVE-2025-4373-2.patch: make len_unsigned
unsigned in glib/gstring.c
- CVE-2025-4373
* Disable some consistently failing gio tests
- debian/patches/disable_failing_gio_tests.patch: disable gdbus-peer
and gdbus-address-get-session in gio/tests/meson.build.
-- Leonidas Da Silva Barbosa <leo.barbosa@canonical.com> Thu, 15 May 2025 09:06:49 -0300
glib2.0 (2.80.0-6ubuntu3.2) noble-security; urgency=medium
* SECURITY UPDATE: Buffer overflow
- debian/patches/CVE-2024-52533.patch: fix a single byte buffer
overflow in connect messages in gio/gsocks4aproxy.c.
- CVE-2024-52533
-- Leonidas Da Silva Barbosa <leo.barbosa@canonical.com> Wed, 13 Nov 2024 14:42:10 -0300
glib2.0 (2.80.0-6ubuntu3.1) noble-security; urgency=medium
* SECURITY UPDATE: GDBus signal subscription mishandling
- debian/patches/CVE-2024-34397-*.patch: upstream commits.
- debian/control: added Breaks for gnome-shell without regression fix.
- CVE-2024-34397
-- Marc Deslauriers <marc.deslauriers@ubuntu.com> Tue, 07 May 2024 13:30:21 -0400
glib2.0 (2.80.0-6ubuntu3) noble; urgency=medium
[ Simon McVittie ]
* Revert addition of libglib2.0-0 transitional package. (LP: #2063221)
Because it didn't have a Pre-Depends on the replacement, it resulted
in GLib libraries being absent for an extended period, which is
problematic. Thanks to Julian Andres Klode.
-- Jeremy Bícha <jbicha@ubuntu.com> Tue, 23 Apr 2024 12:00:34 -0400
glib2.0 (2.80.0-6ubuntu1) noble; urgency=medium
* debian/control, debian/rules:
- revert the recent change to enable the sysprof option, it's blocking
the proposed migration and probably is ffe material.
-- Sebastien Bacher <seb128@ubuntu.com> Tue, 02 Apr 2024 20:50:56 +0200
glib2.0 (2.80.0-6build1) noble; urgency=medium
* No-change rebuild for CVE-2024-3094
-- Steve Langasek <steve.langasek@ubuntu.com> Sun, 31 Mar 2024 01:08:07 +0000
glib2.0 (2.80.0-6) experimental; urgency=medium
* Bump Breaks/Replaces older libglib2.0-0 since some people used 2.79.3
-- Jeremy Bícha <jbicha@ubuntu.com> Fri, 29 Mar 2024 13:00:19 -0400
glib2.0 (2.80.0-5) experimental; urgency=medium
* Merge packaging from unstable
- Reinstate tests on 32-bit non-x86.
The required packages have become available now.
* Build with sysprof instrumentation on architectures that have it.
This currently means release architectures, plus the powerpc and ppc64
ports. Make it possible to disable this with a (non-reproducible)
build profile, to facilitate re-bootstrapping.
-- Simon McVittie <smcv@debian.org> Sun, 24 Mar 2024 18:21:29 +0000
glib2.0 (2.80.0-4) experimental; urgency=medium
* d/emulated-g-ir-tool.in: Rename from cross-g-ir-tool.in.
This makes it consistent with the template of the same name in
gobject-introspection.
* d/emulated-g-ir-tool.in: Fix qemu-user invocation.
Previously, the gi- tools generated from this template only worked on
systems that could run the tool directly via binfmt_misc. Now they invoke
qemu-user explicitly, as intended.
-- Simon McVittie <smcv@debian.org> Mon, 18 Mar 2024 18:56:39 +0000
glib2.0 (2.80.0-3) experimental; urgency=medium
* Merge packaging from unstable
- d/control: libglib2.0-0t64 Breaks/Replaces a constant version of
libglib2.0-0
- d/control: Bring back libglib2.0-0 as a transitional package
* d/p/girparser-Don-t-assume-sizeof-size_t-sizeof-void.patch,
d/p/girparser-Allow-time_t-off_t-etc.-to-appear-in-GIR-XML.patch,
d/p/girparser-Make-sizes-in-integer_aliases-more-obviously-co.patch,
d/p/girparser-Adjust-signedness-to-avoid-compiler-warnings.patch,
d/p/girparser-Add-a-pseudo-doc-comment-for-signedness.patch:
Add patches to make gi-compile-repository compatible with versions of
g-ir-scanner where #1066032 has been fixed
* Bump build-dependency on gobject-introspection to ensure that our
typelibs are generated with #1066032 fixed
-- Simon McVittie <smcv@debian.org> Mon, 18 Mar 2024 13:51:03 +0000
glib2.0 (2.80.0-2) experimental; urgency=medium
* Use host-architecture gi-compile-repository, etc. when cross-compiling.
When setting up the cross wrappers for gi-compile-repository, etc. I had
assumed that gi-compile-repository was a simple transformation from
GIR XML into binary, which varied only by its endianness. Unfortunately,
it is not: it also transforms abstract types such as size_t into
equivalent fixed-size types such as guint64, which requires knowledge
of the size of each type.
Instead of running the build architecture gi-compile-repository and
telling it to use the host architecture search path, install upstream's
gi-compile-repository etc. into ${pkglibdir}, and set up cross wrappers
that will automatically detect whether we can run them directly or
whether we must use qemu-user. This is not "pure" cross-compilation,
but it's the best we can do.
This means that the build and host OS must match, but it does have the
side benefit that we no longer require the build and host endianness to
be the same, because everything that interacts the typelib is now a
host binary (possibly running under qemu). (Closes: #1066904)
* Temporarily skip all tests on 32-bit non-x86 architectures, to avoid
circular dependencies during the t64 transition
-- Simon McVittie <smcv@debian.org> Fri, 15 Mar 2024 15:11:52 +0000
glib2.0 (2.80.0-1) experimental; urgency=medium
[ Jeremy Bícha ]
* New upstream release
* Don't build installed tests when we're not building installed tests
[ Steve Langasek ]
* Don't call makeshlibs for a package that isn't built
[ Simon McVittie ]
* Merge packaging from unstable
- d/control: libglib2.0-dev Suggests gir1.2-glib-2.0-dev in preference
to libgirepository1.0-dev, for multi-arch co-installability.
-- Jeremy Bícha <jbicha@ubuntu.com> Thu, 07 Mar 2024 18:31:35 -0500
glib2.0 (2.79.3-3) experimental; urgency=medium
* Merge pending packaging from unstable
- Mention #1065280 in 2.79.3-1 changelog entry
* d/libglib2.0-0t64.preinst: Remove libglib2.0-0 postrm to avoid file loss
during the time64 transition (Closes: #1065022)
* d/tests/manual/1065022.sh: Add a manual reproducer for #1065022
* d/libglib2.0-0t64.postrm: Only clean up giomodule.cache during purge.
This matches the behaviour that we have had for gschemas.compiled
since 2012, with similar reasoning: if we remove this file during
remove, then during upgrades there is a window between old-postrm
and new-postinst during which giomodule.cache is missing.
* d/libglib2.0-0t64.postrm: Avoid recurrence of #1065022 in the future.
If at some point in the future we have another transition as extensive
as time64, then libglib2.0-0t64 could conceivably be replaced by
some other package, for example libglib2.0-0xyz. If that happens,
we need to avoid deletion of gschemas.compiled and giomodule.cache,
otherwise we will have another bug similar to #1065022.
* d/tests/1065022-futureproofing: Add a test for recurrence of #1065022.
This test-case depends on several implementation details which
might cause it to regress for reasons that are not genuinely
release-critical, so it is marked as flaky.
-- Simon McVittie <smcv@debian.org> Sat, 02 Mar 2024 23:07:12 +0000
glib2.0 (2.79.3-2) experimental; urgency=medium
[ Gianfranco Costamagna ]
* Fix shlibs to fix installability on armhf
-- Jeremy Bícha <jbicha@ubuntu.com> Wed, 28 Feb 2024 18:11:32 -0500
glib2.0 (2.79.3-1) experimental; urgency=medium
* New upstream development release
* d/copyright: Update
* d/patches: Drop patches that were included in the upstream release
* d/patches/workarounds: Unfuzz a patch whose context changed slightly
* d/libgirepository-2.0-dev.install: libgirepository-2.0.a is now provided
* d/libglib2.0-dev-bin.install: Install new man pages for gi- tools
* Use d/*.manpages to install upstream man pages.
This ensures that they're skipped if building with nodoc.
* d/rules: Create cross-prefixed symlinks to gi- tools' man pages
* d/patches: Mention the cross-prefixed gi- tool names in their man pages
* d/libglib2.0-0t64.post*: Stop generating from a template.
dh_installdeb will substitute #DEB_HOST_MULTIARCH# for us since
debhelper 12.2 (2019).
* d/rules: Generate libglib2.0-0t64.triggers just before the command
that uses it
* d/libglib2.0-0t64.postinst: Remove workarounds that are no longer needed.
As noted in their comments, now that Debian 12 and Ubuntu 22.04 were
both released with these workarounds included, the workarounds can
safely be removed from newer distro branches.
* Merge packaging from unstable (Closes: #1062134)
* Build-depend on dpkg-dev (>= 1.22.5), to ensure that we are on the
64-bit time_t side of the transition (Closes: #1065280).
If this version gets backported, then the whole t64 package rename
(including this change) will need to be reverted in the backport.
* d/clean: Update for the time64 transition
* Fix filename of README.Debian for libglib2.0-0t64.
This regressed during the t64 transition, presumably renamed with the
help of a script that didn't take multiple extensions into account.
-- Simon McVittie <smcv@debian.org> Wed, 28 Feb 2024 13:15:47 +0000
glib2.0 (2.78.4-6) unstable; urgency=medium
* Reinstate tests on 32-bit non-x86.
The required packages have become available now.
-- Simon McVittie <smcv@debian.org> Sun, 24 Mar 2024 13:47:15 +0000
glib2.0 (2.78.4-5) unstable; urgency=medium
* Temporarily skip all tests on 32-bit non-i386.
Some test-dependencies other than desktop-file-utils and
shared-mime-info are still uninstallable, notably xterm.
* d/control: libglib2.0-0t64 Breaks/Replaces a constant version of
libglib2.0-0.
Now that the transition already happened, we don't need to choose
the version at which it happened dynamically.
* d/control: Bring back libglib2.0-0 as a transitional package.
On architectures that were unaffected by the 64-bit time_t transition,
there was no ABI break, so we can upgrade smoothly from the old
to new name. This might help to hint apt into doing the upgrade,
in preference to removing packages we wanted to keep.
On architectures that were affected by the transition (mainly armel
and armhf), it would be incorrect for this package to exist, so it
is not built.
-- Simon McVittie <smcv@debian.org> Fri, 15 Mar 2024 17:40:31 +0000
glib2.0 (2.78.4-4) unstable; urgency=medium
* Temporarily disable some tests on 32-bit non-x86 architectures.
This removes the cyclic build-dependency between glib2.0 and
desktop-file-utils/shared-mime-info from the blockers for the 64-bit
time_t transition. The 32-bit non-x86 architectures are the ones
affected by this transition, and continuing to run these tests on
i386 gives us some level of confidence that they have not suffered
from a 32-bit-specific regression.
-- Simon McVittie <smcv@debian.org> Fri, 08 Mar 2024 10:55:26 +0000
glib2.0 (2.78.4-3) unstable; urgency=medium
* d/libglib2.0-0t64.preinst: Remove libglib2.0-0 postrm to avoid file loss
(Closes: #1065022)
* d/tests: Add a manual reproducer for #1065022
* d/libglib2.0-0t64.post*: Stop generating from a template.
dh_installdeb will substitute #DEB_HOST_MULTIARCH# for us since
debhelper 12.2 (2019).
* d/libglib2.0-0t64.postrm: Only clean up giomodule.cache during purge.
This matches the behaviour that we have had for gschemas.compiled
since 2012.
* d/libglib2.0-0t64.postrm: Avoid recurrence of #1065022 in the future.
If at some point in the future we have another transition as extensive
as time64, then libglib2.0-0t64 could conceivably be replaced by some
other package, for example libglib2.0-0xyz. If that happens,
we need to avoid deletion of gschemas.compiled and giomodule.cache,
otherwise we will have another bug similar to #1065022.
* d/tests/1065022-futureproofing: Add a test for recurrence of #1065022.
This test-case depends on several implementation details which
might cause it to regress for reasons that are not genuinely
release-critical, so it is marked as flaky.
* d/libglib2.0-0t64.postinst: Remove workarounds that are no longer needed.
As noted in their comments, now that Debian 12 and Ubuntu 22.04 were
both released with these workarounds included, the workarounds can safely
be removed from newer distro branches.
* d/control: libglib2.0-dev Suggests gir1.2-glib-2.0-dev in preference
to libgirepository1.0-dev, for multi-arch co-installability.
-- Simon McVittie <smcv@debian.org> Sun, 03 Mar 2024 13:30:12 +0000
glib2.0 (2.78.4-2.1) unstable; urgency=medium
* Non-maintainer upload
* Fix runtime dependencies evaluating by tweaking
shlibs.local file (Fixes uninstallability on 32bit)
-- Gianfranco Costamagna <locutusofborg@debian.org> Wed, 28 Feb 2024 17:46:58 +0100
glib2.0 (2.78.4-2) unstable; urgency=medium
[ Lukas Märdian ]
* Rename libraries for 64-bit time_t transition (Closes: #1062134)
[ Simon McVittie ]
* d/libglib2.0-0t64.lintian-overrides: Drop incorrect override
-- Jeremy Bícha <jbicha@ubuntu.com> Tue, 27 Feb 2024 21:23:12 -0500
glib2.0 (2.78.4-1) unstable; urgency=medium
* New upstream release
* Backport selected packaging changes from experimental:
- d/control: Make build-dependencies cross-satisfiable.
python3-packaging is not (currently?) Multi-Arch: foreign. We only
need this for gdbus-codegen, so a version suitable for the build
architecture is correct.
- d/control: Depend on pkgconf in preference to pkg-config
- d/clean: Canonicalize order
-- Simon McVittie <smcv@debian.org> Thu, 15 Feb 2024 13:36:05 +0000
glib2.0 (2.79.2-1) experimental; urgency=medium
* New upstream release
* d/copyright: Update
* d/*.install: Add new GioUnix-2.0, GLibUnix-2.0 typelibs
* d/libglib2.0-dev-bin.install: Add new gi- tools
* d/control, d/rules: Account for required endianness of gi-* tools.
They don't currently support reading or writing typelibs of opposite
endianness.
* Generate architecture-prefixed gi-* tools.
This is the same setup as in gobject-introspection: for example, the
equivalent of x86_64-linux-gnu-g-ir-compiler is
x86_64-linux-gnu-gi-compile-repository.
* d/patches: Refresh patch series.
Drop a patch that no longer applies cleanly, which only added debug
messages to an unreliable test.
* d/*.symbols: Update
* d/p/gdatetime-Fix-ja_JA.eucjp-expectations-when-eras-are-unsu.patch,
d/p/gdatetime-Exercise-c-C-format-placeholders-in-ja_JP.eucjp.patch:
Add patches to fix autopkgtest failure on s390x
* d/p/girepository-test-Don-t-assume-doubles-are-naturally-alig.patch:
Add patch to fix a test failure on i386
* d/libglib2.0-doc.doc-base.girepository, .gio-unix, .glib-unix: Add
* d/libglib2.0-doc.links: Add symlinks for girepository, gio-unix, glib-unix
* d/control: Depend on pkgconf in preference to pkg-config
* d/libglib2.0-0t64.lintian-overrides: Drop an incorrect override
* d/not-installed: Remove empty file
-- Simon McVittie <smcv@debian.org> Tue, 13 Feb 2024 14:48:05 +0000
glib2.0 (2.79.1-1.1~exp1) experimental; urgency=medium
* Non-maintainer upload.
* Rename libraries for 64-bit time_t transition.
-- Lukas Märdian <slyon@debian.org> Wed, 31 Jan 2024 14:24:36 +0000
glib2.0 (2.79.1-1) experimental; urgency=medium
* New upstream development release
-- Simon McVittie <smcv@debian.org> Wed, 24 Jan 2024 20:11:26 +0000
glib2.0 (2.79.0+git20240119~62ee8bf6-1) experimental; urgency=medium
* New upstream development snapshot
* d/libglib2.0-0.symbols: Update
* d/libgirepository-2.0-0.symbols: Add
* d/copyright: Update
* Drop patches that were applied upstream
* d/control: Take over gir1.2-glib-2.0{,-dev} from
src:gobject-introspection.
The GIR XML and typelibs were historically generated by the
gobject-introspection source package to avoid a circular dependency
between glib2.0 and gobject-introspection, but they were always
conceptually part of glib2.0.
Now that build-profiles are well-understood, we can bootstrap
new architectures by initially building glib2.0 with the new nogir
build-profile, then using that to build gobject-introspection,
and then rebuilding glib2.0 without nogir.
Alternatively, now that GObject-Introspection data can be
cross-compiled, we can bootstrap new architectures by cross-compiling
glib2.0 and gobject-introspection on an existing architecture (which
must be of the same endianness as a result of internal details).
* d/rules: Use cross g-ir-scanner when cross-compiling introspection data
* d/rules: Set qemu-user as an exe_wrapper when cross-compiling
introspection data.
The upstream build system checks for ability to run host-architecture
executables when we do this, although in Debian, we know that we
have a cross g-ir-scanner (which as an implementation detail uses
qemu-user internally).
* d/source/lintian-overrides: Silence warning for new nogir profile name
* d/control, d/rules: Package libgirepository-2.0.
This will eventually replace the libgirepository-1.0 from
src:gobject-introspection, in future versions of language bindings
like PyGI and gjs. For the Debian 13 release, I suspect that both
will need to exist in parallel.
Similarly, its GObject-Introspection binding, GIRepository-3.0,
will eventually replace the GIRepository-2.0 from
src:gobject-introspection.
This change introduces new binary package names, so it will require
NEW processing.
The API and ABI of this new library are not yet stable, and will
not be stable until GLib 2.80.0 is released; please use with caution.
* d/control: Exclude libglib2.0-tests under nogir build profile.
It now includes some tests that are only built if
GObject-Introspection is enabled, so making it reproducible requires
turning it off during nogir builds.
* d/control: Ensure build-dependencies are cross-satisfiable.
python3-packaging is not (currently?) Multi-Arch: foreign. We only
need this for gdbus-codegen, so a version suitable for the build
architecture is correct.
* d/rules: Update maintainer-update-unicode-data target for update of
Unicode data to 15.1.0 in previous release
* d/clean: Canonicalize order
-- Simon McVittie <smcv@debian.org> Sat, 20 Jan 2024 17:20:24 +0000
glib2.0 (2.79.0+git20240110~g38f5ba3c-2) experimental; urgency=medium
* d/p/docs-Allow-building-man-pages-without-the-reference-docum.patch:
Mark as applied upstream.
This effectively brings us up to 2.79.0-48-g4ba14ff28 (2024-01-12).
* d/rules: Use relative links to cross-reference between reference
manuals.
gi-docgen makes this fairly straightforward by confining this
information to a single file (the URL map).
* d/libglib2.0-doc.doc-base.gvariant-specification: Add missing Files field
* d/rules: Don't try to install libgirepository tests yet.
This fixes FTBFS when using dpkg-buildpackage -b (-A or -B as used on
buildds already worked).
* d/copyright: Separate different licenses where possible
* d/p/workarounds/gdatetime-Ignore-E-modifier-on-64-bit-big-endian-for-the-.patch:
Add patch to ignore %E GDateTime modifier on architectures where it fails
(mitigates: #1060735, glib#3225)
* d/p/tests-Don-t-test-external-data-with-toolchains-that-can-t.patch:
Add proposed patch to fix test regression on mips64el (glib#3226)
* d/patches: Separate workarounds from other Debian-specific patches
* d/libglib2.0-udeb.install: Never include libgirepository in the udeb.
Previously, it was included non-deterministically, depending whether
we were building with -b or -B. We don't expect that debian-installer
is going to use GObject-Introspection any time soon.
-- Simon McVittie <smcv@debian.org> Sun, 14 Jan 2024 12:24:39 +0000
glib2.0 (2.79.0+git20240110~g38f5ba3c-1) experimental; urgency=medium
* New upstream development snapshot
* d/watch: Update to Unicode v15.1.0, as included since 2.79.0
* d/copyright: Update for GLib 2.79.x
* d/libglib2.0-0.symbols: Update
* d/control: Bump Meson dependency as per meson.build
* d/control: Depend on python3-packaging instead of python3-distutils
* d/control: The installed-tests now require libglib2.0-bin, for a
new test for gio(1)
* d/patches: Refresh patch series.
The thread-pool-slow test has been extensively refactored, so stop
skipping that test on 32-bit ARM for now. We can reinstate the
workaround later if it's still necessary.
* d/rules: Don't strip non-determinism from test data.
This will fail for some malformed images used to test thumbnailers'
error handling.
* d/libglib2.0-dev.install: Be more specific about what we install.
The newly-included libgirepository-2.0 seems more likely to break
API/ABI than the rest of GLib, so it's safer if we give it its own
-dev package that will not necessarily bump SONAME in lockstep with
the rest of GLib.
* d/rules: Use GObject-Introspection and gi-docgen to build documentation.
We don't build libgirepository, GIR XML or typelibs into a binary
package yet, because that will require a trip through NEW.
* d/p/docs-Allow-building-man-pages-without-the-reference-docum.patch:
Add proposed patch to allow building man pages while disabling
gi-docgen, to keep the contents of packages reproducible while
avoiding a circular dependency on gobject-introspection on new
architectures.
-- Simon McVittie <smcv@debian.org> Fri, 12 Jan 2024 15:46:42 +0000
glib2.0 (2.78.3-2) unstable; urgency=medium
[ Simon McVittie ]
* Branch packaging for 2.78.x
* Depend on python3-packaging instead of python3-distutils
[ Jeremy Bícha ]
* Cherry-pick patch to stop using distutils: no longer included in Python 3.12
-- Jeremy Bícha <jbicha@ubuntu.com> Tue, 23 Jan 2024 09:48:48 -0500
glib2.0 (2.78.3-1) unstable; urgency=medium
* New upstream stable release
- Functionally equivalent to 2.78.2-1
* d/p/xdgmime-Update-to-upstream-commit-c2c814d4051f232.patch:
Drop patch, included in the new upstream release
* d/p/debian/Disable-some-tests-on-slow-architectures-which-keep-faili.patch,
d/tests:
Skip more threading-related tests which regularly time out on 32-bit
ARM, and run them as "flaky" tests during autopkgtest
(Mitigates: #1023652, #1057797)
-- Simon McVittie <smcv@debian.org> Fri, 08 Dec 2023 16:16:19 +0000
glib2.0 (2.78.2-1) unstable; urgency=medium
* New upstream stable release
- Handle broken MIME type definitions with circular inheritance
- Diagnose invalid input to g_utf8_collate_key() as a programming error
rather than crashing
- All other changes were included as patches in 2.78.1-2 and -4
* Drop patches that were included in the new upstream release
* Adjust 2.78.1-3 changelog entry to mention why dh-sequence-gnome
is still desirable
* d/p/xdgmime-Update-to-upstream-commit-c2c814d4051f232.patch:
Add a post-release bug fix from upstream to fix regressions in xdgmime
* d/copyright: Remove unused stanza for m4macros/attributes.m4.
This file is no longer shipped. This also means we can drop the license
stanza for "GPL-2+ with Autoconf exception".
-- Simon McVittie <smcv@debian.org> Wed, 06 Dec 2023 20:45:11 +0000
glib2.0 (2.78.1-4) unstable; urgency=medium
* d/p/tests-Fix-a-race-in-thread-pool-slow.patch:
Add patch from upstream git fixing a race condition in
a test (hopefully Closes: #1055783)
-- Simon McVittie <smcv@debian.org> Mon, 13 Nov 2023 16:37:33 +0000
glib2.0 (2.78.1-3) unstable; urgency=medium
* Restore Build-Depends: dh-sequence-gnome since it is used by Ubuntu,
to move translations into language packs
-- Jeremy Bícha <jbicha@ubuntu.com> Wed, 08 Nov 2023 14:09:59 +0200
glib2.0 (2.78.1-2) unstable; urgency=medium
* d/patches: Update to upstream glib-2-78 branch commit 2.78.1-9-gb8ef341a9
- In tests, don't assume that sh optimizes simple commands into exec,
hopefully fixing the intermittent gsubprocess test failures on buildds
(especially armhf)
- In tests, fix detection of PTRACE_O_EXITKILL
- Avoid calling a function with side-effects inside
g_return_val_if_fail()
- Tell LeakSanitizer to ignore an intentional one-per-process leak in
the GQuark infrastructure
- Translation update: uk
* d/control: Stop generating from a template.
We don't use any of the other dh-sequence-gnome features (there are no
libtool archives, and we don't use the gnome:Foo family of substvars)
so drop the build-dependency on dh-sequence-gnome.
* Remove version constraints unnecessary since bullseye (oldstable)
* debian/libglib2.0-doc.maintscript: Remove, unnecessary since bullseye
* Remove redundant Name from debian/upstream/metadata
-- Simon McVittie <smcv@debian.org> Thu, 02 Nov 2023 11:07:06 +0000
glib2.0 (2.78.1-1) unstable; urgency=medium
* New upstream release
* Drop patches applied in new release
-- Jeremy Bícha <jbicha@ubuntu.com> Wed, 25 Oct 2023 10:51:14 -0400
glib2.0 (2.78.0-2) unstable; urgency=medium
* d/p/gthreadedresolver-Fix-race-between-source-callbacks-and-f.patch:
Add patch from upstream to fix a race condition that can crash GNOME
Shell (Closes: #1052023)
* d/patches: Update translations from upstream: ca, es, fr, it, ru, sl,
zh_CN
-- Simon McVittie <smcv@debian.org> Sun, 17 Sep 2023 13:27:22 +0100
glib2.0 (2.78.0-1) unstable; urgency=medium
[ Amin Bandali ]
* Change packaging branch to debian/latest
[ Simon McVittie ]
* New upstream stable release
- Temporarily revert a change to error handling for GKeyFile containing
syntactically invalid string escape sequences (Closes: #1051373).
This change is likely to be reverted in 2.79.x.
- Improve ability to debug code using GQuark with gdb
- Add missing noreturn attribute to g_thread_exit()
- Make gutils-user-database unit test work as intended
- Minor build system change not relevant to Debian
- Translation updates
-- Simon McVittie <smcv@debian.org> Fri, 08 Sep 2023 16:53:23 +0100
glib2.0 (2.77.3-1) unstable; urgency=medium
* New upstream release
* d/copyright: Update
* d/libglib2.0-0.symbols: Increase required version for
g_unix_open_pipe().
Software compiled against GLib >= 2.77.3 might be relying on the
ability to pass O_CLOEXEC to this function, which was not previously
allowed.
* d/libglib2.0-dev.install: Install new DTD for GResource XML
* d/control.in: libglib2.0-0 Provides the individual library names.
This binary package combines several distinct SONAMEs. Give it Provides
on the Policy-compliant names that they would have if they had been
packaged separately.
* Fix a typo in the previous changelog entry
-- Simon McVittie <smcv@debian.org> Sun, 03 Sep 2023 12:51:07 +0100
glib2.0 (2.77.2-1) unstable; urgency=medium
[ Jeremy Bícha ]
* New upstream release
* Revert "d/rules: Tell Meson that native builds can run host binaries"
meson 1.2.1 fixed the underlying issue
[ Simon McVittie ]
* d/rules: Increase arbitrary test timeout on all architectures
except x86. Thanks to Adrian Bunk
-- Jeremy Bícha <jbicha@ubuntu.com> Mon, 14 Aug 2023 09:43:06 -0400
glib2.0 (2.77.1-2) unstable; urgency=medium
* Release to unstable (Closes: #1042555)
-- Jeremy Bícha <jbicha@ubuntu.com> Fri, 04 Aug 2023 06:22:24 -0400
glib2.0 (2.77.1-1) experimental; urgency=medium
* New upstream release
* Drop 5 patches applied in new release
* debian/libglib2.0-0.symbols: Add new symbols
-- Jeremy Bícha <jbicha@ubuntu.com> Mon, 31 Jul 2023 09:39:05 +0300
glib2.0 (2.77.0-1) experimental; urgency=medium
[ Jeremy Bícha ]
* New upstream release
* debian/libglib2.0-0.symbols: Add new symbols
* Drop cherry-picked critical warnings patch: applied in new release
* Cherry-pick 2 proposed patches to fix regressions detected by netplan
(LP: #2026826)
[ Sebastien Bacher ]
* Cherry-pick 3 more upstream fixes
-- Jeremy Bícha <jbicha@ubuntu.com> Tue, 25 Jul 2023 09:34:47 -0400
glib2.0 (2.76.4-4) unstable; urgency=medium
* Cherry-pick patch from glib 2.77.0 to once again log missing GFileInfo
attributes as critical warnings instead of debug
-- Jeremy Bícha <jbicha@ubuntu.com> Sun, 23 Jul 2023 18:52:44 -0400
glib2.0 (2.76.4-3) unstable; urgency=medium
* d/rules: When cross-compiling, expect /proc/self/cmdline works on Linux.
This is auto-detected in native builds, but not in cross-builds, because
the auto-detection involves running a host-architecture program.
* d/rules: Tell Meson that native builds can run host binaries.
This is normally true by definition, but the architecture detection
that is used for this regressed on mips64el in 1.2.0.
Mitigates: #1041499
-- Simon McVittie <smcv@debian.org> Wed, 19 Jul 2023 23:03:13 +0100
glib2.0 (2.76.4-2) unstable; urgency=medium
* Release to unstable
-- Jeremy Bícha <jbicha@ubuntu.com> Tue, 18 Jul 2023 16:47:00 -0400
glib2.0 (2.76.4-1) experimental; urgency=medium
* New upstream release
-- Jeremy Bícha <jbicha@ubuntu.com> Thu, 06 Jul 2023 13:31:47 -0400
glib2.0 (2.76.3-1) experimental; urgency=medium
* New upstream release
-- Jeremy Bícha <jbicha@ubuntu.com> Wed, 31 May 2023 14:05:21 -0400
glib2.0 (2.76.2-1) experimental; urgency=medium
* New upstream release
* debian/patches: Refresh
-- Marco Trevisan (Treviño) <marco@ubuntu.com> Fri, 21 Apr 2023 17:29:31 +0200
glib2.0 (2.76.1-1) experimental; urgency=medium
* New upstream release
- Downgrade critical warnings from `GFileInfo` about missing attributes to
debug messages. The downgrade will be reverted for 2.77.
-- Jeremy Bicha <jbicha@ubuntu.com> Sun, 26 Mar 2023 15:38:16 -0400
glib2.0 (2.76.0-1) experimental; urgency=medium
* New upstream release
* Drop patches applied in new release
-- Jeremy Bicha <jbicha@ubuntu.com> Fri, 10 Mar 2023 12:35:36 -0500
glib2.0 (2.75.4-1) experimental; urgency=medium
[ Jeremy Bicha ]
* New upstream release
* Drop 3 patches applied in new release
* Cherry-pick several patches that will be included in 2.76.0
[ Simon McVittie ]
* Add patch to try x-terminal-emulator for Terminal=true apps
(Closes: #773915)
* README.Debian: Add notes on how to choose how Terminal=true apps launch
-- Jeremy Bicha <jbicha@ubuntu.com> Tue, 07 Mar 2023 10:51:15 -0500
glib2.0 (2.75.3-3) experimental; urgency=medium
* Cherry-pick build test fix for glibc 2.37
-- Jeremy Bicha <jbicha@ubuntu.com> Sat, 25 Feb 2023 09:22:04 -0500
glib2.0 (2.75.3-2) experimental; urgency=medium
[ Simon McVittie ]
* d/p/array-test-Don-t-rely-on-endianness-of-multi-byte-numbers.patch:
Add proposed patch to fix FTBFS on big-endian architectures
(Closes: #1031271)
[ Jeremy Bicha ]
* Cherry-pick an implicit conversion change fix
-- Jeremy Bicha <jbicha@ubuntu.com> Thu, 16 Feb 2023 17:58:48 -0500
glib2.0 (2.75.3-1) experimental; urgency=medium
* New upstream release
- Resolves a crash when creating threads in a process with elevated
priority, such as wireplumber (Closes: #1031129)
* d/copyright: Update
* Drop patches that were applied upstream
* d/libglib2.0-0.symbols: Update.
Two private symbols that were not intended to appear in the ABI were
removed. Other Debian packages don't seem to use either.
* d/patches: Update all patches that skip tests to ensure all tests
produce valid TAP syntax
-- Simon McVittie <smcv@debian.org> Mon, 13 Feb 2023 20:49:33 +0000
glib2.0 (2.75.2-1) experimental; urgency=medium
* New upstream release
* d/copyright: Update
* Refresh patch series
* d/libglib2.0-0.symbols: Sort lines
* d/libglib2.0-0.symbols: Update for new ABI
* d/libglib2.0-0.symbols: Use stable-branch versions for older symbols.
We don't need to keep track of precisely which development release
included each symbol: it's enough to generate dependencies on the first
stable release that had it. Debian stable releases shouldn't include
GLib development releases anyway.
* d/p/Include-GObject-s-visibility-header.patch,
d/p/build-Don-t-overwrite-build-variables.patch,
d/p/glib-compile-schemas-Fix-typo-in-comparison-function.patch:
Add some post-release bug fixes from upstream
* d/p/tests-Improve-error-message-if-setting-max-processes-to-1.patch,
d/p/debian/06_thread_test_ignore_prctl_fail.patch:
Split up patch that skipped a test if unable to set RLIMIT_NPROC.
The part that improves the error message could be upstreamable, even if
skipping the test as a result isn't.
* d/p/debian/06_thread_test_ignore_prctl_fail.patch:
Try dropping this patch, to reassess whether we still need it.
* d/p/garray-Update-NULL-termination-after-copying-array-conten.patch,
d/p/garray-Avoid-calling-memcpy-with-no-items.patch:
Add proposed patches to fix a test failure
-- Simon McVittie <smcv@debian.org> Tue, 10 Jan 2023 13:54:58 +0000
glib2.0 (2.75.0-1) experimental; urgency=medium
* d/control.in, d/gbp.conf: Branch for experimental
* New upstream development release
* Refresh patch series, dropping patches that were applied upstream
* Update symbols file
* d/p/gio-Use-hidden-symbol-visibility-in-static-libraries.patch:
Add proposed patch to fix ABI exports
* d/p/type-flags-test-Force-G_ENABLE_DIAGNOSTIC-1-to-be-set.patch:
Add proposed patch to fix an autopkgtest failure
-- Simon McVittie <smcv@debian.org> Sat, 12 Nov 2022 21:13:58 +0000
glib2.0 (2.74.7-1) UNRELEASED; urgency=medium
* New upstream stable release
- Functionally equivalent to 2.74.6-2
(other than the version number, the only differences are
Windows-specific fixes which do not affect the Debian package)
- d/patches: Drop patches that are no longer required
-- Simon McVittie <smcv@debian.org> Fri, 14 Apr 2023 15:45:07 +0100
glib2.0 (2.74.6-2) unstable; urgency=medium
* d/patches: Update to upstream 2.74.x branch commit
2.74.6-12-ga1e169129, omitting Windows-specific changes
- Fix GDBus server interop with sd-bus clients (GNOME/glib#2916)
- Fix use-after-free of a GDBusMethodInvocation in some threaded
use patterns (GNOME/glib#2924)
- Fix a test failure resulting in FTBFS in some container environments
if gdb happens to be installed, but access to ptrace and
/proc/PID/mem is disallowed (GNOME/glib#3307)
-- Simon McVittie <smcv@debian.org> Tue, 04 Apr 2023 09:55:32 +0100
glib2.0 (2.74.6-1) unstable; urgency=medium
* New upstream stable release
- !3239 Backport !3237 “Fix safe_wspawnve #define” to glib-2-74
- Translation updates
-- Jeremy Bicha <jbicha@ubuntu.com> Thu, 02 Mar 2023 15:53:53 -0500
glib2.0 (2.74.5-1) unstable; urgency=medium
* New upstream stable release
* Drop patch that was applied upstream
* Remove version constraints unnecessary since buster (oldstable)
* Update standards version to 4.6.2 (no changes needed)
* d/rules: Explicitly unset LANG and LANGUAGE.
These are not overridden by LC_ALL=C.UTF-8, which can cause a
test failure at glib/tests/spawn-test.c:115, particularly on the
reproducible-builds infrastructure (which uses a random non-English
LANGUAGE for build2).
-- Simon McVittie <smcv@debian.org> Thu, 19 Jan 2023 16:48:31 +0000
glib2.0 (2.74.4-1) unstable; urgency=high
* New upstream release
* Drop patches applied in new release
* Cherry-pick patch from 2-74 branch
-- Jeremy Bicha <jbicha@ubuntu.com> Tue, 27 Dec 2022 14:42:10 -0900
glib2.0 (2.74.3-1) unstable; urgency=high
[ Simon McVittie ]
* New upstream stable release, functionally equivalent to 2.74.2-1
* d/p/gstrfuncs-Fix-regression-in-C-types-accepted-by-g_str_equ.patch:
Drop patch, included in the upstream release
[ Jeremy Bicha ]
* d/patches: Update to upstream 2.74.x branch commit e16fb837
including multiple security related fixes for non-normal GVariants
-- Jeremy Bicha <jbicha@ubuntu.com> Tue, 13 Dec 2022 15:23:22 -0500
glib2.0 (2.74.2-1) unstable; urgency=medium
* d/gbp.conf, d/watch: Only watch for stable releases
* New upstream stable release
* d/control.in: Build-/test-depend on dbus-daemon rather than dbus.
We don't necessarily need to be using dbus as the system bus
implementation: all we need here is dbus-run-session.
* d/patches: Drop patches that were applied upstream
* d/p/gstrfuncs-Fix-regression-in-C-types-accepted-by-g_str_equ.patch:
Add patch from upstream to fix errors when using g_str_equal from C++
-- Simon McVittie <smcv@debian.org> Wed, 30 Nov 2022 13:54:35 +0000
glib2.0 (2.74.1-2) unstable; urgency=medium
* d/patches: Update to upstream 2.74.x branch commit 2.74.1-11-g5ee590045
- Revert a change to file descriptor management that caused an infinite
loop in some gnome-keyring-daemon use-cases
- Fix error behaviour with an invalid proxy address
- Fix a memory leak
- Fix a header multiple-inclusion guard
- Translation updates
* d/p/tests-Don-t-rely-on-output-locale-of-sort-in-spawn-test.patch:
Add patch from upstream git to fix a test failure in non-English locales.
In particular, this should resolve intermittent FTBFS on the
reproducible-builds infrastructure.
* d/p/debian/Disable-some-tests-on-slow-architectures-which-keep-faili.patch:
Mark part of gobject/tests/threadtests.c as flaky on armel, armhf.
This test normally passes in 10-15 seconds, but sometimes takes more
than 5 minutes, resulting in a timeout. It's not clear whether this
is a deadlock, or whether it's just an unlucky access pattern that is
much slower than usual but would have passed the test given enough time.
(Closes: #1023629, #1023652)
* d/tests: Run each flaky test individually.
This will hopefully make it easier to keep track of which ones are still
flaky and which ones can be re-enabled.
-- Simon McVittie <smcv@debian.org> Tue, 08 Nov 2022 10:32:47 +0000
glib2.0 (2.74.1-1) unstable; urgency=medium
[ Laurent Bigonville ]
* debian/control.in: Suggest the low-memory-monitor daemon
[ Simon McVittie ]
* New upstream release
* d/patches: Drop patches that were applied upstream
* d/rules, d/watch, d/copyright: Bundle source for Unicode files.
We can't use the unicode-data Debian package for this, because there's
no guarantee that the version of the Unicode data used in the current
version of GLib will line up with the separately-packaged unicode-data,
and the version used here becomes part of GLib's API/ABI.
* d/copyright: Update
-- Simon McVittie <smcv@debian.org> Tue, 25 Oct 2022 20:38:27 +0100
glib2.0 (2.74.0-3) unstable; urgency=medium
* Cherry-pick 2 patches to fix large thumbnails with Nautilus
(Closes: #1021588) (LP: #1992690)
-- Jeremy Bicha <jbicha@ubuntu.com> Wed, 12 Oct 2022 14:43:19 -0400
glib2.0 (2.74.0-2) unstable; urgency=medium
* d/p/Empty-values-are-not-valid-GParamSpec.patch:
Add patch from upstream to fix GIMP crashes with GLib 2.74.0
(Closes: #1018105)
* d/p/Handling-collision-between-standard-i-o-file-descriptors-.patch,
d/p/gio-launch-desktop-Fix-the-G_STATIC_ASSERT-expressions-fo.patch,
d/p/glib-mkenums-Specify-output-encoding-as-UTF-8-explicitly-.patch,
d/p/gbacktrace-Don-t-truncate-gdb-output.patch,
d/p/gio-make-g_task_get_cancellable-return-value-nullable.patch,
d/p/glocalfileoutputstream-Do-not-double-close-an-fd-on-unlin.patch,
d/p/docs-Fix-markup-error-in-code-blocks-for-DEPRECATED-macro.patch,
d/p/Consider-the-GLogField.length-of-MESSAGE-GLIB_DOMAIN-fiel.patch:
More post-release bug fixes from upstream, which are expected to be
included in 2.74.1
* d/copyright: Consistently use SPDX name for bzip2-1.0.6 license
* Add missing mention of libgdk-pixbuf2.0-dev Suggests change to
previous changelog entry
-- Simon McVittie <smcv@debian.org> Tue, 27 Sep 2022 09:53:09 +0100
glib2.0 (2.74.0-1) unstable; urgency=medium
* New upstream release
* d/p/gio-tool-mount-Return-early-on-fgets-EOF.patch:
Drop patch that was included in the upstream release
* d/control.in: Drop alternative Suggests on libgdk-pixbuf2.0-dev.
libgdk-pixbuf2.0-bin was separated out in 2018, before Debian 10.
-- Simon McVittie <smcv@debian.org> Sun, 18 Sep 2022 17:49:01 +0100
glib2.0 (2.73.3-3) unstable; urgency=medium
[ Simon McVittie ]
* Redo d/copyright in machine-readable format
[ Marco Trevisan (Treviño) ]
* debian/patches: Cherry-pick a regression fix for gio mount on Ctrl+D
-- Marco Trevisan (Treviño) <marco@ubuntu.com> Tue, 30 Aug 2022 18:12:45 +0200
glib2.0 (2.73.3-2) unstable; urgency=medium
[ Simon McVittie ]
* Use meson >= 0.52.0 support for multiple cross-files.
This means we don't have to run debcrossgen and then edit its output
in-place. (Obsoletes: #912559)
* Remove Lintian override for #970275. It was fixed in Lintian.
[ Jeremy Bicha ]
* Release to unstable
* Update Vcs fields for unbranching from experimental
-- Jeremy Bicha <jbicha@ubuntu.com> Mon, 22 Aug 2022 15:23:56 -0400
glib2.0 (2.73.3-1) experimental; urgency=medium
* New upstream development release
* d/copyright: Update
* Ask for multiarch trigger executables via upstream build system.
This avoids needing to move the files around ourselves, and also
ensures that the architecture-specific paths go into the .pc file.
* Update packaging for re-inclusion of gio-launch-desktop
* d/control.in: libglib2.0-tests depends on desktop-file-utils.
glib/file.test needs update-desktop-database.
* d/control.in: add versioned Breaks on old libedataserver-1.2-26.
Older versions go into an infinite loop of memory allocation
with GLib 2.73.x as a result of not handling the addition of
G_TLS_CERTIFICATE_NO_FLAGS correctly (see #1015181).
-- Simon McVittie <smcv@debian.org> Sat, 06 Aug 2022 15:11:00 +0100
glib2.0 (2.73.2-1) experimental; urgency=medium
* New upstream release
- d/control.in: Build-depend on PCRE 2 (Closes: #982310, #1000082)
* d/copyright: Update
* d/patches: Drop patches that were applied upstream
* Update symbols file
* Merge packaging from unstable (no functional changes)
-- Simon McVittie <smcv@debian.org> Wed, 13 Jul 2022 13:39:26 +0100
glib2.0 (2.72.3-1) unstable; urgency=medium
* New upstream release (LP: #1980408)
* Drop GFileMonitor patches applied in new release
-- Jeremy Bicha <jbicha@ubuntu.com> Thu, 30 Jun 2022 16:12:12 -0400
glib2.0 (2.73.1-1) experimental; urgency=medium
* New upstream release
* d/copyright: Update
* d/control.in: Update Meson build-dependency
* Refresh patch series
* d/control.in, d/rules: Drop GIO fam module.
This no longer exists upstream. Hurd users will need to maintain it
separately if desired.
* d/libglib2.0-0.symbols: Update
* d/libglib2.0-0.postinst.in, d/rules, d/tests:
Remove workaround for #896019.
The version of GLib in Debian 11 cleaned up a potential broken state
left behind by Debian 9, and Debian doesn't support skipping a major
release, so Debian 12 no longer needs this.
Similarly, the version in Ubuntu 22.04 LTS had this cleanup, and Ubuntu
doesn't support skipping a LTS release, so 22.10 and 24.04 LTS don't
need this.
* d/tests/run-with-locales: Show what we generated
* d/p/gdatetime-test-Consistently-expect-k-to-generate-a-figure.patch:
Add patch to fix an installed-test failure
* Update Lintian overrides
* Standards-Version: 4.6.1 (no changes required)
* d/p/dataset-Do-not-increment.patch,
d/p/glib-tests-dataset-Add-a-test.patch,
d/p/In-test_datalist_id_remove_multiple-verify-that-the-data-.patch,
d/p/gdataset-Preserve-destruction-order.patch,
d/p/glib-tests-dataset-Test-id_remove_multiple.patch,
d/p/dataset-Rename-i-as-destroy_index-and-move-it-out-of-dest.patch,
d/p/glib-tests-dataset-Use-existing-code.patch:
Add patches to preserve order of GDataList destructors.
This avoids a crash in GTK.
* d/p/Revert-gobject-Use-g_datalist_id_remove_multiple.patch:
Add patch to revert optimizations that trigger a gnome-shell crash
-- Simon McVittie <smcv@debian.org> Sun, 26 Jun 2022 12:06:36 +0100
glib2.0 (2.72.2-2) unstable; urgency=medium
* Update testfilemonitor-Skip-if-we-are-avoiding-flaky-tests.patch
for new testfilemonitor test. Thanks to Philip Withnall
-- Jeremy Bicha <jbicha@ubuntu.com> Tue, 07 Jun 2022 12:21:57 -0400
glib2.0 (2.72.2-1) unstable; urgency=medium
[ Jeremy Bicha ]
* New upstream release
* Cherry-pick patches to fix a GFileMonitor deadlock issue
[ Simon McVittie ]
* d/tests/installed-tests: Assert that at least one test is run
-- Jeremy Bicha <jbicha@ubuntu.com> Fri, 03 Jun 2022 21:11:18 -0400
glib2.0 (2.72.1-1) unstable; urgency=medium
[ Jeremy Bicha ]
* New upstream release (LP: #1969115)
- Includes workaround for meson #1008382
* Add patch to recognize GNOME Console as a terminal app
* Refresh patch
* debian/libglib2.0-0.symbols: Add new symbol
[ Johannes Schauer Marin Rodrigues ]
* debian/libglib2.0-0.postinst.in: only run clean-up-unmanaged-libraries
on upgrades and not on new installations
(Closes: #1008096)
-- Jeremy Bicha <jbicha@ubuntu.com> Thu, 14 Apr 2022 09:35:23 -0400
glib2.0 (2.72.0-1) unstable; urgency=medium
* New upstream release
- Fix assertion failure with time zone offsets >= 25 hours
(Closes: #1007226)
- Various unit test fixes
- Fix a memory leak with an invalid format in g_vasprintf()
- Translation updates
* Merge 2.71.x release history from experimental
- d/gbp.conf, d/control.in: Update branch for upload to unstable
* Upload to unstable
-- Simon McVittie <smcv@debian.org> Fri, 18 Mar 2022 09:05:21 +0000
glib2.0 (2.70.5-1) unstable; urgency=medium
* New upstream release
- Fix assertion failure with time zone offsets >= 25 hours
(Closes: #1007226)
- Fix possible buffer overflow in g_canonicalize_filename()
-- Simon McVittie <smcv@debian.org> Thu, 17 Mar 2022 23:28:00 +0000
glib2.0 (2.70.4-1) unstable; urgency=medium
* New upstream release
* Adjust Lintian overrides for newer Lintian
-- Simon McVittie <smcv@debian.org> Tue, 15 Feb 2022 10:08:01 +0000
glib2.0 (2.71.3-1) experimental; urgency=medium
* New upstream development release
-- Simon McVittie <smcv@debian.org> Tue, 08 Mar 2022 19:53:44 +0000
glib2.0 (2.71.2-1) experimental; urgency=medium
* New upstream development release
* Update symbols file.
Ignore removal of g_debug_controller_dup_default, which was only added
during this development cycle. GLib doesn't guarantee ABI stability
within x.odd.z branches.
* d/p/debian/tests-Skip-debugcontroller-test.patch:
Add patch to skip another unreliable unit test while it's investigated
upstream
-- Simon McVittie <smcv@debian.org> Tue, 15 Feb 2022 20:52:33 +0000
glib2.0 (2.71.1-1) experimental; urgency=medium
* New upstream development release
* Merge packaging changes from unstable
- Use debhelper 13 features instead of dh-exec
* Update symbols file
-- Simon McVittie <smcv@debian.org> Thu, 27 Jan 2022 16:43:04 +0000
glib2.0 (2.70.3-1) unstable; urgency=medium
* New upstream release
- Do not allow empty structs (tuples) in D-Bus messages, resolving a
denial-of-service vulnerability for private GDBus servers that accept
messages from untrusted clients (glib#2557)
- Do not allow deep recursion in serialized GVariant binary data,
resolving a denial of service for anything that loads untrusted
GVariant binary data (glib#2572)
- Fix file descriptor handling when launching subprocesses
- Don't skip fsync when writing out files on btrfs.
This was based on a kernel behaviour that was guaranteed prior to
2014, but is no longer considered to be a guarantee.
- Translation updates
* Use debhelper 13 features instead of dh-exec
debhelper now has ${DEB_HOST_MULTIARCH} substitutions, so we don't need
to use dh-exec for those.
After that, the one remaining dh-exec feature in use was a conditional
installation for the FAM GIO module for Hurd. Open-code this in d/rules
instead.
* d/gbp.conf: Use upstream/2.70.x branch for packaging.
We have already had a 2.71.x release.
-- Simon McVittie <smcv@debian.org> Wed, 26 Jan 2022 20:18:19 +0000
glib2.0 (2.71.0-2) experimental; urgency=medium
* Merge packaging updates from unstable
-- Simon McVittie <smcv@debian.org> Mon, 27 Dec 2021 17:05:59 +0000
glib2.0 (2.70.2-1) unstable; urgency=medium
* New upstream release
* Build-Depend on dh-sequence-gnome and dh-sequence-python3
* debian/rules: Drop environment variable clearing now done for us by dh13
-- Jeremy Bicha <jbicha@debian.org> Sat, 04 Dec 2021 20:58:45 -0500
glib2.0 (2.71.0-1) experimental; urgency=medium
* New upstream development release
* Unfuzz patch series
* Update symbols file
-- Simon McVittie <smcv@debian.org> Mon, 27 Dec 2021 15:04:01 +0000
glib2.0 (2.70.1-1) unstable; urgency=medium
* New upstream release
- Functionally equivalent to previous releases to Debian, except for
Windows-specific changes
* Drop patches that came from upstream
* d/upstream/metadata: Add
* Use debhelper compat level 13
- Drop override for dh_missing --fail-missing, which is now the default
-- Simon McVittie <smcv@debian.org> Fri, 05 Nov 2021 15:58:04 +0000
glib2.0 (2.70.0-3) unstable; urgency=medium
* d/rules: Remove internal_pcre build option, which no longer exists.
Meson 0.60.0 no longer tolerates this.
-- Simon McVittie <smcv@debian.org> Mon, 25 Oct 2021 11:25:31 +0100
glib2.0 (2.70.0-2) unstable; urgency=medium
* d/patches: Update to upstream glib-2-70 branch commit
2.70.0-41-g359a837ee.
Among other fixes, this makes sure we receive change-notification from
NetworkManager (>= 1.31.5), which dropped its legacy PropertiesChanged
signal in favour of using standard D-Bus Properties. (LP: #1946196)
* Add Breaks on older versions of glib-networking-tests.
With this GLib, the old way glib-networking's tests used to mock up
a particular negotiated protocol no longer works.
* Add Breaks on versions of gnome-keyring that had elevated capabilities.
Security hardening in GLib 2.70.0 interferes with their ability to
connect to D-Bus in some system configurations. (See #994961)
* Remove vestigial triggers for /usr/lib/gio/modules.
We no longer load files from that directory (since Debian 11 and Ubuntu
20.04), but we still had a trigger for it, and the postinst still created
a module cache if it existed.
* d/libglib2.0-0.postinst.in: Clean up /usr/lib/gio/modules on upgrade.
This directory would still exist if older versions of GLib created a
cache there.
* d/libglib2.0-0.postinst.in: Add comments indicating when other
workarounds can be removed
* Add Lintian override for a unit test depending on a private library
* Skip memory-monitor-dbus test by default, and add extra debug info.
Helps: #995178
-- Simon McVittie <smcv@debian.org> Sun, 24 Oct 2021 22:41:35 +0100
glib2.0 (2.70.0-1) unstable; urgency=medium
* New upstream release
* d/rules: Make shared objects in installed-tests non-executable
* Remove shebang from taptestrunner.py differently
- Remove shebang from installed file using sed.
This avoids missing the fact that there are two copies in the source,
of which we only patched one.
- d/p/debian/taptestrunner-Stop-looking-like-an-executable-script.patch:
Drop, no longer necessary
* Add Lintian override for #970275
* d/copyright, d/libglib2.0-0.symbols: Update
* d/gbp.conf: Switch upstream branch
* Unfuzz patch series
* Standards-Version: 4.6.0 (no changes required)
-- Simon McVittie <smcv@debian.org> Sun, 19 Sep 2021 17:11:43 +0100
glib2.0 (2.68.4-1) unstable; urgency=medium
* New upstream release
- Avoid a deadlock while finalizing a GLocalFileMonitor
- Correctly use 3 parameters for close_range(), fixing build with
glibc 2.34
- Fix global trash directory detection
- Make g_string_replace() with empty search string behave sensibly
(matching Python str.replace())
- Translation updates: oc, zh_CN, zh_TW
* tests: Specify charset for generated locales to fix FTBFS with new glibc.
glibc 2.31-14 dropped support for all non-UTF-8 locales, so we can't
use /usr/share/i18n/SUPPORTED to choose a suitable charset any more.
* d/rules: Override dh_fixperms to set correct permissions on /usr/libexec.
Making everything executable is not quite right for installed-tests.
-- Simon McVittie <smcv@debian.org> Fri, 20 Aug 2021 10:31:42 +0100
glib2.0 (2.68.3-2) unstable; urgency=medium
* Merge from experimental branch
* Changes relative to 2.68.3-1 in experimental:
- d/watch: Only watch for stable (2.even.z) releases
- d/p/debian/61_glib-compile-binaries-path.patch: Remove.
This patch turns out to be unnecessary, and is harmful for
cross-compiling. Thanks to Helmut Grohne (Closes: #982213)
* Changes relative to previous version in unstable:
- New upstream stable release branch 2.68.x
- Fix maintainer scripts' handling of /usr/lib/MULTIARCH/gio/modules
(Closes: #987913, see 2.68.1-2 changelog)
- Mark dbus as <!nocheck> <!noinsttest>.
Several of the installed-tests won't be built unless dbus-daemon is
available, so <!nocheck> is insufficient.
- Move test-dependencies to Build-Depends-Arch.
We don't run the majority of the tests when we're only building the
documentation.
- Remove an unused Lintian override
- Add more Lintian overrides for test data
- Use d/tests/run-with-locales for better locale-sensitive test coverage
* d/rules: Fix dead link when documenting why we use -Wl,--no-as-needed
* Bump minimum GLib version for callers of g_dbus_server_new_sync()
Programs that call this function might be passing in the new flag
G_DBUS_CONNECTION_FLAGS_AUTHENTICATION_REQUIRE_SAME_USER, which is
security-significant. Don't allow such programs to be built against
GLib 2.68 and run with GLib 2.66 or older.
* Add Breaks on libsoup2.4-tests before 2.72.0-3.
Older versions of the libsoup test suite had an assertion that would
only succeed because of a GLib bug, which is fixed in 2.68.x. Newer
versions tolerate the bug, but do not require it.
-- Simon McVittie <smcv@debian.org> Sun, 15 Aug 2021 14:57:30 +0100
glib2.0 (2.68.3-1) experimental; urgency=medium
* New upstream release 2.68.3, fixing bugs:
- GFile: `g_file_replace_contents()` reports `G_IO_ERROR_WRONG_ETAG` when
saving from a symlink
- glocalfileoutputstream: Fix ETag check when replacing through a symlink
- gmacros: check that __cplusplus or _MSC_VER is defined
- gmacros: missing check if __STDC_VERSION__ is defined
- gthreadedresolver: don't ignore flags in lookup_by_name_with_flags
- inotify: Fix a memory leak
- json-glib does not build with glib 2.68.1
- testfilemonitor test leaks ip_watched_file_t struct
- tlscertificate: Avoid possible invalid read
-- Iain Lane <laney@debian.org> Tue, 29 Jun 2021 15:24:06 +0100
glib2.0 (2.68.1-2) experimental; urgency=medium
* Fix maintainer scripts' handling of /usr/lib/MULTIARCH/gio/modules:
- postrm: Only delete GIO module cache on remove or purge.
Despite its name, the postrm can be invoked for reasons other than
package removal: in particular, the old version's postrm is run
during upgrades.
- postinst: Recreate GIO module directory if deleted by an older
postrm, to recover from the bug fixed here.
- postinst: Don't guard glib-compile-schemas or gio-querymodules with
a check for existence of a directory that is shipped in the .deb.
If such a directory has somehow gone missing, we want to see
a warning. This won't make the postinst fail, because we're ignoring
exit status anyway.
(Closes: #987913)
-- Simon McVittie <smcv@debian.org> Sun, 02 May 2021 14:45:36 +0100
glib2.0 (2.68.1-1) experimental; urgency=medium
* New upstream stable release
* d/tests/run-with-locales: Avoid FTBFS with locales-all installed
-- Simon McVittie <smcv@debian.org> Thu, 15 Apr 2021 09:42:05 +0100
glib2.0 (2.68.0-1) experimental; urgency=medium
* New upstream stable release
- Drop dead code from glib-compile-schemas
- Improve valgrind suppressions
- Fix error in g_bytes_icon_new() documentation
- Avoid close(-1) during error handling
- Fix copy/paste error in queue test
- Translation updates
* Add CVE ID references to previous changelog entries.
CVE IDs were not yet available at the time these vulnerabilities were
initially fixed.
-- Simon McVittie <smcv@debian.org> Sat, 20 Mar 2021 15:42:00 +0000
glib2.0 (2.67.6-1) experimental; urgency=medium
* New upstream release
- This fixes a symlink attack affecting file-roller.
When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION
to replace a path that is a dangling symlink, previously it would
have also created the target of the symlink as an empty file, which
could conceivably be security-sensitive if the symlink is
attacker-controlled. (Closes: #984969; CVE-2021-28153)
* Revert test-dependency on libc6-dev, which should no longer be
necessary with the new upstream release.
-- Simon McVittie <smcv@debian.org> Mon, 15 Mar 2021 18:18:48 +0000
glib2.0 (2.67.5-2) experimental; urgency=medium
* debian/tests/control: Test-Depend on libc6-dev; the `pollable` test
requires it. See [upstream MR !1977][0]. The upstream tests now rely on
finding "libutil.so", which is in libc6-dev. Once that MR, or something
like it, is merged, we can remove this test-dep as the runtime library
will be being used.
[0]: https://gitlab.gnome.org/GNOME/glib/-/merge_requests/1977
-- Iain Lane <laney@debian.org> Tue, 02 Mar 2021 18:29:23 +0000
glib2.0 (2.67.5-1) experimental; urgency=medium
* New upstream release
+ Fix more issues with `glib_typeof` macro from 2.67.3–2.67.4 (LP:
#1916705)
+ Fix regression with some FD mappings passed to
`g_subprocess_launcher_spawnv()` (Closes: #983026) (LP: #1916701)
* debian/watch: Fix to not match `..`. The watch file was matching the
"Parent directory/" link and considering that the highest, since its
target is `..`. Expect 1+ digits to begin the version number.
-- Iain Lane <laney@debian.org> Mon, 01 Mar 2021 17:18:36 +0000
glib2.0 (2.67.4-1) experimental; urgency=medium
* New upstream release
- Among other changes, this should fix FTBFS on armel
* d/libglib2.0-0.symbols: Add g_spawn_async_with_pipes_and_fds
-- Simon McVittie <smcv@debian.org> Wed, 17 Feb 2021 09:58:25 +0000
glib2.0 (2.67.3+git20210214-1) experimental; urgency=medium
* d/changelog: Add bug reference for GHSL-2021-045 to previous entry
* New upstream git snapshot; among other changes:
- Fix regressions caused by the GHSL-2021-045 fixes in 2.67.3
- Warn and fail on integer overflow in g_byte_array_new_take()
for arrays larger than G_MAXUINT
(Closes: #982779; CVE-2021-27218)
* d/libglib2.0-0.symbols: Add g_string_replace()
* Refresh patch series
* d/rules, d/tests: Generate various locales mentioned in the tests
* Mark dbus as <!nocheck> <!noinsttest>.
Several of the installed-tests won't be built unless dbus-daemon is
available, so <!nocheck> is insufficient.
* Move test-dependencies to Build-Depends-Arch.
We don't run the majority of the tests when we're only building the
documentation.
* Remove an unused Lintian override
* Add more Lintian overrides for test data
-- Simon McVittie <smcv@debian.org> Sun, 14 Feb 2021 17:27:54 +0000
glib2.0 (2.67.3-1) experimental; urgency=medium
* New upstream release
- Fix various integer overflows, some of them potentially exploitable
(Closes: #982778; CVE-2021-27219, GHSL-2021-045)
* Drop patches that came from upstream or were applied upstream
-- Simon McVittie <smcv@debian.org> Thu, 04 Feb 2021 22:38:42 +0000
glib2.0 (2.67.2-1) experimental; urgency=medium
* New upstream release
* Refresh patch series
* d/patches: Cherry-pick some fixes from upstream git master.
This is mostly for parity with the update to 2.66.x that I'm preparing
for unstable, which also includes the XDG_CURRENT_DESKTOP fixes.
* d/p/spawn-Don-t-set-a-search-path-if-we-don-t-want-to-search-.patch:
Make the g_spawn family only search PATH if G_SPAWN_SEARCH_PATH is used.
Previously, they would sometimes search /usr/bin:/bin:. for an
executable they should have only loaded from the current working
directory. In particular, this made gtk+3.0 fail its build-time tests
if ImageMagick display(1) happened to be installed. (Closes: #977961)
-- Simon McVittie <smcv@debian.org> Wed, 27 Jan 2021 12:57:48 +0000
glib2.0 (2.67.1-1) experimental; urgency=medium
* Branch for experimental and 2.67.x
* New upstream development release
* Temporarily use git to fetch upstream release.
The official tarball release doesn't seem to have made it onto mirrors.
* d/rules: Explicitly enable libelf dependency for gresource tool
* d/p/Handle-the-case-of-g_object_run_dispose-in-GBinding.patch:
Add patch from upstream to fix a regression in GBinding that caused
gnome-terminal-server to crash on startup
-- Simon McVittie <smcv@debian.org> Fri, 11 Dec 2020 11:16:25 +0000
glib2.0 (2.66.8-1) unstable; urgency=medium
* d/watch: Only watch for 2.66.x versions.
2.68.0 has been released but will not be in bullseye.
* New upstream release
- Functionally equivalent to 2.66.7-2, except for the version number
and a change to Windows-specific code that is not used in Debian
* Drop patches that were included in the new upstream release
* d/p/glocalfileoutputstream-Tidy-up-error-handling.patch:
Add patch from upstream to clean up error handling.
After the fix for #984969, this function could end up calling close(-1),
which is harmless but gets flagged as an error by static analysis and
by error-checking instrumentation. Fixing this will prevent it from
obscuring real errors.
* Add CVE references in recent changelog entries.
CVE IDs for the vulnerabilities were not available at the time they were
fixed, but now they are.
-- Simon McVittie <smcv@debian.org> Sat, 20 Mar 2021 15:35:19 +0000
glib2.0 (2.66.7-2) unstable; urgency=medium
* d/changelog: Add bug numbers for integer overflows in previous versions
* Add patches to fix a symlink attack affecting file-roller.
When g_file_replace() is used with G_FILE_CREATE_REPLACE_DESTINATION to
replace a path that is a dangling symlink, previously it would have also
created the target of the symlink as an empty file, which could
conceivably be security-sensitive if the symlink is attacker-controlled.
(Closes: #984969; CVE-2021-28153)
-- Simon McVittie <smcv@debian.org> Thu, 11 Mar 2021 10:23:38 +0000
glib2.0 (2.66.7-1) unstable; urgency=high
* New upstream release
- Fix another regression caused by the GHSL-2021-045 fixes in 2.66.6
- Warn and fail on integer overflow in g_byte_array_new_take()
for arrays larger than G_MAXUINT
(Closes: #982779; CVE-2021-27218)
- Disallow using currently-undefined D-Bus connection or server flags,
to prevent forward-compatibility problems with new security-sensitive
flags that are likely to be introduced in GLib 2.68
* Drop previous patches for GHSL-2021-045 regressions, applied upstream
-- Simon McVittie <smcv@debian.org> Thu, 11 Feb 2021 17:08:14 +0000
glib2.0 (2.66.6-2) unstable; urgency=high
* d/patches: Add proposed fixes for regressions in 2.66.6.
Two functions that took either a positive length, or -1 to indicate
strlen(), had assertions with the wrong sense in 2.66.6, causing some
valid uses of those functions to regress.
* d/p/debian/61_glib-compile-binaries-path.patch: Remove.
This patch turns out to be unnecessary, and is harmful for
cross-compiling. Thanks to Helmut Grohne (Closes: #982213)
* Set high urgency to get the regression fixes into bullseye
-- Simon McVittie <smcv@debian.org> Mon, 08 Feb 2021 19:43:08 +0000
glib2.0 (2.66.6-1) unstable; urgency=high
* New upstream release
- Fix various integer overflows, some of them potentially exploitable
(Closes: #982778; CVE-2021-27219, GHSL-2021-045)
-- Simon McVittie <smcv@debian.org> Thu, 04 Feb 2021 20:24:20 +0000
glib2.0 (2.66.5-1) unstable; urgency=medium
* New upstream release, equivalent to 2.66.4-27-g0051c0635
* Drop patches that were applied upstream
-- Simon McVittie <smcv@debian.org> Wed, 03 Feb 2021 19:16:01 +0000
glib2.0 (2.66.4-4) unstable; urgency=medium
* d/patches: Update patch series to upstream commit 2.66.4-27-g0051c0635
- Improve test coverage for #977961
- Stop valgrind reporting memory leaks in GSpawn in most cases
- Partially revert security hardening from 2.66.4-2: allow
DBUS_SESSION_BUS_ADDRESS to be taken from the environment by
setcap executables (to avoid regressing gnome-keyring) and by
setgid executables (to avoid regressing msmtp).
(Closes: #981420, #981555)
Note that this is likely to be reverted in GLib 2.70.x to provide
better hardening. The D-Bus session bus is not designed to be used
by processes that have elevated privileges.
-- Simon McVittie <smcv@debian.org> Wed, 03 Feb 2021 13:55:41 +0000
glib2.0 (2.66.4-3) unstable; urgency=medium
* Improve patch for #977961, and add basic test coverage
-- Simon McVittie <smcv@debian.org> Thu, 28 Jan 2021 19:05:50 +0000
glib2.0 (2.66.4-2) unstable; urgency=medium
* d/patches: Update patch series to upstream commit 2.66.4-18-g872181c4f
(excluding Windows-specific changes)
- Security hardening: in GIO, ignore various environment variables
if GIO is (inadvisably) used in a setuid process without sanitizing
the environment first, similar to CVE-2012-3524
- Reject very long date strings early, instead of spending time
normalizing and parsing them
- Fix recursion in GPrivate
* d/p/spawn-Don-t-set-a-search-path-if-we-don-t-want-to-search-.patch:
Make the g_spawn family only search PATH if G_SPAWN_SEARCH_PATH is used.
Previously, they would sometimes search /usr/bin:/bin:. for an
executable they should have only loaded from the current working
directory. In particular, this made gtk+3.0 fail its build-time tests
if ImageMagick display(1) happened to be installed. (Closes: #977961)
-- Simon McVittie <smcv@debian.org> Wed, 27 Jan 2021 11:33:06 +0000
glib2.0 (2.66.4-1) unstable; urgency=medium
* New upstream release
-- Simon McVittie <smcv@debian.org> Fri, 18 Dec 2020 17:26:51 +0000
glib2.0 (2.66.3-2) unstable; urgency=medium
* Apply packaging changes from experimental to unstable:
- postinst: Clean up outdated copies of GLib if present, to avoid
infrequent upgrade issues on non-merged-/usr systems.
See #911225 and #949395 for more information.
(Closes: #896019, #954960, #955331)
* Add myself to Uploaders
* Standards-Version: 4.5.1 (no changes required)
* Swap Homepage field to something more GLib-specific
* d/gbp.conf: Change upstream branch to upstream/2.66.x.
2.67.0 was already released, so it's inaccurate to say that 2.66.x
is the latest.
-- Simon McVittie <smcv@debian.org> Wed, 02 Dec 2020 12:28:42 +0000
glib2.0 (2.66.3-1+exp1) experimental; urgency=medium
* Merge from unstable
-- Simon McVittie <smcv@debian.org> Thu, 19 Nov 2020 20:47:54 +0000
glib2.0 (2.66.3-1) unstable; urgency=medium
* Team upload
* New upstream release
- Improve performance of processing files hidden via ./.hidden
- All other changes were already included in 2.66.2-1
* Drop patches that were cherry-picked from upstream
* Stop reverting gtk-doc dependency version.
We now have a suitable gtk-doc in Debian.
* Drop a patch that was not applied upstream.
This was hoped to be a workaround for intermittent test failures, but
doesn't seem to have had the desired effect in practice.
* Mark the DBUS_COOKIE_SHA1 parts of gdbus-server-auth test as flaky.
This is not reliable enough to always pass on buildds, but is too
intermittent to be able to reproduce the failure in a development
environment, and DBUS_COOKIE_SHA1 is not an important enough feature
to justify failing the build for this.
As with other flaky tests, we still run this as an autopkgtest in an
attempt to get more useful information, but we ignore failure.
-- Simon McVittie <smcv@debian.org> Thu, 19 Nov 2020 11:11:06 +0000
glib2.0 (2.66.2-1+exp1) experimental; urgency=medium
* Branch for experimental
* postinst: Clean up outdated copies of GLib to avoid infrequent
upgrade issues on non-merged-/usr systems
(Closes: #896019, #954960, #955331)
-- Simon McVittie <smcv@debian.org> Sun, 01 Nov 2020 13:11:00 +0000
glib2.0 (2.66.2-1) unstable; urgency=medium
* Team upload
* New upstream release
- Add some missing (nullable) and (not nullable) annotations
* Drop patches that were cherry-picked from upstream
* Update patch series to upstream 2.66.2-9-g4daaf303a
- Fix race in socketclient-slow test
- Cope with sending fds in a D-Bus message that takes multiple writes
- Don't skip updating polled fd sources
- Add G_GNUC_PRINTF annotation to g_trace_mark()
* d/p/glib-tests-fileutils-Make-more-use-of-g_assert_no_errno.patch,
d/p/glib-tests-fileutils-Fix-expectations-when-running-as-roo.patch:
Add proposed patch to fix a test failure when running as root
(Closes: #973271)
* d/rules: Remove migration path from legacy -dbg package.
This was most recently shipped in Debian 9, and we don't support
upgrades from anything older than Debian 10.
* Drop obsolete workaround for #887629.
We don't support upgrades from versions older than Debian 10, so we can
drop workarounds that were only relevant for the upgrade from 9 to 10.
-- Simon McVittie <smcv@debian.org> Sat, 31 Oct 2020 13:54:56 +0000
glib2.0 (2.66.1-2) unstable; urgency=medium
* Cherry-pick patches from the glib-2-66 branch upstream
- Fixes the regression called out in 2.66.1-1's changelog.
* Add-a-test-for-the-6-days-until-EOM-bug.patch,
Fix-the-6-days-until-the-end-of-the-month-bug.patch: Cherry-pick upstream
mr!1705 to not break on timezones built with `zic -b slim`
-- Iain Lane <laney@debian.org> Fri, 16 Oct 2020 17:38:50 +0100
glib2.0 (2.66.1-1) unstable; urgency=medium
* Team upload
* New upstream release
- A performance problem where timezones were reloaded from disk
every time a GTimeZone was created has been fixed (upstream issue
#2204), but this means that changes to /etc/localtime will not take
effect until a process restarts. Future changes in a subsequent
2.66.x release will improve this.
- Security fix for incorrect scope/zone ID parsing in URIs
- Fix invalid Pointer Arithmetic in g_path_get_basename
- Fix cookie lifetimes in GDBus DBUS_COOKIE_SHA1 mechanism
- Fix faulty logic in DNS TXT record parsing
- trash portal: Handle portal failures
- gio-tool-trash: Prevent recursion to speed up emptying trash
- glist: Clarify that g_list_free() and friends only free an entire list
- gdatetime: Avoid integer overflow creating dates too far in the past
- Translation updates
* d/p/glocalfile-Never-require-G_LOCAL_FILE_STAT_FIELD_ATIME.patch,
d/p/gdbusauthmechanismsha1-Use-the-same-timeouts-as-libdbus.patch:
Drop patches that were applied upstream
-- Simon McVittie <smcv@debian.org> Mon, 12 Oct 2020 09:31:27 +0100
glib2.0 (2.66.0-2) unstable; urgency=medium
* Team upload
* d/p/glocalfile-Never-require-G_LOCAL_FILE_STAT_FIELD_ATIME.patch:
Add proposed patch to fix file copying on ZFS and CIFS (Closes: #970228)
* d/p/gdbus-server-auth-Don-t-usually-test-non-EXTERNAL-repeate.patch:
Add proposed patch to work around DBUS_COOKIE_SHA1 test failures
* d/p/Revert-gtk-doc-dependency-to-1.32.patch: Move to debian subdirectory.
This patch is not intended to go upstream.
-- Simon McVittie <smcv@debian.org> Tue, 15 Sep 2020 22:12:49 +0100
glib2.0 (2.66.0-1) unstable; urgency=medium
* Team upload
* New upstream stable release
- Fix missing tab in makefile rule
- guri: Fix user passed to g_uri_split_with_user() not being NULL'd
- Translation updates:
* d/watch: Only watch for stable releases
* d/p/gdbusauthmechanismsha1-Use-the-same-timeouts-as-libdbus.patch:
Add patch to fix intermittent test failures on slower architectures.
This narrowly missed the upstream code freeze, and should be in 2.66.1.
-- Simon McVittie <smcv@debian.org> Fri, 11 Sep 2020 09:18:58 +0100
glib2.0 (2.65.3-1) experimental; urgency=medium
* New upstream release
+ Fixes to the new `statx()` calls — note that since GLib 2.65.2 uses
`statx()` (if available) instead of
`stat()`/`fstat()`/`lstat()`/`fstatat()`, syscall sandboxing for third
party applications might need to be updated
+ Also includes "Fix splice behavior on cancellation", a fix for a bug
which was affecting tracker - particularly its autopkgtests.
-- Iain Lane <laney@debian.org> Thu, 03 Sep 2020 18:55:20 +0100
glib2.0 (2.65.2-1) experimental; urgency=medium
* Team upload
* New upstream development release
* d/rules: Run gtk-doc checks, even if building indep-only.
Previously we would only run the gtk-doc checks if building
architecture-dependent and -independent packages in the same build,
which is done on Ubuntu amd64 buildds, but not on any Debian buildds.
* Reduce dependency to the version of gtk-doc-tools from unstable.
Instead of being some random snapshot from upstream git, this is the
last release plus some selected patches. In particular, it has enough
fixes to make the gtk-doc tests pass (Closes: #968975).
* d/libglib2.0-tests.lintian-overrides: Update
-- Simon McVittie <smcv@debian.org> Tue, 25 Aug 2020 12:44:02 +0100
glib2.0 (2.65.1-1) experimental; urgency=medium
[ Sebastien Bacher ]
* debian/control.in:
- let libglib2.0-tests Depends on libglib2.0-0 (= ${binary:Version}),
otherwise we can end up with failures due to out of sync versions
[ Simon McVittie ]
* d/shlibs.local: Upgrade all binary packages in lockstep.
Like many projects where one source package builds multiple binary
packages, GLib has private headers that share non-public interfaces
between its binary packages. Instead of setting this up for individual
binary packages, we can tell dpkg-shlibdeps to generate lockstep
dependencies whenever one of our binary packages depends on our shared
libraries.
* d/watch, d/control.in, d/gbp.conf: Branch for experimental
* New upstream development release
- Require the experimental version of gtk-doc-tools.
GLib 2.65.x requires a version that hasn't been released yet.
- Update symbols file
- Drop patches that were applied upstream
-- Simon McVittie <smcv@debian.org> Fri, 07 Aug 2020 15:44:34 +0100
glib2.0 (2.64.4-1) unstable; urgency=medium
* Team upload
* New upstream release
- Improve async-signal-safety
* d/tests/build: Don't exercise static linking for GIO.
libmount will no longer support being linked statically from 2.35.2-8
onwards. For now I'm continuing to test that the other libraries can
still be statically linked, but please consider them to be "at risk".
(Closes: #963933)
* Re-enable libmount support.
libmount no longer depends on libcryptsetup, avoiding the various
crashes that we are working around. Future versions will dlopen it
on-demand, which should also avoid those crashes. Bump the
build-dependency to a suitable version.
* d/p/tests-Use-g_assert_-in-cancellable-test-rather-than-g_ass.patch,
d/p/gcancellable-Fix-minor-race-between-GCancellable-and-GCan.patch:
Split combined d/p/git_gsource_segfault.patch into its two component
upstream commits, and add metadata
* d/p/glib-compile-resources-Fix-exporting-on-Visual-Studio.patch,
d/p/gdesktopappinfo-Fix-unnecessarily-copied-and-leaked-URI-l.patch:
Add post-release bugfixes from upstream
-- Simon McVittie <smcv@debian.org> Tue, 07 Jul 2020 13:33:01 +0100
glib2.0 (2.64.3-2) unstable; urgency=medium
* Team upload
* Temporarily disable libmount support.
Recent Debian revisions of libmount pull in libcryptsetup as a
dependency, for dm-verity support. libcryptsetup depends on json-c
and OpenSSL, causing crashes due to symbol conflicts with other
JSON libraries (jansson and json-glib, for example in firewalld and
virt-manager) and with statically-linked copies of OpenSSL (for
example in Steam and Minecraft). Until this is resolved in some
other way, disable libmount and parse /etc/fstab and /proc/mounts
ourselves, as we do in libglib2.0-udeb.
Mitigates: #963933, #963932, #963525, #963721
-- Simon McVittie <smcv@debian.org> Thu, 02 Jul 2020 10:05:03 +0100
glib2.0 (2.64.3-1) unstable; urgency=medium
* Team upload
[ Laurent Bigonville ]
* Drop the libgio-fam package, and install the fam GIO plugin in
libglib2.0-0 on Hurd ports. See: #885011 (Closes: #875915)
* Stop building the libgio-fam package on kFreeBSD ports.
It is no longer necessary now that gkqueuefilemonitor is available.
[ Simon McVittie ]
* Clarify changelog entry regarding Hurd and kFreeBSD
* New upstream stable release
-- Simon McVittie <smcv@debian.org> Fri, 29 May 2020 20:24:33 +0100
glib2.0 (2.64.2-1) unstable; urgency=medium
[ Simon McVittie ]
* Add Breaks on older versions of gimp, which used a syntactically
invalid property name in a plugin, and would crash when GObject
rejects syntactically invalid property names
[ Sebastien Bacher ]
* New upstream release
* debian/patches/git_gsource_segfault.patch:
- backport an upstream git change to fix a signal handler disconnect
segfault situation (lp: #1872153)
-- Sebastien Bacher <seb128@ubuntu.com> Wed, 15 Apr 2020 23:01:50 +0200
glib2.0 (2.64.1-1) unstable; urgency=medium
* Team upload
* New upstream stable release
* d/p/tests-Skip-MemoryMonitor-test-if-GObject-Introspection-is.patch:
Drop patch, applied upstream
* Add Breaks on glib-networking-tests older than 2.63.2.
Those versions had a test that relied on TLS version fallback
behaviour that has now been removed. (Closes: #953766)
-- Simon McVittie <smcv@debian.org> Sun, 15 Mar 2020 18:39:17 +0000
glib2.0 (2.64.0-2) unstable; urgency=medium
* Team upload
* Merge packaging changes from unstable with new upstream release from
experimental
* d/control.in: Add Breaks on libgladeui-2-6 before 3.22.2.
Older versions used a syntactically invalid property name
"support warning", which GObject used to canonicalize to
"support-warning". GLib 2.64 made this check more strict (see #953010).
-- Simon McVittie <smcv@debian.org> Tue, 10 Mar 2020 21:22:18 +0000
glib2.0 (2.64.0-1) experimental; urgency=medium
* Team upload
* New upstream release
- Fixes a vulnerability where GSocketClient sometimes forgot to use
a configured proxy (CVE-2020-6750, Closes: #948554)
- Stop installing gio-launch-desktop, which no longer exists
- d/p/docs-Don-t-install-object-manager-example-separately.patch:
Drop, applied upstream
* d/p/debian/testfilemonitor-Skip-if-we-are-avoiding-flaky-tests.patch:
Treat testfilemonitor as a flaky test
* Standards-Version: 4.5.0 (no changes required)
* New upstream release
* d/p/tests-Skip-MemoryMonitor-test-if-GObject-Introspection-is.patch:
Skip MemoryMonitor test if GObject-Introspection is too old to know it
* Install a shell script implementation of the old gio-launch-desktop
executable. While not required for *this* GLib, it is required by
old processes that already had the old GLib (2.57.2 to 2.63.5) in
memory before the upgrade. This can be removed after Ubuntu 20.04
and Debian 11 are both released.
-- Simon McVittie <smcv@debian.org> Fri, 28 Feb 2020 17:16:04 +0000
glib2.0 (2.63.5-2) experimental; urgency=medium
* Skip-unreliable-gdbus-threading-tests--by-default.patch: Skip all of
gdbus-threading test_method_calls_in_thread() has become (more?)
unreliable too. When skipped, the test bus doesn't get torn down properly
- it times out. Let's stop running these tests for now, until they are
made reliable.
-- Iain Lane <laney@debian.org> Wed, 19 Feb 2020 17:16:16 +0000
glib2.0 (2.63.5-1) experimental; urgency=medium
[ Iain Lane ]
* New upstream release
[ Philip Withnall ]
* Rework 01_gettext-desktopfiles.patch to not add new public API.
Downstreams should not be adding new public API to GLib. From some code
searching, this doesn’t appear to be used in more than one or two places,
so won’t be too inconvenient to drop. The original patch should either be
upstreamed (I’d be open to some form of it, if there’s still evidence it’s
useful) or dropped. If it’s upstreamed, the new keys should be
standardised. The alternative to this was to document the added public
API; its addition was causing the new gtk-doc tests in GLib to fail.
* Bump gtk-doc-tools dependency to >= 1.32-4 as GLib requires some fixes
pushed to gtk-doc after its 1.32 release.
* control: Bump Meson dependency to >= 0.52.0 for building the documentation
* Drop PKCS#11 APIs added in 2.63.1 (not stable yet)
- g_tls_certificate_new_from_pkcs11_uris()
* Remove patches applied upstream:
- tests-Skip-GMemoryMonitor-tests-if-the-dbusmock-template-.patch
- tests-optional-portal.patch
* d/p/docs-Don-t-install-object-manager-example-separately.patch: Add patch
from upstream to disable incorrect installation of some example
documentation
* Rework libmount Meson argument as it’s now a feature; see !1344 upstream
-- Iain Lane <laney@debian.org> Mon, 17 Feb 2020 17:47:17 +0000
glib2.0 (2.63.3-3) experimental; urgency=medium
* debian/control.in:
- lower the libglib2.0-tests Depends on xdg-desktop-portal to a
Recommends since the portal is not available on some architectures
* debian/patches/tests-optional-portal.patch:
- skip the new memory monitor tests if the portal is not available,
that allows the tests to be still successful on architectures were
the portal is not available (e.g Ubuntu/i386)
-- Sebastien Bacher <seb128@ubuntu.com> Wed, 22 Jan 2020 09:36:27 +0200
glib2.0 (2.63.3-2) experimental; urgency=medium
* debian/control.in:
- libglib2.0-tests Depends on xdg-desktop-portal, it's required by the
new low memory tests (and got enabled by the new python-dbusmock)
-- Sebastien Bacher <seb128@ubuntu.com> Thu, 16 Jan 2020 10:28:46 +0100
glib2.0 (2.63.3-1) experimental; urgency=medium
[ Iain Lane ]
* New upstream release
+ Add a `--glib-min-version` argument to `gdbus-codegen` which controls
breaks in the API of generated code
+ Add `g_clear_list()` API to clear `GList`s to `NULL`
+ Add a `GMemoryMonitor` API to be notified of memory pressure situations
using the low-memory-monitor project
+ Add support for dispose functions for `GSource` implementations
+ Tighten up validation of GObject signal and property names, allowing
performance improvements
* debian/tests/build: Style fixes, thanks to shellcheck.
* d/p/d/Disable-some-tests-on-slow-architectures-which-keep-faili.patch:
Rebase. Upstream have disabled these tests by default too (unless slow
mode is enabled), so we don't need to add a patch to do a similar thing.
* debian/libglib2.0-0.symbols: New symbols for 2.63.3
* d/p/tests-Skip-GMemoryMonitor-tests-if-the-dbusmock-template-.patch: Add.
We don't have a new enough dbusmock in Debian at the minute (one is not
released yet). Skip the test if the required template isn't available.
* control: Add Depends for the new memory-monitor tests.
There are new tests, written in python, for GMemoryMonitor. They require
dbus-python, pygobject, and the GI bindings for GLib and GIO.
[ Steve Langasek ]
* debian/tests/build: Make cross-test friendly
autopkgtest is soon to get a `-a ARCHITECTURE` switch, which will
cross-test autopkgtests. This is to be detected by the presence of the
`dpkg-architecture`-style family of variables being set in the
environment.
For build tests like `glib2.0`'s `build` test, this means that we should
test "${DEB_HOST_ARCH}" and invoke the cross toolchain as necessary.
(Closes: #946355)
-- Iain Lane <laney@debian.org> Wed, 18 Dec 2019 14:02:00 +0000
glib2.0 (2.63.2-1) experimental; urgency=medium
* Team upload
* Merge packaging changes from unstable
- Support for pkg.glib2.0.noinsttest build profile
* d/control.in: Refer to debian/experimental branch.
This avoids false-positive warnings from vcswatch.
* New upstream release
- Drop patches that were applied upstream
* Rename pkg.glib2.0.noinsttest build profile to noinsttest.
This is now registered on <https://wiki.debian.org/BuildProfileSpec>.
* Update symbols file
-- Simon McVittie <smcv@debian.org> Sat, 30 Nov 2019 10:55:48 +0000
glib2.0 (2.63.1-2) experimental; urgency=medium
* d/p/Revert-glocalfileinfo-Only-return-file-mode-not-type-as-U.patch:
Revert "glocalfileinfo: Only return file mode, not type, as UNIX_MODE
attribute" This reverts commit bfdc5fc4fc84ef8518d2d1a328c8482cf5a38e98.
This commit changes the semantics of the `unix::mode` attribute, which
some things (the one we've noticed is ostree) rely on.
* d/p/test_copy_preserve_mode-Adjust-for-revert-semantics.patch:
test_copy_preserve_mode: Adjust for revert semantics. Now we're returning
the file type again, we need to mask it out to compare with the mode.
-- Iain Lane <laney@debian.org> Mon, 18 Nov 2019 13:59:35 +0000
glib2.0 (2.63.1-1) experimental; urgency=medium
* New upstream release
- Add `g_array_steal()`, `g_ptr_array_steal()` and `g_byte_array_steal()`
APIs
- Add `g_get_os_info()` API
- Add `GMainContextPusher` API
- Add `g_warning_once()` API
- Allow passing empty `GValue`s to `g_param_value_set_default()`
- Always resolve `localhost` to loopback address in `GResolver`
- Escape header guards generated by `gdbus-codegen` better
- Fix crash in `g_spawn()` with high FD numbers due to use of `select()`
rather than `poll()`
- Limit recursion in `g_variant_parse()`
- Several usability improvements to command line `gio` tool
* debian/libglib2.0-0.symbols: Add new symbols for this release
* debian/patches/*:
- Drop backports we had which are in this release.
- Update to upstream master at cc1b53f74. There are several test fixes
that we might as well grab now.
-- Iain Lane <laney@debian.org> Wed, 06 Nov 2019 16:37:24 +0000
glib2.0 (2.62.5-1) unstable; urgency=medium
* Team upload
* New upstream release
- Fixes a vulnerability where GSocketClient sometimes forgot to use
a configured proxy (CVE-2020-6750, Closes: #948554)
* Build-depend on libnss-myhostname | netbase if running tests.
This is an attempt to work around localhost not being a resolvable
name in some build environments, notably reproducible-builds.
(See #948834)
* Put the result of `getent ahosts localhost` and
`getent ahosts $(hostname)` in the build log, to check whether those
names are resolvable in the build environment.
* d/p/debian/testfilemonitor-Skip-if-we-are-avoiding-flaky-tests.patch:
Treat testfilemonitor as a flaky test
* Standards-Version: 4.5.0 (no changes required)
-- Simon McVittie <smcv@debian.org> Tue, 25 Feb 2020 12:19:00 +0000
glib2.0 (2.62.4-2) unstable; urgency=medium
* Team upload
* Adjust dependencies to avoid broken partial upgrades on arm64 during
libffi7 transition:
- Bump versioned Depends on libffi-dev to get a guarantee that we'll
depend on libffi7
- Add Breaks on libgirepository-1.0-1 (<< 1.62.0-4~) so we cannot
get a GObject built with libffi7 but a libgirepository built with
libffi6
-- Simon McVittie <smcv@debian.org> Mon, 03 Feb 2020 15:12:40 +0100
glib2.0 (2.62.4-1) unstable; urgency=medium
* Team upload
[ Steve Langasek ]
* debian/tests/build: Make cross-test friendly (Closes: #946355)
[ Iain Lane ]
* debian/tests/build: Style fixes
[ Simon McVittie ]
* New upstream release
-- Simon McVittie <smcv@debian.org> Mon, 30 Dec 2019 13:01:04 +0000
glib2.0 (2.62.3-2) unstable; urgency=medium
* Team upload
* Rename pkg.glib2.0.noinsttest build profile to noinsttest.
This is now registered on <https://wiki.debian.org/BuildProfileSpec>.
-- Simon McVittie <smcv@debian.org> Sun, 01 Dec 2019 16:05:01 +0000
glib2.0 (2.62.3-1) unstable; urgency=medium
* Team upload
* New upstream release
- Drop patches that were applied upstream
* Don't build libglib2.0-tests under pkg.glib2.0.noinsttest build profile.
This is a prototype of the proposed standard build profile noinsttest.
If the build profiles include both nocheck and pkg.glib2.0.noinsttest,
we can drop the libdbus-1-dev build-dependency without harming test
coverage or altering the contents of binary packages.
* d/gbp.conf: Use upstream/2.62.x branch
-- Simon McVittie <smcv@debian.org> Mon, 25 Nov 2019 08:47:58 +0000
glib2.0 (2.62.2-3) unstable; urgency=medium
* Team upload
[ Iain Lane ]
* control: Drop `debian/experimental` from Vcs-*
[ Simon McVittie ]
* Build-depend on libdbus-1-dev for better test coverage
* Update to upstream commit 2.62.2-28-g3cf25070e:
- d/p/goption-Relax-assertion-to-avoid-being-broken-by-kdeinit5.patch:
Fix assertion failure when called from a process that overwrites its
argv, such as kdeinit5
- d/p/gdbus-peer-Specifically-listen-on-127.0.0.1.patch:
Improve reliability of gdbus-peer test in some container environments
- d/p/gdbusserver-Delete-socket-and-nonce-file-when-stopping-se.patch,
d/p/gdbusserver-Keep-a-strong-reference-to-the-server-in-call.patch,
d/p/gdbusauthmechanismsha1-Remove-unnecessary-g_warning-calls.patch,
d/p/gdbusauthmechanismsha1-Create-.dbus-keyrings-directory-re.patch,
d/p/tests-Move-main-loop-and-test-GUID-into-test-functions-in.patch,
d/p/tests-Isolate-directories-in-gdbus-peer-test.patch,
d/p/gdbus-peer-test-Improve-diagnostics-if-g_rmdir-fails.patch,
d/p/gdbus-peer-test-Stop-GDBusServer-before-tearing-down-temp.patch,
d/p/gdbus-peer-test-Use-unix-dir-address-if-exact-format-does.patch,
d/p/gdbus-server-auth-test-Create-temporary-directory-for-Uni.patch:
Mark as applied upstream in 2.62.x branch
* d/p/gdbus-server-auth-test-Include-gcredentialsprivate.h.patch:
Apply patch from 2.63.x to fix missing coverage in test for #941018
* d/p/Make-ld-executable-configurable.patch:
Apply patch from 2.63.x to use cross ld where necessary
* d/p/gdbus-server-auth-test-Create-temporary-directory-for-Uni.patch:
Mark as applied upstream in 2.63.x branch
* Improve patch metadata: use more URLs for bug references
-- Simon McVittie <smcv@debian.org> Wed, 06 Nov 2019 09:02:14 +0000
glib2.0 (2.62.2-2) unstable; urgency=medium
* Team upload
* Update to upstream commit 2.62.2-14-gfcbb88823:
- d/p/gdesktopappinfo-Allocate-DesktopFileDir-structs-dynamical.patch,
d/p/gdesktopappinfo-Cancel-file-monitor-when-resetting-a-Desk.patch,
d/p/glocalfilemonitor-Keep-a-weak-ref-to-the-monitor-in-GFile.patch:
Fix intermittent test failures for GDesktopAppInfo (Closes: #941550)
- d/p/gvariant-Limit-recursion-in-g_variant_parse.patch:
Ensure that parsing a text-format GVariant does not run out of stack
space
- d/p/tests-Use-objcopy-from-the-cross-compilation-file-if-conf.patch,
d/p/docs-Add-objcopy-to-example-cross-compilation-file.patch:
Use the appropriate architecture's objcopy when cross-compiling
- d/p/gtestutils-Add-additional-non-NULL-check-in-g_assert_cmpm.patch:
Avoid false positive NULL dereference warnings in g_assert_cmpmem()
- d/p/gspawn-Port-to-g_poll-from-select.patch:
Fix launching subprocesses when a very large number of fds are open
- d/p/gcredentialsprivate-Document-the-various-private-macros.patch,
d/p/credentials-Invalid-Linux-struct-ucred-means-no-informati.patch,
d/p/GDBus-prefer-getsockopt-style-credentials-passing-APIs.patch:
Ensure libdbus clients can authenticate with a GDBusServer like the
one in ibus (Closes: #941018)
* d/p/gdbusserver-Delete-socket-and-nonce-file-when-stopping-se.patch,
d/p/gdbusserver-Keep-a-strong-reference-to-the-server-in-call.patch,
d/p/Add-a-test-for-GDBusServer-authentication.patch:
Backport regression test for #941018 from upstream git master
* d/p/gdbusauthmechanismsha1-Remove-unnecessary-g_warning-calls.patch,
d/p/gdbusauthmechanismsha1-Create-.dbus-keyrings-directory-re.patch,
d/p/tests-Move-main-loop-and-test-GUID-into-test-functions-in.patch,
d/p/tests-Isolate-directories-in-gdbus-peer-test.patch:
Backport reliability fixes for gdbus-peer test from upstream git master
* d/p/gdbus-peer-test-Improve-diagnostics-if-g_rmdir-fails.patch,
d/p/gdbus-peer-test-Stop-GDBusServer-before-tearing-down-temp.patch,
d/p/gdbus-peer-test-Use-unix-dir-address-if-exact-format-does.patch,
d/p/gdbus-server-auth-test-Create-temporary-directory-for-Uni.patch:
Add some proposed patches to improve GDBus unit tests
* d/p/debian/mimeapps-test-Mark-as-flaky.patch:
Drop patch, hopefully no longer needed with #941550 fixed
* d/p/debian/taptestrunner-Stop-looking-like-an-executable-script.patch:
Make taptestrunner non-executable to avoid a Lintian warning
-- Simon McVittie <smcv@debian.org> Wed, 30 Oct 2019 08:45:56 +0000
glib2.0 (2.62.2-1) unstable; urgency=medium
* New upstream release
+ Fixes use after free when calling g_dbus_connection_flush_sync() in a
dedicated thread (LP: #1848202)
-- Iain Lane <laney@debian.org> Fri, 25 Oct 2019 10:54:42 +0100
glib2.0 (2.62.1-1) unstable; urgency=medium
* Team upload
* d/watch: Only watch for even-numbered (stable) releases
* New upstream release
- Fix regression that made G_FILE_COPY_TARGET_DEFAULT_PERMS result in
private permissions rather than respecting umask (Closes: #505398)
- d/p/g_file_info_get_modification_date_time-Calculate-in-integ.patch,
d/p/Always-build-tests-if-we-enabled-installed-tests.patch:
Drop patches that were applied upstream
* d/p/debian/mimeapps-test-Mark-as-flaky.patch:
Mark mimeapps test as flaky (see #941550)
-- Simon McVittie <smcv@debian.org> Mon, 07 Oct 2019 09:46:24 +0100
glib2.0 (2.62.0-3) unstable; urgency=medium
* Team upload
* Merge packaging from 2.60.x branch previously in unstable
- No changes since 2.62.0-2, except in d/changelog
- d/p/debian/Disable-an-optimization-when-building-with-gcc-9.patch:
Remove workaround for #931921, which turned out to be a clutter bug
* d/p/Always-build-tests-if-we-enabled-installed-tests.patch:
Add patch to fix installation of installed-tests in cross-builds
(Closes: #941509)
* d/p/g_file_info_get_modification_date_time-Calculate-in-integ.patch:
Add patch to fix intermittent g-file-info test failures on i386
(Closes: #941547)
* libglib2.0-dev: Suggest libgirepository1.0-dev, for the GIR files
(Closes: #914152)
* d/gbp.conf: Use debian/master branch
* Standards-Version: 4.4.1 (no changes required)
-- Simon McVittie <smcv@debian.org> Wed, 02 Oct 2019 09:13:12 +0100
glib2.0 (2.60.6-2) unstable; urgency=medium
* Team upload
* d/rules: Edit debcrossgen output instead of using a modified version.
This fixes use of CFLAGS, etc. during cross-compilation.
(Closes: #933560)
* Remove obsolete permissions fixing.
Issue 1539 was fixed upstream.
* d/p/debian/Disable-an-optimization-when-building-with-gcc-9.patch:
Disable an optimization when building with gcc-9, instead of forcing
gcc-8. This avoids depending on an old gcc, and should be easier to
deal with for cross-compilation. (Workaround for #931921)
* d/p/gmessages-Only-use-structured-logs-if-GLIB_VERSION_MAX_AL.patch:
Update to upstream glib-2-60 branch at commit 2.60.6-2-ga365528f6
- Don't use structured logging if GLIB_VERSION_MAX_ALLOWED < 2.56
-- Simon McVittie <smcv@debian.org> Tue, 13 Aug 2019 10:32:40 +0100
glib2.0 (2.62.0-2) unstable; urgency=medium
* Team upload.
* Upload to unstable. (Closes: #940161)
-- Andreas Henriksson <andreas@fatal.se> Mon, 30 Sep 2019 12:33:16 +0200
glib2.0 (2.62.0-1) experimental; urgency=medium
* New upstream release
+ Fix new `GFileInfo` APIs to work when
`G_FILE_ATTRIBUTE_TIME_MODIFIED_USEC` was not queried
-- Iain Lane <laney@debian.org> Mon, 09 Sep 2019 15:41:48 +0100
glib2.0 (2.61.3-1) experimental; urgency=medium
* New upstream release
* d/p: Drop cherry-picks from upstream branch which we now have
* d/p/d/Disable-an-optimization-when-building-with-gcc-9.patch: Drop,
clutter has been fixed now (thanks Simon)
* d/p/*: Refresh via gbp-pq as necessary
-- Iain Lane <laney@debian.org> Wed, 04 Sep 2019 17:29:23 +0100
glib2.0 (2.61.2-2) experimental; urgency=medium
* Team upload
* d/p/cond-test-Don-t-make-assumptions-about-struct-sigaction-m.patch:
Add proposed patch to fix FTBFS due to a test failure on mips*
-- Simon McVittie <smcv@debian.org> Tue, 13 Aug 2019 10:29:29 +0100
glib2.0 (2.61.2-1) experimental; urgency=medium
* Team upload
* New upstream release
* d/patches: Update to upstream git master, commit 2.61.2-23-g870b30bd7
- Fix regression in g_mkdir_with_permissions()
- Fix a memory leak
- Update translations: es, id, ro
* Merge changes from unstable
* Refresh patch series
* d/p/debian/06_thread_test_ignore_prctl_fail.patch:
Use g_test_skip() when skipping test
* d/p/GIO-tests-Don-t-do-clever-tricks-with-objcopy.patch:
Drop workaround for #932287, and build-depend on fixed binutils on
mips64el instead
* d/rules: Edit debcrossgen output instead of using a modified version.
This fixes use of CFLAGS, etc. during cross-compilation.
(Closes: #933560)
* d/libglib2.0-0.symbols: Update
* Remove obsolete permissions fixing.
Issue 1539 was fixed upstream.
* libglib2.0-tests: Depend on libglib2.0-dev-bin.
This is required for the new mkenums and genmarshal tests.
* d/p/debian/Disable-an-optimization-when-building-with-gcc-9.patch:
Disable an optimization when building with gcc-9, instead of forcing
gcc-8. This avoids depending on an old gcc, and should be easier to
deal with for cross-compilation. (Workaround for #931921)
-- Simon McVittie <smcv@debian.org> Mon, 12 Aug 2019 09:32:26 +0100
glib2.0 (2.60.6-1) unstable; urgency=medium
* Team upload
* New upstream release, functionally equivalent to 2.60.5 with the
patches we were already applying
- d/p/portal-Add-a-getter-for-dconf-access.patch,
d/p/settings-Tweak-priorities-for-keyfile-backend.patch,
d/p/key-file-Handle-filename-being-NULL.patch:
Drop, applied upstream
* d/p/tests-Fix-data-race-in-gmenumodel-test.patch,
d/p/tests-Fix-data-race-in-task-test.patch:
Add patches from upstream git master to fix data races in tests.
In particular, the one for gmenumodel might solve an unreproducible
test failure on i386 (see #932678).
* d/p/debian/gmenumodel-test-Mark-as-flaky.patch,
d/p/debian/gvariant-test-Don-t-run-at-build-time-on-mips.patch:
Skip more tests at build-time and during the non-flaky autopkgtest.
The unreproducible gmenumodel test failure on i386 might in fact be
fixed by d/p/tests-Fix-data-race-in-gmenumodel-test.patch, but it's
hard to be sure about that. The gvariant fuzz test is catastrophically
slow on certain mips CPUs and so is impractical to run there.
(Closes: #932678)
* Standards-Version: 4.4.0 (no changes required)
* Use debhelper compat level 12
- Stop explicitly passing -V to dh_makeshlibs, it is now the default
- Disable dh_dwz for libglib2.0-udeb.
This avoids an apparent debhelper bug in which dh_dwz generates
multifiles for udebs, but dh_strip does not remove them from the
udeb's staging directory. (Workaround for #933212)
* Stop overriding libexecdir.
Since FHS 3.0 (Policy 4.1.5), /usr/libexec is considered valid,
and since debhelper compat level 12 it is the default.
In this particular package this only affects the installed-tests.
* Remove an obsolete Lintian override
-- Simon McVittie <smcv@debian.org> Sat, 27 Jul 2019 16:57:55 +0100
glib2.0 (2.60.5-1) unstable; urgency=medium
* Team upload
* Prepare GLib 2.60.x stable branch for unstable
* New upstream release
* d/p/portal-Add-a-getter-for-dconf-access.patch,
d/p/settings-Tweak-priorities-for-keyfile-backend.patch,
d/p/key-file-Handle-filename-being-NULL.patch:
Add post-release fixes from upstream glib-2-60 branch
* d/p/GIO-tests-Don-t-do-clever-tricks-with-objcopy.patch:
Don't do strange things with objcopy while testing GResource,
while we work out what is going on in mips64el builds.
Mitigates: #932287
-- Simon McVittie <smcv@debian.org> Wed, 17 Jul 2019 21:36:30 +0100
glib2.0 (2.61.1-2) experimental; urgency=medium
* control, rules: Build with gcc-8. See #931921 - when we're built with
gcc-9, some applications that use GLib might start hanging.
-- Iain Lane <laney@debian.org> Fri, 12 Jul 2019 11:37:01 +0100
# Older entries have been removed from this changelog.
# To read the complete changelog use `apt changelog libglib2.0-0t64`.
Generated by dwww version 1.16 on Sat Dec 13 16:27:31 CET 2025.