./net/glib-networking, Network-related giomodules for glib

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ]


Branch: CURRENT, Version: 2.90.1nb1, Package name: glib-networking-2.90.1nb1, Maintainer: pkgsrc-users

Network-related giomodules for glib.


Required to run:
[security/gnutls] [devel/glib2] [www/libproxy] [security/p11-kit] [sysutils/gsettings-desktop-schemas] [lang/python37]

Required to build:
[pkgtools/cwrappers] [devel/meson]

Package options: gnutls

Master sites:

Filesize: 287.016 KB

Version history: (Expand)


CVS history: (Expand)


   2026-11-11 12:56:56 by Thomas Klausner | Files touched by this commit (3116)
Log message:
*: recursive bump for icu 79
   2026-10-26 07:04:19 by Adam Ciarcinski | Files touched by this commit (3) | Package updated
Log message:
glib-networking: updated to 2.90.1

2.90.1 - October 23, 2026

* Bugs fixed:
  - (CVE-2026-103963) Unbounded TLS 1.3 session ticket queue growth in
    glib-networking allows remote denial of service (Nieves Montero Fernandez)
  - (CVE-2026-112963) glib-networking macOS OpenSSL backend incorrectly
    trusts non-SSL policy certificates as TLS anchors (Nieves Montero Fernandez)
  - (CVE-2026-113624) glib-networking TLS client session cache key not
    rebuilt after certificate property change, allowing stale session resumption
    (Nieves Montero Fernandez)
  - (CVE-2026-113622) glib-networking: Missing TLS purpose validation in
    glib-networking OpenSSL backend allows Extended Key Usage bypass (Nieves
    Montero Fernandez)
  - (CVE-2026-113623) glib-networking: Unbounded memory growth in glib-
    networking GnuTLS backend application data buffer during TLS handshake
    allows remote denial of service (Nieves Montero Fernandez)
  - openssl: consult errno on syscall failure (Michael Catanzaro)

* Translation updates:
  - German (Jürgen Benvenuti)
  - Greek, Modern (1453-) (Efstathios Iosifidis)
  - Norwegian Bokmål (Kjartan Maraas)
  - Norwegian Nynorsk (Roy-Magne Mo)
  - Portuguese (Hugo Carvalho)
   2026-09-29 08:08:46 by Thomas Klausner | Files touched by this commit (3127)
Log message:
*: recursive bump for pcre2 10.49
   2026-09-27 13:39:47 by Tobias Nygren | Files touched by this commit (3126)
Log message:
*: revbump for pcre2 symbol versioning change
   2026-09-22 09:45:33 by Ryo ONODERA | Files touched by this commit (3) | Package updated
Log message:
net/glib-networking: Update to 2.90.0

Changelog:
2.90.0 - September 10, 2026
===========================

* Bugs fixed:
  - !286 meson: Remove version checks that are always true (correctmost)

* Translation updates:
  - Bulgarian (Alexander Alexandrov Shopov)
  - Catalan (Xavi Ivars)
  - Chinese (China) (luming zh)
  - Czech (Daniel Rusek)
  - Danish (Ask Hjorth Larsen)
  - Dutch (Nathan Follens)
  - French (Guillaume Bernard)
  - Galician (Francisco Diéguez Souto)
  - Georgian (Ekaterine Papava)
  - Hebrew (Yaron Shahrabani)
  - Hungarian (Balázs Úr)
  - Kazakh (Baurzhan Muftakhidinov)
  - Korean (Changwoo Ryu)
  - Lithuanian (Aurimas Černius)
  - Occitan (post 1500) (Quentin PAGÈS)
  - Persian (Danial Behzadi)
  - Portuguese (Brazil) (burns)
  - Russian (Artur S0)
  - Serbian (Марко Костић)
  - Spanish (Daniel Mustieles)
  - Swedish (Anders Jonsson)
  - Thai (Aefgh Threenine)
  - Turkish (Emin Tufan Çetin)
  - Uighur (Abduqadir Abliz)
  - Ukrainian (Yuri Chornoivan)

2.90.alpha - June 25, 2026
==========================

* Bugs fixed:
  - #222 test fails with openssl 3.4.x (Michael Catanzaro)
  - #226 (CVE-2025-60018) (#YWH-PGM9867-106) Out of Bond Reads on glib-
    networking through tls/openssl/gtlscertificate-openssl.c via
    "g_tls_certificate_openssl_get_property()" due to Incorrect \ 
BIO_write Return
    Value Validation in Certificate PEM Export (Michael Catanzaro)
  - #228 (CVE-2026-2574) (#YWH-PGM9867-150) OOB Read on glib-networking through
    tls/openssl/gtlsclientconnection-openssl.c via
    g_tls_client_connection_openssl_get_property() (Michael Catanzaro)
  - #231 (CVE-2026-10028) (#YWH-PGM9867-278) Infinite loop in certification path
    building (Michael Catanzaro)
  - !261 meson: Introduce option for enable/disable tests (Leonid Zaburunov)
  - !263 openssl: check return value of g_tls_bio_alloc() and BIO_new() (Michael
    Catanzaro)
  - !265 openssl: delete support for OCSP stapling (Michael Catanzaro)
  - !268 Fix file database and PKCS11 test failures and update CI! (Michael
    Catanzaro)
  - !270 Fix miscellaneous safety issues reported by bug hunters (Michael
    Catanzaro)
  - !271 Delete gtlshttp (Michael Catanzaro)
  - !272 Fix connection test reusing a GError (Michael Catanzaro)
  - !273 openssl: fix error code confusion (Michael Catanzaro)
  - !274 ci: add catch for reporting stack traces (Michael Catanzaro)
  - !277 Require OpenSSL 1.1.1 or newer (Michael Catanzaro)
  - !280 Some fixes found with kiro (Ignacio Casal Quinteiro)
  - !281 Fix various memory leaks (Michael Catanzaro)
  - !283 openssl: refactor error handling code (Michael Catanzaro)
  - !284 openssl: use ERR_clear_error() all over the place (Michael Catanzaro)
  - !285 gnutls: always notify accepted-cas property after handshake (Michael
    Catanzaro)

* Translation updates:
  - Arabic (Ahmed Najmawi)
  - Basque (Asier Saratsua Garmendia)
  - Belarusian (Vasil Pupkin)
  - Cornish (Flynn Peck)
  - Esperanto (Kristjan SCHMIDT)
  - Greek, Modern (1453-) (Efstathios Iosifidis)
  - Japanese (Takayuki Kusano)
  - Lao (Saikeo Kavhanxay)
  - Romanian (Antonio Marin)
  - Slovak (Jose Riha)
  - Slovenian (Martin)
  - Thai (Aefgh Threenine)
  - Uighur (Abduqadir Abliz)
  - Uzbek (Baxrom Raxmatov)
   2026-09-02 21:05:38 by Thomas Klausner | Files touched by this commit (3127)
Log message:
*: recursive bump for pcre2 10.48
   2026-05-14 18:42:34 by Ryo ONODERA | Files touched by this commit (1335)
Log message:
*: Recursive revbump from security/nettle-4.0
   2026-02-06 11:06:21 by Thomas Klausner | Files touched by this commit (1305)
Log message:
*: recursive bump for nettle 4.0 shlib major bump