Path to this page:
./
net/glib-networking,
Network-related giomodules for glib
Branch: CURRENT,
Version: 2.90.1nb1,
Package name: glib-networking-2.90.1nb1,
Maintainer: pkgsrc-usersNetwork-related giomodules for glib.
Required to run:[
security/gnutls] [
devel/glib2] [
www/libproxy] [
security/p11-kit] [
sysutils/gsettings-desktop-schemas] [
lang/python37]
Required to build:[
pkgtools/cwrappers] [
devel/meson]
Package options: gnutls
Master sites:
Filesize: 287.016 KB
Version history: (Expand)
- (2026-11-11) Updated to version: glib-networking-2.90.1nb1
- (2026-10-26) Updated to version: glib-networking-2.90.1
- (2026-09-29) Updated to version: glib-networking-2.90.0nb2
- (2026-09-27) Updated to version: glib-networking-2.90.0nb1
- (2026-09-22) Updated to version: glib-networking-2.90.0
- (2026-09-03) Package has been reborn
CVS history: (Expand)
| 2026-11-11 12:56:56 by Thomas Klausner | Files touched by this commit (3116) |
Log message:
*: recursive bump for icu 79
|
2026-10-26 07:04:19 by Adam Ciarcinski | Files touched by this commit (3) |  |
Log message:
glib-networking: updated to 2.90.1
2.90.1 - October 23, 2026
* Bugs fixed:
- (CVE-2026-103963) Unbounded TLS 1.3 session ticket queue growth in
glib-networking allows remote denial of service (Nieves Montero Fernandez)
- (CVE-2026-112963) glib-networking macOS OpenSSL backend incorrectly
trusts non-SSL policy certificates as TLS anchors (Nieves Montero Fernandez)
- (CVE-2026-113624) glib-networking TLS client session cache key not
rebuilt after certificate property change, allowing stale session resumption
(Nieves Montero Fernandez)
- (CVE-2026-113622) glib-networking: Missing TLS purpose validation in
glib-networking OpenSSL backend allows Extended Key Usage bypass (Nieves
Montero Fernandez)
- (CVE-2026-113623) glib-networking: Unbounded memory growth in glib-
networking GnuTLS backend application data buffer during TLS handshake
allows remote denial of service (Nieves Montero Fernandez)
- openssl: consult errno on syscall failure (Michael Catanzaro)
* Translation updates:
- German (Jürgen Benvenuti)
- Greek, Modern (1453-) (Efstathios Iosifidis)
- Norwegian Bokmål (Kjartan Maraas)
- Norwegian Nynorsk (Roy-Magne Mo)
- Portuguese (Hugo Carvalho)
|
| 2026-09-29 08:08:46 by Thomas Klausner | Files touched by this commit (3127) |
Log message:
*: recursive bump for pcre2 10.49
|
| 2026-09-27 13:39:47 by Tobias Nygren | Files touched by this commit (3126) |
Log message:
*: revbump for pcre2 symbol versioning change
|
2026-09-22 09:45:33 by Ryo ONODERA | Files touched by this commit (3) |  |
Log message:
net/glib-networking: Update to 2.90.0
Changelog:
2.90.0 - September 10, 2026
===========================
* Bugs fixed:
- !286 meson: Remove version checks that are always true (correctmost)
* Translation updates:
- Bulgarian (Alexander Alexandrov Shopov)
- Catalan (Xavi Ivars)
- Chinese (China) (luming zh)
- Czech (Daniel Rusek)
- Danish (Ask Hjorth Larsen)
- Dutch (Nathan Follens)
- French (Guillaume Bernard)
- Galician (Francisco Diéguez Souto)
- Georgian (Ekaterine Papava)
- Hebrew (Yaron Shahrabani)
- Hungarian (Balázs Úr)
- Kazakh (Baurzhan Muftakhidinov)
- Korean (Changwoo Ryu)
- Lithuanian (Aurimas Černius)
- Occitan (post 1500) (Quentin PAGÈS)
- Persian (Danial Behzadi)
- Portuguese (Brazil) (burns)
- Russian (Artur S0)
- Serbian (Марко Костић)
- Spanish (Daniel Mustieles)
- Swedish (Anders Jonsson)
- Thai (Aefgh Threenine)
- Turkish (Emin Tufan Çetin)
- Uighur (Abduqadir Abliz)
- Ukrainian (Yuri Chornoivan)
2.90.alpha - June 25, 2026
==========================
* Bugs fixed:
- #222 test fails with openssl 3.4.x (Michael Catanzaro)
- #226 (CVE-2025-60018) (#YWH-PGM9867-106) Out of Bond Reads on glib-
networking through tls/openssl/gtlscertificate-openssl.c via
"g_tls_certificate_openssl_get_property()" due to Incorrect \
BIO_write Return
Value Validation in Certificate PEM Export (Michael Catanzaro)
- #228 (CVE-2026-2574) (#YWH-PGM9867-150) OOB Read on glib-networking through
tls/openssl/gtlsclientconnection-openssl.c via
g_tls_client_connection_openssl_get_property() (Michael Catanzaro)
- #231 (CVE-2026-10028) (#YWH-PGM9867-278) Infinite loop in certification path
building (Michael Catanzaro)
- !261 meson: Introduce option for enable/disable tests (Leonid Zaburunov)
- !263 openssl: check return value of g_tls_bio_alloc() and BIO_new() (Michael
Catanzaro)
- !265 openssl: delete support for OCSP stapling (Michael Catanzaro)
- !268 Fix file database and PKCS11 test failures and update CI! (Michael
Catanzaro)
- !270 Fix miscellaneous safety issues reported by bug hunters (Michael
Catanzaro)
- !271 Delete gtlshttp (Michael Catanzaro)
- !272 Fix connection test reusing a GError (Michael Catanzaro)
- !273 openssl: fix error code confusion (Michael Catanzaro)
- !274 ci: add catch for reporting stack traces (Michael Catanzaro)
- !277 Require OpenSSL 1.1.1 or newer (Michael Catanzaro)
- !280 Some fixes found with kiro (Ignacio Casal Quinteiro)
- !281 Fix various memory leaks (Michael Catanzaro)
- !283 openssl: refactor error handling code (Michael Catanzaro)
- !284 openssl: use ERR_clear_error() all over the place (Michael Catanzaro)
- !285 gnutls: always notify accepted-cas property after handshake (Michael
Catanzaro)
* Translation updates:
- Arabic (Ahmed Najmawi)
- Basque (Asier Saratsua Garmendia)
- Belarusian (Vasil Pupkin)
- Cornish (Flynn Peck)
- Esperanto (Kristjan SCHMIDT)
- Greek, Modern (1453-) (Efstathios Iosifidis)
- Japanese (Takayuki Kusano)
- Lao (Saikeo Kavhanxay)
- Romanian (Antonio Marin)
- Slovak (Jose Riha)
- Slovenian (Martin)
- Thai (Aefgh Threenine)
- Uighur (Abduqadir Abliz)
- Uzbek (Baxrom Raxmatov)
|
| 2026-09-02 21:05:38 by Thomas Klausner | Files touched by this commit (3127) |
Log message:
*: recursive bump for pcre2 10.48
|
| 2026-05-14 18:42:34 by Ryo ONODERA | Files touched by this commit (1335) |
Log message:
*: Recursive revbump from security/nettle-4.0
|
| 2026-02-06 11:06:21 by Thomas Klausner | Files touched by this commit (1305) |
Log message:
*: recursive bump for nettle 4.0 shlib major bump
|