Bug#1051373: libglib2.0-0: 2.77.3-1 breaks Midnight Commander extension file

2023-09-06 Thread Philip Withnall
See upstream report https://gitlab.gnome.org/GNOME/glib/-/issues/3095#note_1839091, which will be fixed upstream for 2.78.0, which is due to be released in the next couple of days. Philip On Wed, 2023-09-06 at 22:49 +, Michael Gold wrote: > Package: libglib2.0-0 > Version: 2.77.3-1 >

Bug#1028475: Backport recent GVariant security fixes to Stable

2023-01-16 Thread Philip Withnall
On Sat, 2023-01-14 at 21:15 +0100, Salvatore Bonaccorso wrote: > Hi Simon, > > Thank you for adding looping in. > > On Thu, Jan 12, 2023 at 10:10:35AM +, Simon McVittie wrote: > > Control: tags -1 + security > > > > On Wed, 11 Jan 2023 at 16:3

Bug#1028475: Backport recent GVariant security fixes to Stable

2023-01-11 Thread Philip Withnall
Package: glib2.0 Version: 2.66.8-1 Tags: security Are there plans to backport the recent GVariant security fixes to Debian Stable? These are: - https://gitlab.gnome.org/GNOME/glib/-/issues/2782 - https://gitlab.gnome.org/GNOME/glib/-/issues/2121 -

Bug#997824: evolution-data-server: Backport patches to switch from Google Contacts API to CalDAV to stable

2021-10-25 Thread Philip Withnall
Package: evolution-data-server Version: 3.38.3-1 Severity: important Dear Maintainer, Please consider backporting patches from Debian testing/unstable to stable to switch Evolution and EDS to use CalDAV for accessing Google Contacts. The current method of accessing it, the Google Contacts API,

Bug#983026: libglib2.0-0: After update GDM3 does not longer start

2021-02-18 Thread Philip Withnall
This is https://gitlab.gnome.org/GNOME/glib/-/issues/2332 On Thu, 2021-02-18 at 10:57 +0100, Michael Ott wrote: > Package: libglib2.0-0 > Version: 2.67.4-1 > Severity: important > > Dear Maintainer, > > After update to 2.67.4 I cannot start GDM > > Output in syslog: > Feb 18 05:14:25 k-c13

Bug#944188: /etc/msmtprc password disclosure

2021-02-03 Thread Philip Withnall
On Wed, 3 Feb 2021 12:26:23 + Simon McVittie wrote: > For now, GLib upstream has partially reverted that change, weakening the > security hardening in order to fix the regression, and I'm going to do > the same in Debian. This should stop msmtp from regressing in terms of > which features

Bug#962912: glib2.0: g_file_copy_attributes() chokes on binary xattr values

2020-07-08 Thread Philip Withnall
On Tue, 2020-06-16 at 02:44 +0200, Sergio Gelato wrote: > control: tags -1 + patch > > * Philip Withnall [2020-06-15 23:25:18 +0200]: > > https://gitlab.gnome.org/GNOME/glib/-/issues/422 > > > > Nobody has yet found time to work on it; merge requests are > &

Bug#962912: glib2.0: g_file_copy_attributes() chokes on binary xattr values

2020-06-17 Thread Philip Withnall
On Tue, 2020-06-16 at 02:44 +0200, Sergio Gelato wrote: > control: tags -1 + patch > > * Philip Withnall [2020-06-15 23:25:18 +0200]: > > https://gitlab.gnome.org/GNOME/glib/-/issues/422 > > > > Nobody has yet found time to work on it; merge requests are > &

Bug#962912: glib2.0: g_file_copy_attributes() chokes on binary xattr values

2020-06-15 Thread Philip Withnall
On Mon, 2020-06-15 at 23:17 +0200, Sergio Gelato wrote: > Package: libglib2.0-0 > Version: 2.58.3-2+deb10u2 > Severity: important > > g_file_copy_attributes(), when invoked with G_FILE_COPY_ALL_METADATA > on > files in NFS, is prone to truncating the value of extended attribute > system.nfs4_acl.

Bug#934655: libglib2.0-0: provide environment variable to suppress or redirect logging

2019-08-14 Thread Philip Withnall
On Tue, 2019-08-13 at 23:16 +, brian m. carlson wrote: > On 2019-08-13 at 06:12:30, Philip Withnall wrote: > > Hi, > > > > I can’t speak for the Debian project, but as an upstream GLib > > developer > > I can say such an environment variable would not be welc

Bug#934655: libglib2.0-0: provide environment variable to suppress or redirect logging

2019-08-13 Thread Philip Withnall
Hi, I can’t speak for the Debian project, but as an upstream GLib developer I can say such an environment variable would not be welcome upstream. Hiding such warnings makes them less likely to be fixed. It’s a way of sweeping bugs under the carpet which I don’t want to encourage. Each warning

Bug#924344: glib2.0: CVE-2019-9633

2019-04-03 Thread Philip Withnall
On Wed, 2019-04-03 at 13:00 +0100, Simon McVittie wrote: > On Fri, 29 Mar 2019 at 20:13:17 +0100, Moritz Mühlenhoff wrote: > > On Mon, Mar 11, 2019 at 09:32:02PM +0100, Salvatore Bonaccorso > > wrote: > > > Version: 2.58.3-1 > > Do we know for sure that 2.58.x is vulnerable? I've tried the >

Bug#908705: g_icon_to_string output includes some garbage prefix

2018-09-12 Thread Philip Withnall
On Wed, 2018-09-12 at 22:32 +0200, Eduard Bloch wrote: > Package: libglib2.0-0 > Version: 2.58.0-3 > Severity: important > > Hi, > > one of the last releases in the last couple of weeks has broken the > g_icon_to_string function. Previously, it did exactly what >

Bug#901887: build-depend should not list xtem

2018-06-19 Thread Philip Withnall
On Tue, 2018-06-19 at 16:20 -0400, Phillip Susi wrote: > Package: glib2.0 > Version: 2.56.1-2 > > I noticed while trying to build glib that it claims to build-depend > on > xterm, which is insane; no package should require xterm to build. I > forced it to build anyway without xterm installed,