Opened 6 years ago

Closed 6 years ago

Last modified 5 years ago

#14833 closed enhancement (fixed)

glib-2.66.8

Reported by: Douglas R. Reno Owned by: Douglas R. Reno
Priority: elevated Milestone: 11.0
Component: BOOK Version: SVN
Severity: medium Keywords:
Cc:

Description

New point version

I'd like to drop this in tomorrow since I'm starting GNOME on 4/1. The reasoning behind doing this before glib-2.68 is this:

​https://gitlab.gnome.org/GNOME/glib/-/issues/2325

Change History (5)

comment:1 by Douglas R. Reno, 6 years ago

Owner: changed from blfs-book to Douglas R. Reno
Status: new → assigned

comment:2 by Douglas R. Reno, 6 years ago 

Overview of changes in GLib 2.66.8
==================================

* Fix a security issue when using `g_file_replace()` with
  `G_FILE_CREATE_REPLACE_DESTINATION` (#2325)

* Bugs fixed:
 - #2325 file-roller symlink attack
 - !1982 Backport !2325 “file-roller symlink attack” to glib-2-66
 - !1990 Backport !1976 “Use the right permissions for directory watching on Win32” to glib-2-66

This has been assigned CVE-2021-28153

comment:3 by Douglas R. Reno, 6 years ago

Priority: normal → elevated

comment:4 by Douglas R. Reno, 6 years ago

Resolution: → fixed
Status: assigned → closed

Fixed at r24417

comment:5 by Bruce Dubbs, 5 years ago

Milestone: 10.2 → 11.0

Milestone renamed

Note: See TracTickets for help on using tickets.