-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 03 Feb 2021 13:55:41 +0000 Source: glib2.0 Architecture: source Version: 2.66.4-4 Distribution: unstable Urgency: medium Maintainer: Debian GNOME Maintainers <pkg-gnome-maintainers@lists.alioth.debian.org> Changed-By: Simon McVittie <smcv@debian.org> Closes: 981420 981555 Changes: glib2.0 (2.66.4-4) unstable; urgency=medium . * d/patches: Update patch series to upstream commit 2.66.4-27-g0051c0635 - Improve test coverage for #977961 - Stop valgrind reporting memory leaks in GSpawn in most cases - Partially revert security hardening from 2.66.4-2: allow DBUS_SESSION_BUS_ADDRESS to be taken from the environment by setcap executables (to avoid regressing gnome-keyring) and by setgid executables (to avoid regressing msmtp). (Closes: #981420, #981555) Note that this is likely to be reverted in GLib 2.70.x to provide better hardening. The D-Bus session bus is not designed to be used by processes that have elevated privileges. Checksums-Sha1: d0e92077e8af39e2eea4a1595b753133d814c693 3386 glib2.0_2.66.4-4.dsc bb44ba8896126491bde309cd95f4d965f557438a 110116 glib2.0_2.66.4-4.debian.tar.xz 0a0f1577b386264431f0647f4ab20c51b00bee4a 7874 glib2.0_2.66.4-4_source.buildinfo Checksums-Sha256: 03a827db68245e90a6a00003b7b7b777eafa8173678ae97110649d2a6bba50b6 3386 glib2.0_2.66.4-4.dsc 5a61aa6f9f88803a3ec6703b12567343f19362e518e1826f094e0bcfac6a6259 110116 glib2.0_2.66.4-4.debian.tar.xz 11724677ff6af3d8a1e6cc22c2d5e8f91bf0b5f91ad47fb4f24598591a524129 7874 glib2.0_2.66.4-4_source.buildinfo Files: 5b5b5bce7f861fc97d59a5bc55e48953 3386 libs optional glib2.0_2.66.4-4.dsc 322dda88d7b12b8373de2a175920f7f8 110116 libs optional glib2.0_2.66.4-4.debian.tar.xz 699e6f6cfe9cbd4d48e669555e50ca81 7874 libs optional glib2.0_2.66.4-4_source.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEENuxaZEik9e95vv6Y4FrhR4+BTE8FAmAa9SEACgkQ4FrhR4+B TE9X1A/8DqIfOtQzIBEtfXIUcbEHqqiob4lSXlbN+xoM88oSDnAyUXHFtUku675+ X5AFjyQMqtDYxhEPbJXFOPnHaOHaWu8K7GDwJ/F81AFS3NvfRkOB9LJXMCBg8JBC /Ld3z+XpaH3+Hzci1+Ez+cM0e5binTvVQg+C/9Dw/bGK94++mGijqT6Og2N/qtQO EoIG/S706iWEVsirgiGfDCV3jR62FFmEi0TuJF1TKP/9kVKRs9VBPuQ2fK53L9dR cnu9nf4FWID3NFBn6PSIdpaDVIAjiDBWVy8LrLo8meYdNNMbQSXBK0I+G4OchLA5 LtyzpsYtHw3+8G083Sr8Oj1clPPOW0cgTQmvhxlbvoaaJ7tvn2Sy4+I2Hd03k7Uz IpJp/Kl/d75+l+shmjK9iHX7OrKOXonL4vwwyVdj5S1HDGAAQYFjCuUl+QpRulWH 4RgIGf7CDZDRA92bBFuiI0Eh4UHdsk5Lc1VkEK6IXBt1C4y4zKuXoo6f8g+v6Tzf 92OAmnSqet04VYlFGgRcZ4a1xt4WkfYUtCqIxTJ7QSoQQe2P7SnF410PuHb660Y5 ef9aC+s/2SZb5EDfZFARgDCk51dYCwpfFM1ogeYNdwdGywaCF0xKIHD0xZcSAio4 fVMaaCkB41OQcw+ALvoOaNIxNzBRtuwWFtPvWiT6eyqoZoZaTcI= =qP6+ -----END PGP SIGNATURE-----
