Your message dated Sat, 16 Nov 2019 10:08:47 +0000 with message-id <83c9ffab6f08361485f70dda4733a7a24aeec09b.camel@adam-barratt.org.uk> and subject line Closing bugs for 10.2 point release fixes has caused the Debian Bug report #944133, regarding buster-pu: package glib2.0/2.58.3-2+deb10u2 to be marked as done. This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact owner@bugs.debian.org immediately.) -- 944133: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=944133 Debian Bug Tracking System Contact owner@bugs.debian.org with problems
--- Begin Message ---
- To: Debian Bug Tracking System <submit@bugs.debian.org>
- Subject: buster-pu: package glib2.0/2.58.3-2+deb10u2
- From: Simon McVittie <smcv@debian.org>
- Date: Mon, 4 Nov 2019 19:12:09 +0000
- Message-id: <[🔎] 20191104191209.GA13754@espresso.pseudorandom.co.uk>
Package: release.debian.org Severity: normal Tags: buster User: release.debian.org@packages.debian.org Usertags: pu A recent security fix to ibus (CVE-2019-14822, #940267, DSA-4525-1) exposed an interoperability bug between GLib's implementation of D-Bus and the reference implementation libdbus (#941018). The practical impact is that Qt clients cannot use the updated ibus input method until GLib is fixed. This has been fixed in the upstream master and 2.62.x branches and in unstable, and I've prepared backports for buster (this bug) and stretch (I'll open a separate bug when I have a successful build/autopkgtest/piuparts pipeline). This proposed patch includes a backport of the regression test that I wrote, which has only been included in upstream git master so far. If the diffstat is too big, I can drop the test and keep only the functional changes: > patches/GDBus-prefer-getsockopt-style-credentials-passing-APIs.patch | 167 +++ > patches/credentials-Invalid-Linux-struct-ucred-means-no-informati.patch | 117 ++ These are the bug fix. > control | 1 > control.in | 1 > patches/Add-a-test-for-GDBusServer-authentication.patch | 536 ++++++++++ > patches/gdbus-server-auth-test-Create-temporary-directory-for-Uni.patch | 191 +++ > patches/gdbus-server-auth-test-Include-gcredentialsprivate.h.patch | 41 These are for build-time and autopkgtest test coverage, and can be dropped if they are too big. They give libglib2.0-tests a new dependency on libdbus-1-3, but the shared library etc. do not gain a similar dependency. So far I've only tested this with build/autopkgtest/piuparts, but I'll try it on a real buster machine before upload. OK to continue? Thanks, smcv
--- End Message ---
--- Begin Message ---
- To: 931766-done@bugs.debian.org, 932900-done@bugs.debian.org, 935250-done@bugs.debian.org, 935252-done@bugs.debian.org, 935392-done@bugs.debian.org, 939015-done@bugs.debian.org, 939166-done@bugs.debian.org, 939313-done@bugs.debian.org, 939354-done@bugs.debian.org, 939432-done@bugs.debian.org, 939446-done@bugs.debian.org, 939526-done@bugs.debian.org, 939738-done@bugs.debian.org, 939757-done@bugs.debian.org, 939831-done@bugs.debian.org, 939890-done@bugs.debian.org, 939965-done@bugs.debian.org, 940112-done@bugs.debian.org, 940170-done@bugs.debian.org, 940245-done@bugs.debian.org, 940476-done@bugs.debian.org, 940521-done@bugs.debian.org, 940548-done@bugs.debian.org, 940685-done@bugs.debian.org, 940686-done@bugs.debian.org, 940818-done@bugs.debian.org, 940943-done@bugs.debian.org, 941168-done@bugs.debian.org, 941227-done@bugs.debian.org, 941348-done@bugs.debian.org, 941451-done@bugs.debian.org, 941468-done@bugs.debian.org, 941683-done@bugs.debian.org, 941738-done@bugs.debian.org, 942044-done@bugs.debian.org, 942075-done@bugs.debian.org, 942177-done@bugs.debian.org, 942209-done@bugs.debian.org, 942253-done@bugs.debian.org, 942349-done@bugs.debian.org, 942356-done@bugs.debian.org, 942446-done@bugs.debian.org, 942486-done@bugs.debian.org, 942524-done@bugs.debian.org, 942827-done@bugs.debian.org, 943339-done@bugs.debian.org, 943364-done@bugs.debian.org, 943594-done@bugs.debian.org, 943605-done@bugs.debian.org, 943667-done@bugs.debian.org, 943766-done@bugs.debian.org, 943846-done@bugs.debian.org, 943882-done@bugs.debian.org, 944002-done@bugs.debian.org, 944009-done@bugs.debian.org, 944064-done@bugs.debian.org, 944119-done@bugs.debian.org, 944133-done@bugs.debian.org, 944238-done@bugs.debian.org, 944252-done@bugs.debian.org, 944374-done@bugs.debian.org, 944390-done@bugs.debian.org
- Subject: Closing bugs for 10.2 point release fixes
- From: "Adam D. Barratt" <adam@adam-barratt.org.uk>
- Date: Sat, 16 Nov 2019 10:08:47 +0000
- Message-id: <83c9ffab6f08361485f70dda4733a7a24aeec09b.camel@adam-barratt.org.uk>
Package: release.debian.org Version: 10.2 Hi, The fixes referenced by these bugs were included in today's 10.2 stable point release. Regards, Adam
--- End Message ---