Re: [OE-core] [wrynose][PATCH 2/7] glib-2.0-initial,glib-2.0: upgrade 2.88.2 -> 2.88.4

[Daniel Turull <daniel.turull@ericsson.com>]

On Tue, 2026-10-20 at 11:21 +0200, Yoann Congal via lists.openembedded.org
wrote:
> On Tue Oct 20, 2026 at 10:26 AM CEST, Daniel Turull via lists.openembedded.org wrote:
> > From: Daniel Turull <daniel.turull@ericsson.com>
> >
> > Changes in 2.88.3-2.88.4 (per NEWS):
> > - CVE-2026-15588: GDBusServer pre-authentication DoS via unbounded
> >   SASL line buffering
> > - Security hardening backport: overflow/bounds checks in
> >   GSocketAddress, Unicode normalization, GResource, GVariant,
> >   logging, and GMarkup error paths
> > - Fix miscompilation with GCC 17 caused by G_GNUC_CONST on
> >   get_type() functions
> > - Fix handling of long filenames when moving files to trash
> >
> > Signed-off-by: Daniel Turull <daniel.turull@ericsson.com>
> > ---
> >  .../{glib-2.0-initial_2.88.2.bb => glib-2.0-initial_2.88.4.bb}  | 0
> >  .../glib-2.0/{glib-2.0_2.88.2.bb => glib-2.0_2.88.4.bb}         | 0
> >  meta/recipes-core/glib-2.0/glib.inc                             | 2 +-
> >  3 files changed, 1 insertion(+), 1 deletion(-)
> >  rename meta/recipes-core/glib-2.0/{glib-2.0-initial_2.88.2.bb => glib-2.0-initial_2.88.4.bb} (100%)
> >  rename meta/recipes-core/glib-2.0/{glib-2.0_2.88.2.bb => glib-2.0_2.88.4.bb} (100%)
>
> Hello,
>
> I already reviewed Peter's upgrade to .3.
> Can you rebase on top of it[0]? Only this single patch, I took the others
> of the series into my review branch.
>
> [0]: https://git.openembedded.org/openembedded-core-contrib/log/?h=stable/wrynose-review
>

Yes, I'll send a single patch with the rebase for glib

Daniel
> Thanks,
> -=-=-=-=-=-=-=-=-=-=-=-
> Links: You receive all messages sent to this group.
> View/Reply Online (#248256): https://lists.openembedded.org/g/openembedded-core/message/248256
> Mute This Topic: https://lists.openembedded.org/mt/121845917/6330526
> Group Owner: openembedded-core+owner@lists.openembedded.org
> Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [daniel.turull@ericsson.com]
> -=-=-=-=-=-=-=-=-=-=-=-
>