helium-3rd-party/meta-openembedded
1
0
Fork 0
mirror of git://git.openembedded.org/meta-openembedded synced 2026-04-02 02:49:12 +00:00
Code Issues Packages Projects Releases Wiki Activity

gvfs: upgrade 1.58.2 -> 1.60.0

Browse Source 
Major changes in 1.60.0
=======================
* CVE-2026-28296: ftp: Reject paths with CR/LF in g_vfs_ftp_file_new_from_ftp (Ondrej Holy)
* monitor: Do not load monitors when GIO_USE_VFS=local (Ondrej Holy)

Major changes in 1.59.90
========================
* client: Fix use-after-free when creating async proxy failed (Ondrej Holy)
* udisks2: Emit changed signals from update_all() (Ondrej Holy)
* daemon: Fix race on subscribers list when on thread (Ondrej Holy)
* ftp: Validate fe_size when parsing symlink target (Ondrej Holy)
* ftp: Check localtime() return value before use (Ondrej Holy)
* CVE-2026-28295: ftp: Use control connection address for PASV data (Ondrej Holy)
* CVE-2026-28296: ftp: Reject paths containing CR/LF characters (Ondrej Holy)
* gphoto2: Use g_try_realloc() instead of g_realloc() (Ondrej Holy)
* cdda: Reject path traversal in mount URI host (Ondrej Holy)
* client: Fail when URI has invalid UTF-8 chars (Ondrej Holy)
* udisks2: Fix memory corruption with duplicate mount paths (Alessandro Astone)
* build: Update GOA dependency to > 3.57.0 (Jan-Michael Brummer)
* Some other fixes (correctmost, Ondrej Holy)

Major changes in 1.59.1
=======================
* mtp: replace Android extension checks with capability checks (Raul Tambre)
* cdda: Fix duration of last track for some media (Bastien Nocera)
* dav: Add X-OC-Mtime header on push to preserve last modified time (Lawrence Murray)
* udisks2: Use hash tables in the volume monitor to improve performance (Milan Crha)
* onedrive: Check for identity instead of presentation identity (Jan-Michael Brummer)
* build: Disable google option and mark as deprecated (Jeremy Bícha, Ondrej Holy)
* Fix various memory leaks (Milan Crha)
* Some other fixes (wangrong, Jan-Michael Brummer, Simon Poirier)
* Translation updates (GNOME Translation Project contributors)

Major changes in 1.58.4
=======================
* Re-release of 1.58.3 due to incorrect release tag; no code changes.

Major changes in 1.58.3
=======================
* CVE-2026-28296: ftp: Reject paths with CR/LF in g_vfs_ftp_file_new_from_ftp (Ondrej Holy)
* monitor: Do not load monitors when GIO_USE_VFS=local (Ondrej Holy)

Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com>
Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>
This commit is contained in:
Zhang Peng 2026-03-25 18:26:19 +08:00 committed by Khem Raj
parent 80fa33d26d
commit 8bea89d3a9
No known key found for this signature in database
GPG Key ID: BB053355919D3314
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
meta-gnome/recipes-gnome/gvfs/gvfs_1.58.2.bb → meta-gnome/recipes-gnome/gvfs/gvfs_1.60.0.bb
View File

@ -18,7 +18,7 @@ DEPENDS += "\
RDEPENDS:${PN} += "gsettings-desktop-schemas"
SRC_URI = "https://download.gnome.org/sources/${BPN}/${@gnome_verdir("${PV}")}/${BPN}-${PV}.tar.xz;name=archive"
SRC_URI[archive.sha256sum] = "ad9d5bf0b45caf232520df0adee51eb650200b0370680f80a350ead9d1d61ddf"
SRC_URI[archive.sha256sum] = "648273f069e92c7e3c013b92148e82c901f08044e2b3b14c6cfbd52269f6b646"
ANY_OF_DISTRO_FEATURES = "${GTK3DISTROFEATURES}"