mirror of
git://git.openembedded.org/meta-openembedded
synced 2026-04-02 02:49:12 +00:00
8bea89d3a9
Major changes in 1.60.0 ======================= * CVE-2026-28296: ftp: Reject paths with CR/LF in g_vfs_ftp_file_new_from_ftp (Ondrej Holy) * monitor: Do not load monitors when GIO_USE_VFS=local (Ondrej Holy) Major changes in 1.59.90 ======================== * client: Fix use-after-free when creating async proxy failed (Ondrej Holy) * udisks2: Emit changed signals from update_all() (Ondrej Holy) * daemon: Fix race on subscribers list when on thread (Ondrej Holy) * ftp: Validate fe_size when parsing symlink target (Ondrej Holy) * ftp: Check localtime() return value before use (Ondrej Holy) * CVE-2026-28295: ftp: Use control connection address for PASV data (Ondrej Holy) * CVE-2026-28296: ftp: Reject paths containing CR/LF characters (Ondrej Holy) * gphoto2: Use g_try_realloc() instead of g_realloc() (Ondrej Holy) * cdda: Reject path traversal in mount URI host (Ondrej Holy) * client: Fail when URI has invalid UTF-8 chars (Ondrej Holy) * udisks2: Fix memory corruption with duplicate mount paths (Alessandro Astone) * build: Update GOA dependency to > 3.57.0 (Jan-Michael Brummer) * Some other fixes (correctmost, Ondrej Holy) Major changes in 1.59.1 ======================= * mtp: replace Android extension checks with capability checks (Raul Tambre) * cdda: Fix duration of last track for some media (Bastien Nocera) * dav: Add X-OC-Mtime header on push to preserve last modified time (Lawrence Murray) * udisks2: Use hash tables in the volume monitor to improve performance (Milan Crha) * onedrive: Check for identity instead of presentation identity (Jan-Michael Brummer) * build: Disable google option and mark as deprecated (Jeremy Bícha, Ondrej Holy) * Fix various memory leaks (Milan Crha) * Some other fixes (wangrong, Jan-Michael Brummer, Simon Poirier) * Translation updates (GNOME Translation Project contributors) Major changes in 1.58.4 ======================= * Re-release of 1.58.3 due to incorrect release tag; no code changes. Major changes in 1.58.3 ======================= * CVE-2026-28296: ftp: Reject paths with CR/LF in g_vfs_ftp_file_new_from_ftp (Ondrej Holy) * monitor: Do not load monitors when GIO_USE_VFS=local (Ondrej Holy) Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com> Signed-off-by: Khem Raj <khem.raj@oss.qualcomm.com>