[Bug 1848202] Re: Use after free in gdbus leads to eds segfaults

[Launchpad Bug Tracker]

This bug was fixed in the package glib2.0 - 2.62.4-1~ubuntu19.10.1

---
glib2.0 (2.62.4-1~ubuntu19.10.1) eoan; urgency=medium

  * No-change backport from unstable to eoan (LP: #1850932).
+ Contains fix for LP: #1844853 - "IBus no longer works in Qt applications
  after upgrade"

glib2.0 (2.62.4-1) unstable; urgency=medium

  * Team upload

  [ Steve Langasek ]
  * debian/tests/build: Make cross-test friendly (Closes: #946355)

  [ Iain Lane ]
  * debian/tests/build: Style fixes

  [ Simon McVittie ]
  * New upstream release

glib2.0 (2.62.3-2) unstable; urgency=medium

  * Team upload
  * Rename pkg.glib2.0.noinsttest build profile to noinsttest.
This is now registered on .

glib2.0 (2.62.3-1) unstable; urgency=medium

  * Team upload
  * New upstream release
- Drop patches that were applied upstream
  * Don't build libglib2.0-tests under pkg.glib2.0.noinsttest build profile.
This is a prototype of the proposed standard build profile noinsttest.
If the build profiles include both nocheck and pkg.glib2.0.noinsttest,
we can drop the libdbus-1-dev build-dependency without harming test
coverage or altering the contents of binary packages.
  * d/gbp.conf: Use upstream/2.62.x branch

glib2.0 (2.62.2-3) unstable; urgency=medium

  * Team upload

  [ Iain Lane ]
  * control: Drop `debian/experimental` from Vcs-*

  [ Simon McVittie ]
  * Build-depend on libdbus-1-dev for better test coverage
  * Update to upstream commit 2.62.2-28-g3cf25070e:
- d/p/goption-Relax-assertion-to-avoid-being-broken-by-kdeinit5.patch:
  Fix assertion failure when called from a process that overwrites its
  argv, such as kdeinit5
- d/p/gdbus-peer-Specifically-listen-on-127.0.0.1.patch:
  Improve reliability of gdbus-peer test in some container environments
- d/p/gdbusserver-Delete-socket-and-nonce-file-when-stopping-se.patch,
  d/p/gdbusserver-Keep-a-strong-reference-to-the-server-in-call.patch,
  d/p/gdbusauthmechanismsha1-Remove-unnecessary-g_warning-calls.patch,
  d/p/gdbusauthmechanismsha1-Create-.dbus-keyrings-directory-re.patch,
  d/p/tests-Move-main-loop-and-test-GUID-into-test-functions-in.patch,
  d/p/tests-Isolate-directories-in-gdbus-peer-test.patch,
  d/p/gdbus-peer-test-Improve-diagnostics-if-g_rmdir-fails.patch,
  d/p/gdbus-peer-test-Stop-GDBusServer-before-tearing-down-temp.patch,
  d/p/gdbus-peer-test-Use-unix-dir-address-if-exact-format-does.patch,
  d/p/gdbus-server-auth-test-Create-temporary-directory-for-Uni.patch:
  Mark as applied upstream in 2.62.x branch
  * d/p/gdbus-server-auth-test-Include-gcredentialsprivate.h.patch:
Apply patch from 2.63.x to fix missing coverage in test for #941018
  * d/p/Make-ld-executable-configurable.patch:
Apply patch from 2.63.x to use cross ld where necessary
  * d/p/gdbus-server-auth-test-Create-temporary-directory-for-Uni.patch:
Mark as applied upstream in 2.63.x branch
  * Improve patch metadata: use more URLs for bug references

glib2.0 (2.62.2-2) unstable; urgency=medium

  * Team upload
  * Update to upstream commit 2.62.2-14-gfcbb88823:
- d/p/gdesktopappinfo-Allocate-DesktopFileDir-structs-dynamical.patch,
  d/p/gdesktopappinfo-Cancel-file-monitor-when-resetting-a-Desk.patch,
  d/p/glocalfilemonitor-Keep-a-weak-ref-to-the-monitor-in-GFile.patch:
  Fix intermittent test failures for GDesktopAppInfo (Closes: #941550)
- d/p/gvariant-Limit-recursion-in-g_variant_parse.patch:
  Ensure that parsing a text-format GVariant does not run out of stack
  space
- d/p/tests-Use-objcopy-from-the-cross-compilation-file-if-conf.patch,
  d/p/docs-Add-objcopy-to-example-cross-compilation-file.patch:
  Use the appropriate architecture's objcopy when cross-compiling
- d/p/gtestutils-Add-additional-non-NULL-check-in-g_assert_cmpm.patch:
  Avoid false positive NULL dereference warnings in g_assert_cmpmem()
- d/p/gspawn-Port-to-g_poll-from-select.patch:
  Fix launching subprocesses when a very large number of fds are open
- d/p/gcredentialsprivate-Document-the-various-private-macros.patch,
  d/p/credentials-Invalid-Linux-struct-ucred-means-no-informati.patch,
  d/p/GDBus-prefer-getsockopt-style-credentials-passing-APIs.patch:
  Ensure libdbus clients can authenticate with a GDBusServer like the
  one in ibus (Closes: #941018)
  * d/p/gdbusserver-Delete-socket-and-nonce-file-when-stopping-se.patch,
d/p/gdbusserver-Keep-a-strong-reference-to-the-server-in-call.patch,
d/p/Add-a-test-for-GDBusServer-authentication.patch:
Backport regression test for #941018 from upstream git master
  * d/p/gdbusauthmechanismsha1-Remove-unnecessary-g_warning-calls.patch,
d/p/gdbusauthmechanismsha1-Create-.dbus-keyrings-directory-re.patch,
d/p/tests-Move-main-loop-and-test-GUID-into-test-functions-in.patch,
d/p/tests-Isolate-directories-in-gdbus-peer-test.patch:
   

[Bug 1848202] Re: Use after free in gdbus leads to eds segfaults

[Gunnar Hjalmarsson]

Bug #1844853 was explicitly verified (again, comment #31 this time).
Didn't observe any unexpected behavior due to the glib2.0 upgrade.

** Tags removed: verification-needed verification-needed-eoan
** Tags added: verification-done verification-done-eoan

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to glib2.0 in Ubuntu.
https://bugs.launchpad.net/bugs/1848202

Title:
  Use after free in gdbus leads to eds segfaults

To manage notifications about this bug go to:
https://bugs.launchpad.net/glib/+bug/1848202/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1848202] Re: Use after free in gdbus leads to eds segfaults

[Łukasz Zemczak]

Hello errors.ubuntu.com, or anyone else affected,

Accepted glib2.0 into eoan-proposed. The package will build now and be
available at
https://launchpad.net/ubuntu/+source/glib2.0/2.62.3-2~ubuntu19.10.1 in a
few hours, and then in the -proposed repository.

Please help us by testing this new package.  See
https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how
to enable and use -proposed.  Your feedback will aid us getting this
update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug,
mentioning the version of the package you tested and change the tag from
verification-needed-eoan to verification-done-eoan. If it does not fix
the bug for you, please add a comment stating that, and change the tag
to verification-failed-eoan. In either case, without details of your
testing we will not be able to proceed.

Further information regarding the verification process can be found at
https://wiki.ubuntu.com/QATeam/PerformingSRUVerification .  Thank you in
advance for helping!

N.B. The updated package will be released to -updates after the bug(s)
fixed by this package have been verified and the package has been in
-proposed for a minimum of 7 days.

** Tags removed: verification-done verification-done-eoan
** Tags added: verification-needed verification-needed-eoan

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to glib2.0 in Ubuntu.
https://bugs.launchpad.net/bugs/1848202

Title:
  Use after free in gdbus leads to eds segfaults

To manage notifications about this bug go to:
https://bugs.launchpad.net/glib/+bug/1848202/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1848202] Re: Use after free in gdbus leads to eds segfaults

[Launchpad Bug Tracker]

This bug was fixed in the package glib2.0 - 2.63.1-2

---
glib2.0 (2.63.1-2) experimental; urgency=medium

  * d/p/Revert-glocalfileinfo-Only-return-file-mode-not-type-as-U.patch:
Revert "glocalfileinfo: Only return file mode, not type, as UNIX_MODE
attribute" This reverts commit bfdc5fc4fc84ef8518d2d1a328c8482cf5a38e98.
This commit changes the semantics of the `unix::mode` attribute, which
some things (the one we've noticed is ostree) rely on.
  * d/p/test_copy_preserve_mode-Adjust-for-revert-semantics.patch:
test_copy_preserve_mode: Adjust for revert semantics. Now we're returning
the file type again, we need to mask it out to compare with the mode.

 -- Iain Lane   Mon, 18 Nov 2019 13:59:35 +

** Changed in: glib2.0 (Ubuntu)
   Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to glib2.0 in Ubuntu.
https://bugs.launchpad.net/bugs/1848202

Title:
  Use after free in gdbus leads to eds segfaults

To manage notifications about this bug go to:
https://bugs.launchpad.net/glib/+bug/1848202/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1848202] Re: Use after free in gdbus leads to eds segfaults

[Gunnar Hjalmarsson]

Bug #1844853 was explicitly verified (comment #15). Didn't observe any
unexpected behavior due to the glib2.0 upgrade.

** Tags removed: verification-needed verification-needed-eoan
** Tags added: verification-done verification-done-eoan

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to glib2.0 in Ubuntu.
https://bugs.launchpad.net/bugs/1848202

Title:
  Use after free in gdbus leads to eds segfaults

To manage notifications about this bug go to:
https://bugs.launchpad.net/glib/+bug/1848202/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1848202] Re: Use after free in gdbus leads to eds segfaults

[Łukasz Zemczak]

Hello errors.ubuntu.com, or anyone else affected,

Accepted glib2.0 into eoan-proposed. The package will build now and be
available at
https://launchpad.net/ubuntu/+source/glib2.0/2.62.2-2~ubuntu19.10.1 in a
few hours, and then in the -proposed repository.

Please help us by testing this new package.  See
https://wiki.ubuntu.com/Testing/EnableProposed for documentation on how
to enable and use -proposed.  Your feedback will aid us getting this
update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug,
mentioning the version of the package you tested and change the tag from
verification-needed-eoan to verification-done-eoan. If it does not fix
the bug for you, please add a comment stating that, and change the tag
to verification-failed-eoan. In either case, without details of your
testing we will not be able to proceed.

Further information regarding the verification process can be found at
https://wiki.ubuntu.com/QATeam/PerformingSRUVerification .  Thank you in
advance for helping!

N.B. The updated package will be released to -updates after the bug(s)
fixed by this package have been verified and the package has been in
-proposed for a minimum of 7 days.

** Changed in: glib2.0 (Ubuntu Eoan)
   Status: In Progress => Fix Committed

** Tags added: verification-needed verification-needed-eoan

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to glib2.0 in Ubuntu.
https://bugs.launchpad.net/bugs/1848202

Title:
  Use after free in gdbus leads to eds segfaults

To manage notifications about this bug go to:
https://bugs.launchpad.net/glib/+bug/1848202/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1848202] Re: Use after free in gdbus leads to eds segfaults

[Iain Lane]

** Also affects: glib2.0 (Ubuntu Eoan)
   Importance: Undecided
   Status: New

** Changed in: glib2.0 (Ubuntu)
   Status: New => In Progress

** Changed in: glib2.0 (Ubuntu Eoan)
   Status: New => In Progress

** Changed in: glib2.0 (Ubuntu)
 Assignee: (unassigned) => Iain Lane (laney)

** Changed in: glib2.0 (Ubuntu Eoan)
 Assignee: (unassigned) => Iain Lane (laney)

** Description changed:

+ [ Description ]
+ 
  The Ubuntu Error Tracker has been receiving reports about a problem regarding 
evolution-data-server.  This problem was most recently seen with package 
version 3.34.1-1, the problem page at 
https://errors.ubuntu.com/problem/b1f62616406e36e521fd1fb1d2be4ac2fe9a2cda 
contains more details, including versions of packages affected, stacktrace or 
traceback, and individual crash reports.
  If you do not have access to the Ubuntu Error Tracker and are a software 
developer, you can request it at http://forms.canonical.com/reports/.
+ 
+ [ Fix ]
+ 
+ This bug was fixed upstream in 2.62.2 (see the links below). That update
+ is being issues to eoan.
+ 
+ [ QA ]
+ 
+ Under https://wiki.ubuntu.com/StableReleaseUpdates/GNOME, we don't need
+ to explicitly test that this bug is fixed. Nevertheless, to verify this
+ bug please give the desktop a good workout. Ideally install the SRU and
+ use your machine as you would normally for a variety of tasks. Make sure
+ there are no regressions.
+ 
+ [ Regression potential ]
+ 
+ 1) The changes involve mutexes and stuff, which is error prone.
+ 
+ 2) It's GLib, a core library, so any bad regressions will be really
+ serious for the desktop as a whole.

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to glib2.0 in Ubuntu.
https://bugs.launchpad.net/bugs/1848202

Title:
  Use after free in gdbus leads to eds segfaults

To manage notifications about this bug go to:
https://bugs.launchpad.net/glib/+bug/1848202/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1848202] Re: Use after free in gdbus leads to eds segfaults

[Bug Watch Updater]

** Changed in: glib
   Status: Unknown => Fix Released

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to glib2.0 in Ubuntu.
https://bugs.launchpad.net/bugs/1848202

Title:
  Use after free in gdbus leads to eds segfaults

To manage notifications about this bug go to:
https://bugs.launchpad.net/glib/+bug/1848202/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1848202] Re: Use after free in gdbus leads to eds segfaults

[Sebastien Bacher]

glib 2.62 backport pending
https://gitlab.gnome.org/GNOME/glib/merge_requests/1162

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to glib2.0 in Ubuntu.
https://bugs.launchpad.net/bugs/1848202

Title:
  Use after free in gdbus leads to eds segfaults

To manage notifications about this bug go to:
https://bugs.launchpad.net/glib/+bug/1848202/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs

[Bug 1848202] Re: Use after free in gdbus leads to eds segfaults

[Sebastien Bacher]

Upstream https://gitlab.gnome.org/GNOME/glib/issues/1896

** Summary changed:

- 
/usr/libexec/evolution-calendar-factory:11:malloc:pvl_newlist:icalcomponent_new_impl:icalcomponent_new:i_cal_component_new
+ Use after free in gdbus leads to eds segfaults

** Bug watch added: gitlab.gnome.org/GNOME/glib/issues #1896
   https://gitlab.gnome.org/GNOME/glib/issues/1896

** Package changed: evolution-data-server (Ubuntu) => glib2.0 (Ubuntu)

** Changed in: glib2.0 (Ubuntu)
   Importance: Undecided => High

** Also affects: glib via
   https://gitlab.gnome.org/GNOME/glib/issues/1896
   Importance: Unknown
   Status: Unknown

-- 
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to evolution-data-server in Ubuntu.
https://bugs.launchpad.net/bugs/1848202

Title:
  Use after free in gdbus leads to eds segfaults

To manage notifications about this bug go to:
https://bugs.launchpad.net/glib/+bug/1848202/+subscriptions

-- 
desktop-bugs mailing list
desktop-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/desktop-bugs