libxmlb 0.3.27 update #5

Merged

sbelikov merged 1 commit from update-libxmlb-0.3.27 into niceos-5.2

2026-05-24 21:11:27 +03:00

sbelikov commented

2026-05-24 20:43:46 +03:00

Owner

Upstream stable release 0.3.27 is available for libxmlb.

Summary:

Patch-level update from 0.3.26 to 0.3.27.
Upstream release notes list parser robustness fixes (NULL needle crash, potential UAF, infinite loop on corrupt silo, recursion/predicate limits, NULL opcode handling, and oversized-input validation).
Upstream also bumps the required GLib version to 2.68.

Risk assessment:

No ABI/API break is stated in the release notes.
Runtime risk is low to moderate: this is primarily hardening and bug-fix work for a leaf library.
Packaging risk is centered on the GLib floor increase; verify the NiceOS 5.2 buildroot satisfies GLib 2.68 before merging.

Recommended checks:

Confirm buildroot glib-devel/runtime glib meet the new minimum.
Rebuild in a clean chroot and verify file manifests/typelib artifacts.
Run installed-tests/xb-tool smoke tests.

References:

Upstream stable release 0.3.27 is available for libxmlb. Summary: - Patch-level update from 0.3.26 to 0.3.27. - Upstream release notes list parser robustness fixes (NULL needle crash, potential UAF, infinite loop on corrupt silo, recursion/predicate limits, NULL opcode handling, and oversized-input validation). - Upstream also bumps the required GLib version to 2.68. Risk assessment: - No ABI/API break is stated in the release notes. - Runtime risk is low to moderate: this is primarily hardening and bug-fix work for a leaf library. - Packaging risk is centered on the GLib floor increase; verify the NiceOS 5.2 buildroot satisfies GLib 2.68 before merging. Recommended checks: - Confirm buildroot glib-devel/runtime glib meet the new minimum. - Rebuild in a clean chroot and verify file manifests/typelib artifacts. - Run installed-tests/xb-tool smoke tests. References: - https://github.com/hughsie/libxmlb/releases/tag/0.3.27 - https://github.com/hughsie/libxmlb/compare/0.3.26...0.3.27 - https://github.com/hughsie/libxmlb/tree/0.3.27

sbelikov added 1 commit

2026-05-24 20:43:46 +03:00