#32 Security Issues

• Curated by Felix

Update on what happened across the GNOME project in the week from February 18 to February 25.


A message from the TWIG team

This issue takes place at a time when a war has broken out in Europe. In the current time we receive horrific news from Ukraine.

We stand in solidarity with all people affected by this terrible war.

🇺🇦


Core Apps and Libraries

WebKitGTK

GTK port of the WebKit rendering engine.

adrian says

WebKitGTK has received two releases recently, 2.34.5 and 2.34.6. Both contain a number of fixes for security issues—one of them for remote code execution, known to be exploited in the wild. We have also solved touch input handling, made accessibility work again when the Bubblewrap sandbox is in use, and improved video codec selection with GStreamer 1.20.

GNOME Builder

IDE for writing GNOME-based software.

gwagner announces

GNOME Builder contains now templates for Adwaita, Gtk4 and Gtk3 for C, Rust, Python, Gjs and Vala. In order to make the templates easier to find we increased the initial size of the window. Besides of that we fixed several crashes related to terminal spawning in Builder.

Third Party Projects

Michael Terry reports

The simple math logic game Multiplication Puzzle got a new port to gtk4 and libadwaita, and is now available on flathub!

Mazhar Hussain says

Announcing Login Manager Settings (gdm-settings): a ‘Settings’ app for GNOME’s Login Manager. It can change a lot of settings including shell theme and wallpaper of the login screen. It does not have any pre-built packages yet (except for an AppImage without any dependencies and AUR packages).

Portfolio

A minimalist file manager for those who want to use Linux mobile devices.

Martín Abente Lahaye says

After a few months of slow but steady progress, Portfolio 0.9.13 is out 📱🤓! This new release comes with the ability to fully manage external devices, improved feedback and responsiveness when copying big files to slow devices and many bugs fixes.

https://blogs.gnome.org/tchx84/2022/02/20/portfolio-0-9-13/

Phosh

A pure wayland shell for mobile devices.

Guido reports

I’ve tagged phosh 0.16.0 with nice fading labels in the overview (by Adrien), more style updates by Sam, a keypad that can shuffle the buttons around and a bunch of fixes.

Documentation

Emmanuele Bassi reports

The “Getting Started” tutorial for newcomer app developers on the GNOME Developer Documentation website now has code examples in Python alongside the C ones.

GNOME Shell Extensions

Romain says

I ported my Night Theme Switcher extension to GNOME 42. It brings scheduling abilities to the integrated dark mode and adds a way to set the built-in light and dark desktop background images.

Alex Saveau says

Announcing Gnome Clipboard History (GCH): a rewrite of Clipboard Indicator with vastly improved performance, bug fixes, and new features. What’s the big innovation? GCH uses a compacting log and linked list to store data, enabling minimal O(1) performance for almost all operations. If you want all the details, I wrote up a blog post about it here.

That’s all for this week!

See you next week, and be sure to stop by #thisweek:gnome.org with updates on your own projects!