From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Matthias Clasen To: git-commits@fedoraproject.org Subject: [rpms/glib2] cve-2026-58016-f44: Fix a possible crash in application launching (bgo#527132) Date: Tue, 11 Aug 2026 10:33:43 GMT Message-ID: <178644442389.1.2499077355205744404.rpms-glib2-157605997df1@fedoraproject.org> List-ID: X-Git-Repo: rpms/glib2 X-Git-Branch: cve-2026-58016-f44 X-Git-Rev: 157605997df1f9e5bf07050d0a4c8630c1148089 QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvZ2xpYjIKQnJhbmNo IDogY3ZlLTIwMjYtNTgwMTYtZjQ0CkNvbW1pdCA6IDE1NzYwNTk5N2RmMWY5ZTViZjA3MDUwZDBh NGM4NjMwYzExNDgwODkKQXV0aG9yIDogTWF0dGhpYXMgQ2xhc2VuIDxtY2xhc2VuQGZlZG9yYXBy b2plY3Qub3JnPgpEYXRlICAgOiAyMDA4LTA0LTA5VDE1OjAwOjI0KzAwOjAwClN0YXRzICA6ICsy Ny8tMSBpbiAyIGZpbGUocykKVVJMICAgIDogaHR0cHM6Ly9zcmMuZmVkb3JhcHJvamVjdC5vcmcv cnBtcy9nbGliMi9jLzE1NzYwNTk5N2RmMWY5ZTViZjA3MDUwZDBhNGM4NjMwYzExNDgwODk/YnJh bmNoPWN2ZS0yMDI2LTU4MDE2LWY0NAoKTG9nOgpGaXggYSBwb3NzaWJsZSBjcmFzaCBpbiBhcHBs aWNhdGlvbiBsYXVuY2hpbmcgKGJnbyM1MjcxMzIpCgotLS0KZGlmZiAtLWdpdCBhL2FwcGluZm8u cGF0Y2ggYi9hcHBpbmZvLnBhdGNoCm5ldyBmaWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAwMDAwMDAu LmZmNzhhODcKLS0tIC9kZXYvbnVsbAorKysgYi9hcHBpbmZvLnBhdGNoCkBAIC0wLDAgKzEsMTkg QEAKK2RpZmYgLXVwIGdsaWItMi4xNi4zL2dpby9nZGVza3RvcGFwcGluZm8uYy5hcHBpbmZvIGds aWItMi4xNi4zL2dpby9nZGVza3RvcGFwcGluZm8uYworLS0tIGdsaWItMi4xNi4zL2dpby9nZGVz a3RvcGFwcGluZm8uYy5hcHBpbmZvCTIwMDgtMDQtMDkgMTA6NTc6MzEuMDAwMDAwMDAwIC0wNDAw CisrKysgZ2xpYi0yLjE2LjMvZ2lvL2dkZXNrdG9wYXBwaW5mby5jCTIwMDgtMDQtMDkgMTA6NTc6 NDMuMDAwMDAwMDAwIC0wNDAwCitAQCAtMTUxNCw3ICsxNTE0LDYgQEAgZ19hcHBfaW5mb19jcmVh dGVfZnJvbV9jb21tYW5kbGluZSAoY29ucworICAgICBpbmZvLT5leGVjID0gZ19zdHJjb25jYXQg KGNvbW1hbmRsaW5lLCAiICV1IiwgTlVMTCk7CisgICBlbHNlCisgICAgIGluZm8tPmV4ZWMgPSBn X3N0cmNvbmNhdCAoY29tbWFuZGxpbmUsICIgJWYiLCBOVUxMKTsKKy0gIGluZm8tPmNvbW1lbnQg PSBnX3N0cmR1cF9wcmludGYgKF8oIkN1c3RvbSBkZWZpbml0aW9uIGZvciAlcyIpLCBpbmZvLT5u YW1lKTsKKyAgIGluZm8tPm5vZGlzcGxheSA9IFRSVUU7CisgICBpbmZvLT5iaW5hcnkgPSBiaW5h cnlfZnJvbV9leGVjIChpbmZvLT5leGVjKTsKKyAgIAorQEAgLTE1MzAsNiArMTUyOSw3IEBAIGdf YXBwX2luZm9fY3JlYXRlX2Zyb21fY29tbWFuZGxpbmUgKGNvbnMKKyAgICAgICBpZiAoaW5mby0+ bmFtZSA9PSBOVUxMKQorIAlpbmZvLT5uYW1lID0gZ19zdHJkdXAgKCJjdXN0b20iKTsKKyAgICAg fQorKyAgaW5mby0+Y29tbWVudCA9IGdfc3RyZHVwX3ByaW50ZiAoXygiQ3VzdG9tIGRlZmluaXRp b24gZm9yICVzIiksIGluZm8tPm5hbWUpOworICAgCisgICByZXR1cm4gR19BUFBfSU5GTyAoaW5m byk7CisgfQoKZGlmZiAtLWdpdCBhL2dsaWIyLnNwZWMgYi9nbGliMi5zcGVjCmluZGV4IDk4ODZh OWIuLmY4MDVmNDAgMTAwNjQ0Ci0tLSBhL2dsaWIyLnNwZWMKKysrIGIvZ2xpYjIuc3BlYwpAQCAt Myw3ICszLDcgQEAKIFN1bW1hcnk6IEEgbGlicmFyeSBvZiBoYW5keSB1dGlsaXR5IGZ1bmN0aW9u cwogTmFtZTogZ2xpYjIKIFZlcnNpb246IDIuMTYuMwotUmVsZWFzZTogMSV7P2Rpc3R9CitSZWxl YXNlOiAyJXs/ZGlzdH0KIExpY2Vuc2U6IExHUEx2MisKIEdyb3VwOiBTeXN0ZW0gRW52aXJvbm1l bnQvTGlicmFyaWVzCiBVUkw6IGh0dHA6Ly93d3cuZ3RrLm9yZwpAQCAtMTksNiArMTksOSBAQCBC dWlsZFJlcXVpcmVzOiBsaWJzZWxpbnV4LWRldmVsCiAjIGZvciBzeXMvaW5vdGlmeS5oCiBCdWls ZFJlcXVpcmVzOiBnbGliYy1kZXZlbAogCisjIGZpeCBhIHBvc3NpYmxlIGNyYXNoZXIsIGh0dHA6 Ly9idWd6aWxsYS5nbm9tZS5vcmcvc2hvd19idWcuY2dpP2lkPTUyNzEzMgorUGF0Y2gwOiBhcHBp bmZvLnBhdGNoCisKICVkZXNjcmlwdGlvbiAKIEdMaWIgaXMgdGhlIGxvdy1sZXZlbCBjb3JlIGxp YnJhcnkgdGhhdCBmb3JtcyB0aGUgYmFzaXMKIGZvciBwcm9qZWN0cyBzdWNoIGFzIEdUSysgYW5k IEdOT01FLiBJdCBwcm92aWRlcyBkYXRhIHN0cnVjdHVyZQpAQCAtNTAsNiArNTMsNyBAQCBvZiB2 ZXJzaW9uIDIgb2YgdGhlIEdMaWIgbGlicmFyeS4KIAogJXByZXAKICVzZXR1cCAtcSAtbiBnbGli LSV7dmVyc2lvbn0KKyVwYXRjaDAgLXAxIC1iIC5hcHBpbmZvCiAKICVidWlsZAogJWNvbmZpZ3Vy ZSAtLWRpc2FibGUtZ3RrLWRvYyAtLWVuYWJsZS1zdGF0aWMgCkBAIC0xMjIsNiArMTI2LDkgQEAg cm0gLXJmICRSUE1fQlVJTERfUk9PVAogJXtfbGliZGlyfS9saWIqLmEKIAogJWNoYW5nZWxvZwor KiBXZWQgQXByICA5IDIwMDggTWF0dGhpYXMgQ2xhc2VuIDxtY2xhc2VuQHJlZGhhdC5jb20+IC0g Mi4xNi4zLTIKKy0gRml4IGEgcG9zc2libGUgY3Jhc2ggaW4gYXBwbGljYXRpb24gbGF1bmNoaW5n IChiZ28jNTI3MTMyKQorCiAqIFR1ZSBBcHIgIDggMjAwOCBNYXR0aGlhcyBDbGFzZW4gPG1jbGFz ZW5AcmVkaGF0LmNvbT4gLSAyLjE2LjMtMQogLSBVcGRhdGUgdG8gMi4xNi4zCiAK