From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Tomas Bzatek To: git-commits@fedoraproject.org Subject: [rpms/glib2] cve-2026-58016-f44: - Add support for GIO to set selinux attributes (gnome #529694) Date: Tue, 11 Aug 2026 10:33:45 GMT Message-ID: <178644442531.1.13914176584151091922.rpms-glib2-9ac10ee4c749@fedoraproject.org> List-ID: X-Git-Repo: rpms/glib2 X-Git-Branch: cve-2026-58016-f44 X-Git-Rev: 9ac10ee4c749026e6684094bd1effc1b414ce028 QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvZ2xpYjIKQnJhbmNo IDogY3ZlLTIwMjYtNTgwMTYtZjQ0CkNvbW1pdCA6IDlhYzEwZWU0Yzc0OTAyNmU2Njg0MDk0YmQx ZWZmYzFiNDE0Y2UwMjgKQXV0aG9yIDogVG9tYXMgQnphdGVrIDx0YnphdGVrQGZlZG9yYXByb2pl Y3Qub3JnPgpEYXRlICAgOiAyMDA4LTA0LTI0VDE0OjEyOjU3KzAwOjAwClN0YXRzICA6ICsxMjgv LTEgaW4gMiBmaWxlKHMpClVSTCAgICA6IGh0dHBzOi8vc3JjLmZlZG9yYXByb2plY3Qub3JnL3Jw bXMvZ2xpYjIvYy85YWMxMGVlNGM3NDkwMjZlNjY4NDA5NGJkMWVmZmMxYjQxNGNlMDI4P2JyYW5j aD1jdmUtMjAyNi01ODAxNi1mNDQKCkxvZzoKLSBBZGQgc3VwcG9ydCBmb3IgR0lPIHRvIHNldCBz ZWxpbnV4IGF0dHJpYnV0ZXMgKGdub21lICM1Mjk2OTQpCgotLS0KZGlmZiAtLWdpdCBhL2dpby0y LjE2LXNlbGludXgtc2V0LXN1cHBvcnQuZGlmZiBiL2dpby0yLjE2LXNlbGludXgtc2V0LXN1cHBv cnQuZGlmZgpuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwLi40MDU4ZDZkCi0tLSAv ZGV2L251bGwKKysrIGIvZ2lvLTIuMTYtc2VsaW51eC1zZXQtc3VwcG9ydC5kaWZmCkBAIC0wLDAg KzEsMTIwIEBACitJbmRleDogZ2lvL2dsb2NhbGZpbGVpbmZvLmMKKz09PT09PT09PT09PT09PT09 PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT09PT0KKy0tLSBn aW8vZ2xvY2FsZmlsZWluZm8uYwkocmV2aXNpb24gNjg3MSkKKysrKyBnaW8vZ2xvY2FsZmlsZWlu Zm8uYwkod29ya2luZyBjb3B5KQorQEAgLTE3MDYsNiArMTcwNiwyNCBAQAorICNlbmRpZgorIAor IHN0YXRpYyBnYm9vbGVhbgorK2dldF9zdHJpbmcgKGNvbnN0IEdGaWxlQXR0cmlidXRlVmFsdWUg ICp2YWx1ZSwKKysJICAgIGNvbnN0IGNoYXIgICAgICAgICAgICAgICAgKip2YWxfb3V0LAorKwkg ICAgR0Vycm9yICAgICAgICAgICAgICAgICAgICAqKmVycm9yKQorK3sKKysgIGlmICh2YWx1ZS0+ dHlwZSAhPSBHX0ZJTEVfQVRUUklCVVRFX1RZUEVfU1RSSU5HKQorKyAgICB7CisrICAgICAgZ19z ZXRfZXJyb3IgKGVycm9yLCBHX0lPX0VSUk9SLCBHX0lPX0VSUk9SX0lOVkFMSURfQVJHVU1FTlQs CisrCQkgICBfKCJJbnZhbGlkIGF0dHJpYnV0ZSB0eXBlIChieXRlIHN0cmluZyBleHBlY3RlZCki KSk7CisrICAgICAgcmV0dXJuIEZBTFNFOworKyAgICB9CisrCisrICAqdmFsX291dCA9IHZhbHVl LT51LnN0cmluZzsKKysgIAorKyAgcmV0dXJuIFRSVUU7CisrfQorKworKworK3N0YXRpYyBnYm9v bGVhbgorIHNldF91bml4X21vZGUgKGNoYXIgICAgICAgICAgICAgICAgICAgICAgICpmaWxlbmFt ZSwKKyAJICAgICAgIGNvbnN0IEdGaWxlQXR0cmlidXRlVmFsdWUgICp2YWx1ZSwKKyAJICAgICAg IEdFcnJvciAgICAgICAgICAgICAgICAgICAgKiplcnJvcikKK0BAIC0xOTQ4LDYgKzE5NjYsNTIg QEAKKyB9CisgI2VuZGlmCisgCisrCisrc3RhdGljIGdib29sZWFuCisrc2V0X3NlbGludXhfY29u dGV4dCAoY2hhciAgICAgICAgICAgICAgICAgICAgICAgKmZpbGVuYW1lLAorKwkJIGNvbnN0IEdG aWxlQXR0cmlidXRlVmFsdWUgICp2YWx1ZSwKKysJCSBHRXJyb3IgICAgICAgICAgICAgICAgICAg ICoqZXJyb3IpCisreworKyAgY29uc3QgY2hhciAqdmFsOworKworKyAgaWYgKCFnZXRfc3RyaW5n ICh2YWx1ZSwgJnZhbCwgZXJyb3IpKQorKyAgICByZXR1cm4gRkFMU0U7CisrCisrICBpZiAodmFs ID09IE5VTEwpCisrICB7CisrICAgIGdfc2V0X2Vycm9yIChlcnJvciwgR19JT19FUlJPUiwgR19J T19FUlJPUl9JTlZBTElEX0FSR1VNRU5ULAorKyAgICAgICAgICAgICAgIF8oIlNFTGludXggY29u dGV4dCBtdXN0IGJlIG5vbi1OVUxMIikpOworKyAgICByZXR1cm4gRkFMU0U7CisrICB9CisrCisr I2lmZGVmIEhBVkVfU0VMSU5VWAorKyAgaWYgKGlzX3NlbGludXhfZW5hYmxlZCAoKSkgeworKwlz ZWN1cml0eV9jb250ZXh0X3QgdmFsX3M7CisrCQorKwl2YWxfcyA9IGdfc3RyZHVwICh2YWwpOwor KwkKKysJaWYgKHNldGZpbGVjb25fcmF3IChmaWxlbmFtZSwgdmFsX3MpIDwgMCkKKysJeworKyAg ICAgICAgICAgIGludCBlcnJzdiA9IGVycm5vOworKyAgICAgICAgICAgIAorKyAgICAgICAgICAg IGdfc2V0X2Vycm9yIChlcnJvciwgR19JT19FUlJPUiwKKysgICAgICAgICAgICAgICAgICAgICAg ICAgZ19pb19lcnJvcl9mcm9tX2Vycm5vIChlcnJzdiksCisrICAgICAgICAgICAgICAgIAlfKCJF cnJvciBzZXR0aW5nIFNFTGludXggY29udGV4dDogJXMiKSwKKysgICAgICAgICAgICAgICAgICAg ICAgICAgZ19zdHJlcnJvciAoZXJyc3YpKTsKKysgICAgICAgICAgICByZXR1cm4gRkFMU0U7Cisr ICAgICAgICB9CisrICAgICAgICBnX2ZyZWUgKHZhbF9zKTsKKysgIH0gZWxzZSB7CisrICAgIGdf c2V0X2Vycm9yIChlcnJvciwgR19JT19FUlJPUiwgR19JT19FUlJPUl9JTlZBTElEX0FSR1VNRU5U LAorKyAgICAgICAgICAgICAgIF8oIlNFTGludXggaXMgbm90IGVuYWJsZWQgb24gdGhpcyBzeXN0 ZW0iKSk7CisrICAgIHJldHVybiBGQUxTRTsKKysgIH0KKysjZW5kaWYgCisrICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAKKysgIHJldHVybiBUUlVF OworK30KKysKKysKKyBnYm9vbGVhbgorIF9nX2xvY2FsX2ZpbGVfaW5mb19zZXRfYXR0cmlidXRl IChjaGFyICAgICAgICAgICAgICAgICAqZmlsZW5hbWUsCisgCQkJCSAgY29uc3QgY2hhciAgICAg ICAgICAgKmF0dHJpYnV0ZSwKK0BAIC0xOTkzLDYgKzIwNTcsMTEgQEAKKyAgIGVsc2UgaWYgKGdf c3RyX2hhc19wcmVmaXggKGF0dHJpYnV0ZSwgInhhdHRyLXN5czo6IikpCisgICAgIHJldHVybiBz ZXRfeGF0dHIgKGZpbGVuYW1lLCBhdHRyaWJ1dGUsICZ2YWx1ZSwgZXJyb3IpOworICNlbmRpZgor KworKyNpZmRlZiBIQVZFX1NFTElOVVggCisrICBlbHNlIGlmIChzdHJjbXAgKGF0dHJpYnV0ZSwg R19GSUxFX0FUVFJJQlVURV9TRUxJTlVYX0NPTlRFWFQpID09IDApCisrICAgIHJldHVybiBzZXRf c2VsaW51eF9jb250ZXh0IChmaWxlbmFtZSwgJnZhbHVlLCBlcnJvcik7CisrI2VuZGlmCisgICAK KyAgIGdfc2V0X2Vycm9yIChlcnJvciwgR19JT19FUlJPUiwgR19JT19FUlJPUl9OT1RfU1VQUE9S VEVELAorIAkgICAgICAgXygiU2V0dGluZyBhdHRyaWJ1dGUgJXMgbm90IHN1cHBvcnRlZCIpLCBh dHRyaWJ1dGUpOworQEAgLTIxMTAsNSArMjE3OSwyNSBAQAorIAorICAgLyogeGF0dHJzIGFyZSBo YW5kbGVkIGJ5IGRlZmF1bHQgY2FsbGJhY2sgKi8KKyAKKysKKysgIC8qICBTRUxpbnV4IGNvbnRl eHQgKi8KKysjaWZkZWYgSEFWRV9TRUxJTlVYIAorKyAgaWYgKGlzX3NlbGludXhfZW5hYmxlZCAo KSkgeworKyAgICB2YWx1ZSA9IF9nX2ZpbGVfaW5mb19nZXRfYXR0cmlidXRlX3ZhbHVlIChpbmZv LCBHX0ZJTEVfQVRUUklCVVRFX1NFTElOVVhfQ09OVEVYVCk7CisrICAgIGlmICh2YWx1ZSkKKysg ICAgeworKyAgICAgIGlmICghc2V0X3NlbGludXhfY29udGV4dCAoZmlsZW5hbWUsIHZhbHVlLCBl cnJvcikpCisrICAgICAgICB7CisrICAgICAgICAgIHZhbHVlLT5zdGF0dXMgPSBHX0ZJTEVfQVRU UklCVVRFX1NUQVRVU19FUlJPUl9TRVRUSU5HOworKyAgICAgICAgICByZXMgPSBGQUxTRTsKKysg ICAgICAgICAgLyogRG9uJ3Qgc2V0IGVycm9yIG11bHRpcGxlIHRpbWVzICovCisrICAgICAgICAg IGVycm9yID0gTlVMTDsKKysgICAgICAgIH0KKysgICAgICBlbHNlCisrICAgICAgICB2YWx1ZS0+ c3RhdHVzID0gR19GSUxFX0FUVFJJQlVURV9TVEFUVVNfU0VUOworKyAgICB9CisrICB9CisrI2Vu ZGlmCisrCisgICByZXR1cm4gcmVzOworIH0KCmRpZmYgLS1naXQgYS9nbGliMi5zcGVjIGIvZ2xp YjIuc3BlYwppbmRleCA5MWRlMmQzLi5iZmNmM2Q4IDEwMDY0NAotLS0gYS9nbGliMi5zcGVjCisr KyBiL2dsaWIyLnNwZWMKQEAgLTMsNyArMyw3IEBACiBTdW1tYXJ5OiBBIGxpYnJhcnkgb2YgaGFu ZHkgdXRpbGl0eSBmdW5jdGlvbnMKIE5hbWU6IGdsaWIyCiBWZXJzaW9uOiAyLjE2LjMKLVJlbGVh c2U6IDQlez9kaXN0fQorUmVsZWFzZTogNSV7P2Rpc3R9CiBMaWNlbnNlOiBMR1BMdjIrCiBHcm91 cDogU3lzdGVtIEVudmlyb25tZW50L0xpYnJhcmllcwogVVJMOiBodHRwOi8vd3d3Lmd0ay5vcmcK QEAgLTI5LDYgKzI5LDkgQEAgUGF0Y2gxOiByZXZlcnQtMzE2MjIxLnBhdGNoCiAjIGh0dHBzOi8v YnVnemlsbGEucmVkaGF0LmNvbS9zaG93X2J1Zy5jZ2k/aWQ9NDQyODM1CiBQYXRjaDI6IGdpby0y LjE2LW9ubHktcGFzcy11cmktdG8tZ2lvLWFwcHMucGF0Y2gKIAorIyBodHRwczovL2J1Z3ppbGxh Lmdub21lLm9yZy9zaG93X2J1Zy5jZ2k/aWQ9NTI5Njk0CitQYXRjaDM6IGdpby0yLjE2LXNlbGlu dXgtc2V0LXN1cHBvcnQuZGlmZgorCiAlZGVzY3JpcHRpb24gCiBHTGliIGlzIHRoZSBsb3ctbGV2 ZWwgY29yZSBsaWJyYXJ5IHRoYXQgZm9ybXMgdGhlIGJhc2lzCiBmb3IgcHJvamVjdHMgc3VjaCBh cyBHVEsrIGFuZCBHTk9NRS4gSXQgcHJvdmlkZXMgZGF0YSBzdHJ1Y3R1cmUKQEAgLTYzLDYgKzY2 LDcgQEAgb2YgdmVyc2lvbiAyIG9mIHRoZSBHTGliIGxpYnJhcnkuCiAlcGF0Y2gwIC1wMSAtYiAu YXBwaW5mbwogJXBhdGNoMSAtUiAtcDEgLWIgLnJldmVydC0zMTYyMjEKICVwYXRjaDIgLXAwIC1i IC5vbmx5LXBhc3MtdXJpLXRvLWdpby1hcHBzCislcGF0Y2gzIC1wMCAtYiAuc2VsaW51eAogCiAl YnVpbGQKICVjb25maWd1cmUgLS1kaXNhYmxlLWd0ay1kb2MgLS1lbmFibGUtc3RhdGljIApAQCAt MTM1LDYgKzEzOSw5IEBAIHJtIC1yZiAkUlBNX0JVSUxEX1JPT1QKICV7X2xpYmRpcn0vbGliKi5h CiAKICVjaGFuZ2Vsb2cKKyogVGh1IEFwciAyNCAyMDA4IFRvbWFzIEJ6YXRlayA8dGJ6YXRla0By ZWRoYXQuY29tPiAtIDIuMTYuMy01CistIEFkZCBzdXBwb3J0IGZvciBHSU8gdG8gc2V0IHNlbGlu dXggYXR0cmlidXRlcyAoZ25vbWUgIzUyOTY5NCkKKwogKiBUaHUgQXByIDE3IDIwMDggRGF2aWQg WmV1dGhlbiA8ZGF2aWR6QHJlZGhhdC5jb20+IC0gMi4xNi4zLTQKIC0gT25seSBwYXNzIFVSSSdz IGZvciBnaW8gYXBwcyAoIzQ0MjgzNSkKIAo=