From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: David Zeuthen To: git-commits@fedoraproject.org Subject: [rpms/glib2] cve-2026-58016-f44: - Backport patch for g_mount_guess_content_type_sync Date: Tue, 11 Aug 2026 10:33:50 GMT Message-ID: <178644443096.1.15536692209334544899.rpms-glib2-59b8e546f4db@fedoraproject.org> List-ID: X-Git-Repo: rpms/glib2 X-Git-Branch: cve-2026-58016-f44 X-Git-Rev: 59b8e546f4dbb7dc06d1627b50a03320776e0c3a QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvZ2xpYjIKQnJhbmNo IDogY3ZlLTIwMjYtNTgwMTYtZjQ0CkNvbW1pdCA6IDU5YjhlNTQ2ZjRkYmI3ZGMwNmQxNjI3YjUw YTAzMzIwNzc2ZTBjM2EKQXV0aG9yIDogRGF2aWQgWmV1dGhlbiA8ZGF2aWR6QGZlZG9yYXByb2pl Y3Qub3JnPgpEYXRlICAgOiAyMDA4LTA3LTI0VDIzOjQ4OjMyKzAwOjAwClN0YXRzICA6ICsxMzgv LTEgaW4gMiBmaWxlKHMpClVSTCAgICA6IGh0dHBzOi8vc3JjLmZlZG9yYXByb2plY3Qub3JnL3Jw bXMvZ2xpYjIvYy81OWI4ZTU0NmY0ZGJiN2RjMDZkMTYyN2I1MGEwMzMyMDc3NmUwYzNhP2JyYW5j aD1jdmUtMjAyNi01ODAxNi1mNDQKCkxvZzoKLSBCYWNrcG9ydCBwYXRjaCBmb3IgZ19tb3VudF9n dWVzc19jb250ZW50X3R5cGVfc3luYwoKLS0tCmRpZmYgLS1naXQgYS9nbGliLTIuMTcuNC1naW8t Z3Vlc3MtY29udGVudC1zeW5jLnBhdGNoIGIvZ2xpYi0yLjE3LjQtZ2lvLWd1ZXNzLWNvbnRlbnQt c3luYy5wYXRjaApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwLi4wNTJiN2U4Ci0t LSAvZGV2L251bGwKKysrIGIvZ2xpYi0yLjE3LjQtZ2lvLWd1ZXNzLWNvbnRlbnQtc3luYy5wYXRj aApAQCAtMCwwICsxLDEyOSBAQAorLS0tIHRydW5rL2RvY3MvcmVmZXJlbmNlL2dpby9naW8tc2Vj dGlvbnMudHh0CTIwMDgvMDcvMjQgMDE6MTM6MzMJNzI1MQorKysrIHRydW5rL2RvY3MvcmVmZXJl bmNlL2dpby9naW8tc2VjdGlvbnMudHh0CTIwMDgvMDcvMjQgMjE6MjE6MjIJNzI1MgorQEAgLTgx Niw2ICs4MTYsNyBAQAorIGdfbW91bnRfZWplY3RfZmluaXNoCisgZ19tb3VudF9ndWVzc19jb250 ZW50X3R5cGUKKyBnX21vdW50X2d1ZXNzX2NvbnRlbnRfdHlwZV9maW5pc2gKKytnX21vdW50X2d1 ZXNzX2NvbnRlbnRfdHlwZV9zeW5jCisgPFNVQlNFQ1RJT04gU3RhbmRhcmQ+CisgR19JU19NT1VO VAorIEdfTU9VTlQKKy0tLSB0cnVuay9naW8vZ2lvLnN5bWJvbHMJMjAwOC8wNy8yNCAwMToxMzoz Mwk3MjUxCisrKysgdHJ1bmsvZ2lvL2dpby5zeW1ib2xzCTIwMDgvMDcvMjQgMjE6MjE6MjIJNzI1 MgorQEAgLTcxOCw2ICs3MTgsNyBAQAorIGdfbW91bnRfcmVtb3VudF9maW5pc2ggCisgZ19tb3Vu dF9ndWVzc19jb250ZW50X3R5cGUKKyBnX21vdW50X2d1ZXNzX2NvbnRlbnRfdHlwZV9maW5pc2gK KytnX21vdW50X2d1ZXNzX2NvbnRlbnRfdHlwZV9zeW5jCisgI2VuZGlmCisgI2VuZGlmCisgCist LS0gdHJ1bmsvZ2lvL2dtb3VudC5jCTIwMDgvMDcvMjQgMDE6MTM6MzMJNzI1MQorKysrIHRydW5r L2dpby9nbW91bnQuYwkyMDA4LzA3LzI0IDIxOjIxOjIyCTcyNTIKK0BAIC01NzAsOSArNTcwLDEw IEBACisgICogbWVtb3J5IGNhcmRzLiBTZWUgdGhlIDx1bGluayB1cmw9Imh0dHA6Ly93d3cuZnJl ZWRlc2t0b3Aub3JnL3dpa2kvU3BlY2lmaWNhdGlvbnMvc2hhcmVkLW1pbWUtaW5mby1zcGVjIj5z aGFyZWQtbWltZS1pbmZvPC91bGluaz4KKyAgKiBzcGVjaWZpY2F0aW9uIGZvciBtb3JlIG9uIHgt Y29udGVudCB0eXBlcy4KKyAgKgorLSAqIFRoaXMgaXMgYW4gYXN5bmNocm9ub3VzIG9wZXJhdGlv biwgYW5kIGlzIGZpbmlzaGVkIGJ5IGNhbGxpbmcgCistICogZ19tb3VudF9ndWVzc19jb250ZW50 X3R5cGVfZmluaXNoKCkgd2l0aCB0aGUgQG1vdW50IGFuZCAjR0FzeW5jUmVzdWx0IAorLSAqIGRh dGEgcmV0dXJuZWQgaW4gdGhlIEBjYWxsYmFjay4gCisrICogVGhpcyBpcyBhbiBhc3luY2hyb25v dXMgb3BlcmF0aW9uIChzZWUKKysgKiBnX21vdW50X2d1ZXNzX2NvbnRlbnRfdHlwZV9zeW5jKCkg Zm9yIHRoZSBzeW5jaHJvbm91cyB2ZXJzaW9uKSwgYW5kCisrICogaXMgZmluaXNoZWQgYnkgY2Fs bGluZyBnX21vdW50X2d1ZXNzX2NvbnRlbnRfdHlwZV9maW5pc2goKSB3aXRoIHRoZQorKyAqIEBt b3VudCBhbmQgI0dBc3luY1Jlc3VsdCBkYXRhIHJldHVybmVkIGluIHRoZSBAY2FsbGJhY2suCisg ICoKKyAgKiBTaW5jZTogMi4xOAorICAqLworQEAgLTY0NCw2ICs2NDUsNTUgQEAKKyAgIHJldHVy biAoKiBpZmFjZS0+Z3Vlc3NfY29udGVudF90eXBlX2ZpbmlzaCkgKG1vdW50LCByZXN1bHQsIGVy cm9yKTsKKyB9CisgCisrLyoqCisrICogZ19tb3VudF9ndWVzc19jb250ZW50X3R5cGVfc3luYzoK KysgKiBAbW91bnQ6IGEgI0dNb3VudAorKyAqIEBmb3JjZV9yZXNjYW46IFdoZXRoZXIgdG8gZm9y Y2UgYSByZXNjYW4gb2YgdGhlIGNvbnRlbnQuCisrICogICAgIE90aGVyd2lzZSBhIGNhY2hlZCBy ZXN1bHQgd2lsbCBiZSB1c2VkIGlmIGF2YWlsYWJsZQorKyAqIEBjYW5jZWxsYWJsZTogb3B0aW9u YWwgI0dDYW5jZWxsYWJsZSBvYmplY3QsICVOVUxMIHRvIGlnbm9yZQorKyAqIEBlcnJvcjogYSAj R0Vycm9yIGxvY2F0aW9uIHRvIHN0b3JlIHRoZSBlcnJvciBvY2N1cmluZywgb3IgJU5VTEwgdG8K KysgKiAgICAgaWdub3JlCisrICoKKysgKiBUcmllcyB0byBndWVzcyB0aGUgdHlwZSBvZiBjb250 ZW50IHN0b3JlZCBvbiBAbW91bnQuIFJldHVybnMgb25lIG9yCisrICogbW9yZSB0ZXh0dWFsIGlk ZW50aWZpZXJzIG9mIHdlbGwta25vd24gY29udGVudCB0eXBlcyAodHlwaWNhbGx5CisrICogcHJl Zml4ZWQgd2l0aCAieC1jb250ZW50LyIpLCBlLmcuIHgtY29udGVudC9pbWFnZS1kY2YgZm9yIGNh bWVyYSAKKysgKiBtZW1vcnkgY2FyZHMuIFNlZSB0aGUgPHVsaW5rIHVybD0iaHR0cDovL3d3dy5m cmVlZGVza3RvcC5vcmcvd2lraS9TcGVjaWZpY2F0aW9ucy9zaGFyZWQtbWltZS1pbmZvLXNwZWMi PnNoYXJlZC1taW1lLWluZm88L3VsaW5rPgorKyAqIHNwZWNpZmljYXRpb24gZm9yIG1vcmUgb24g eC1jb250ZW50IHR5cGVzLgorKyAqCisrICogVGhpcyBpcyBhbiBzeW5jaHJvbm91cyBvcGVyYXRp b24gYW5kIGFzIHN1Y2ggbWF5IGJsb2NrIGRvaW5nIElPOworKyAqIHNlZSBnX21vdW50X2d1ZXNz X2NvbnRlbnRfdHlwZSgpIGZvciB0aGUgYXN5bmNocm9ub3VzIHZlcnNpb24uCisrICoKKysgKiBS ZXR1cm5zOiBhICVOVUxMLXRlcm1pbmF0ZWQgYXJyYXkgb2YgY29udGVudCB0eXBlcyBvciAlTlVM TCBvbiBlcnJvci4KKysgKiAgICAgQ2FsbGVyIHNob3VsZCBmcmVlIHRoaXMgYXJyYXkgd2l0aCBn X3N0cmZyZWV2KCkgd2hlbiBkb25lIHdpdGggaXQuCisrICoKKysgKiBTaW5jZTogMi4xOAorKyAq LworK2NoYXIgKioKKytnX21vdW50X2d1ZXNzX2NvbnRlbnRfdHlwZV9zeW5jIChHTW91bnQgICAg ICAgICAgICAgICptb3VudCwKKysgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBnYm9v bGVhbiAgICAgICAgICAgICBmb3JjZV9yZXNjYW4sCisrICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgR0NhbmNlbGxhYmxlICAgICAgICAqY2FuY2VsbGFibGUsCisrICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgR0Vycm9yICAgICAgICAgICAgICoqZXJyb3IpCisreworKyAg R01vdW50SWZhY2UgKmlmYWNlOworKworKyAgZ19yZXR1cm5fdmFsX2lmX2ZhaWwgKEdfSVNfTU9V TlQgKG1vdW50KSwgTlVMTCk7CisrCisrICBpZmFjZSA9IEdfTU9VTlRfR0VUX0lGQUNFIChtb3Vu dCk7CisrCisrICBpZiAoaWZhY2UtPmd1ZXNzX2NvbnRlbnRfdHlwZV9zeW5jID09IE5VTEwpCisr ICAgIHsKKysgICAgICBnX3NldF9lcnJvcl9saXRlcmFsIChlcnJvciwKKysgICAgICAgICAgICAg ICAgICAgICAgICAgICBHX0lPX0VSUk9SLCBHX0lPX0VSUk9SX05PVF9TVVBQT1JURUQsCisrICAg ICAgICAgICAgICAgICAgICAgICAgICAgLyogVHJhbnNsYXRvcnM6IFRoaXMgaXMgYW4gZXJyb3IK KysgICAgICAgICAgICAgICAgICAgICAgICAgICAgKiBtZXNzYWdlIGZvciBtb3VudCBvYmplY3Rz IHRoYXQKKysgICAgICAgICAgICAgICAgICAgICAgICAgICAgKiBkb24ndCBpbXBsZW1lbnQgY29u dGVudCB0eXBlIGd1ZXNzaW5nLiAqLworKyAgICAgICAgICAgICAgICAgICAgICAgICAgIF8oIm1v dW50IGRvZXNuJ3QgaW1wbGVtZW50IHN5bmNocm9ub3VzIGNvbnRlbnQgdHlwZSBndWVzc2luZyIp KTsKKysKKysgICAgICByZXR1cm4gTlVMTDsKKysgICAgfQorKworKyAgcmV0dXJuICgqIGlmYWNl LT5ndWVzc19jb250ZW50X3R5cGVfc3luYykgKG1vdW50LCBmb3JjZV9yZXNjYW4sIGNhbmNlbGxh YmxlLCBlcnJvcik7CisrfQorIAorICNkZWZpbmUgX19HX01PVU5UX0NfXworICNpbmNsdWRlICJn aW9hbGlhc2RlZi5jIgorLS0tIHRydW5rL2dpby9nbW91bnQuaAkyMDA4LzA3LzI0IDAxOjEzOjMz CTcyNTEKKysrKyB0cnVuay9naW8vZ21vdW50LmgJMjAwOC8wNy8yNCAyMToyMToyMgk3MjUyCitA QCAtMTE5LDYgKzExOSwxMSBAQAorICAgZ2NoYXIgKiogICAgICAgICAgICgqZ3Vlc3NfY29udGVu dF90eXBlX2ZpbmlzaCkgKEdNb3VudCAgICAgICAgICAgICAgKm1vdW50LAorICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIEdBc3luY1Jlc3VsdCAgICAg ICAgKnJlc3VsdCwKKyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgR0Vycm9yICAgICAgICAgICAgICoqZXJyb3IpOyAKKysKKysgIGdjaGFyICoqICAg ICAgICAgICAoKmd1ZXNzX2NvbnRlbnRfdHlwZV9zeW5jKSAoR01vdW50ICAgICAgICAgICAgICAq bW91bnQsCisrICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg IGdib29sZWFuICAgICAgICAgICAgIGZvcmNlX3Jlc2NhbiwKKysgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgR0NhbmNlbGxhYmxlICAgICAgICAqY2FuY2Vs bGFibGUsCisrICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg IEdFcnJvciAgICAgICAgICAgICAqKmVycm9yKTsKKyB9OworIAorIEdUeXBlIGdfbW91bnRfZ2V0 X3R5cGUgKHZvaWQpIEdfR05VQ19DT05TVDsKK0BAIC0xNjYsNiArMTcxLDExIEBACisgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIEdBc3luY1Jlc3VsdCAg ICAgICAgKnJlc3VsdCwKKyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgR0Vycm9yICAgICAgICAgICAgICoqZXJyb3IpOworIAorK2djaGFyICoqICAgICAg Z19tb3VudF9ndWVzc19jb250ZW50X3R5cGVfc3luYyAoR01vdW50ICAgICAgICAgICAgICAqbW91 bnQsCisrICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBnYm9v bGVhbiAgICAgICAgICAgICBmb3JjZV9yZXNjYW4sCisrICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICBHQ2FuY2VsbGFibGUgICAgICAgICpjYW5jZWxsYWJsZSwK KysgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIEdFcnJvciAg ICAgICAgICAgICAqKmVycm9yKTsKKysKKyBHX0VORF9ERUNMUworIAorICNlbmRpZiAvKiBfX0df TU9VTlRfSF9fICovCistLS0gdHJ1bmsvY29uZmlndXJlLmluCTIwMDgvMDcvMjEgMTc6NTY6MTcJ NzIzNAorKysrIHRydW5rL2NvbmZpZ3VyZS5pbgkyMDA4LzA3LzIxIDE4OjA3OjU1CTcyMzYKK0BA IC0yMyw3ICsyMyw3IEBACisgIworIG00X2RlZmluZShbZ2xpYl9tYWpvcl92ZXJzaW9uXSwgWzJd KQorIG00X2RlZmluZShbZ2xpYl9taW5vcl92ZXJzaW9uXSwgWzE3XSkKKy1tNF9kZWZpbmUoW2ds aWJfbWljcm9fdmVyc2lvbl0sIFs0XSkKKyttNF9kZWZpbmUoW2dsaWJfbWljcm9fdmVyc2lvbl0s IFs1XSkKKyBtNF9kZWZpbmUoW2dsaWJfaW50ZXJmYWNlX2FnZV0sIFswXSkKKyBtNF9kZWZpbmUo W2dsaWJfYmluYXJ5X2FnZV0sCisgICAgICAgICAgIFttNF9ldmFsKDEwMCAqIGdsaWJfbWlub3Jf dmVyc2lvbiArIGdsaWJfbWljcm9fdmVyc2lvbildKQoKZGlmZiAtLWdpdCBhL2dsaWIyLnNwZWMg Yi9nbGliMi5zcGVjCmluZGV4IGE2YzU0OTQuLjQxMzAxZWYgMTAwNjQ0Ci0tLSBhL2dsaWIyLnNw ZWMKKysrIGIvZ2xpYjIuc3BlYwpAQCAtMyw3ICszLDcgQEAKIFN1bW1hcnk6IEEgbGlicmFyeSBv ZiBoYW5keSB1dGlsaXR5IGZ1bmN0aW9ucwogTmFtZTogZ2xpYjIKIFZlcnNpb246IDIuMTcuNAot UmVsZWFzZTogMiV7P2Rpc3R9CitSZWxlYXNlOiAzJXs/ZGlzdH0KIExpY2Vuc2U6IExHUEx2MisK IEdyb3VwOiBTeXN0ZW0gRW52aXJvbm1lbnQvTGlicmFyaWVzCiBVUkw6IGh0dHA6Ly93d3cuZ3Rr Lm9yZwpAQCAtMjgsNiArMjgsMTAgQEAgUGF0Y2gzOiBnaW8tMi4xNi1zZWxpbnV4LXNldC1zdXBw b3J0LmRpZmYKICMgZml4ZWQgaW4gc3ZuCiBQYXRjaDQ6IHN0YXRmcy1jaGVjay5wYXRjaAogCisj IGh0dHA6Ly9idWd6aWxsYS5nbm9tZS5vcmcvc2hvd19idWcuY2dpP2lkPTU0NDU5OSAodXBzdHJl YW0pICsKKyMgYnVtcCB2ZXJzaW9uIHRvIDIuMTcuNSBzaW5jZSBndmZzIHdpbGwgcmVxdWlyZSB0 aGlzIHZlcnNpb24KK1BhdGNoNTogZ2xpYi0yLjE3LjQtZ2lvLWd1ZXNzLWNvbnRlbnQtc3luYy5w YXRjaAorCiAlZGVzY3JpcHRpb24gCiBHTGliIGlzIHRoZSBsb3ctbGV2ZWwgY29yZSBsaWJyYXJ5 IHRoYXQgZm9ybXMgdGhlIGJhc2lzCiBmb3IgcHJvamVjdHMgc3VjaCBhcyBHVEsrIGFuZCBHTk9N RS4gSXQgcHJvdmlkZXMgZGF0YSBzdHJ1Y3R1cmUKQEAgLTYyLDYgKzY2LDcgQEAgb2YgdmVyc2lv biAyIG9mIHRoZSBHTGliIGxpYnJhcnkuCiAlcGF0Y2gyIC1wMSAtYiAub25seS1wYXNzLXVyaS10 by1naW8tYXBwcwogJXBhdGNoMyAtcDAgLWIgLnNlbGludXgKICVwYXRjaDQgLXAxIC1iIC5zdGF0 ZnMtY2hlY2sKKyVwYXRjaDUgLXAxIC1iIC5ndWVzcy1jb250ZW50LXR5cGUtc3luYwogCiAlYnVp bGQKICVjb25maWd1cmUgLS1kaXNhYmxlLWd0ay1kb2MgLS1lbmFibGUtc3RhdGljIApAQCAtMTM2 LDYgKzE0MSw5IEBAIHJtIC1yZiAkUlBNX0JVSUxEX1JPT1QKICV7X2xpYmRpcn0vbGliKi5hCiAK ICVjaGFuZ2Vsb2cKKyogVGh1IEp1bCAyNCAyMDA4IERhdmlkIFpldXRoZW4gPGRhdmlkekByZWRo YXQuY29tPiAtIDIuMTcuNC0zCistIEJhY2twb3J0IHBhdGNoIGZvciBnX21vdW50X2d1ZXNzX2Nv bnRlbnRfdHlwZV9zeW5jCisKICogTW9uIEp1bCAyMSAyMDA4IE1hdHRoaWFzIENsYXNlbiA8bWNs YXNlbkByZWRoYXQuY29tPiAtIDIuMTcuNC0yCiAtIEZpeCBzdGF0ZnMgY29uZmlndXJlIGNoZWNr CiAK