From mboxrd@z Thu Jan  1 00:00:00 1970
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
From: Matthias Clasen <mclasen@redhat.com>
To: git-commits@fedoraproject.org
Subject: [rpms/glib2] cve-2026-58016-f44: Fix a GDBus segfault
Date: Tue, 11 Aug 2026 10:35:00 GMT
Message-ID: <178644450076.1.12419756645281774251.rpms-glib2-ce1e8c81d55b@fedoraproject.org>
List-ID: <git-commits.fedoraproject.org>
X-Git-Repo: rpms/glib2
X-Git-Branch: cve-2026-58016-f44
X-Git-Rev: ce1e8c81d55bf8c4a26930e3974e8060641c8ad4
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