From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Colin Walters To: git-commits@fedoraproject.org Subject: [rpms/glib2] cve-2026-58016-f44: Backport patches for gmain wakeup for qemu Date: Tue, 11 Aug 2026 10:36:20 GMT Message-ID: <178644458046.1.15741221522811732412.rpms-glib2-05d466c2f3a1@fedoraproject.org> List-ID: X-Git-Repo: rpms/glib2 X-Git-Branch: cve-2026-58016-f44 X-Git-Rev: 05d466c2f3a17a858c689a7b1046e6082860c5d0 ICAgICAgICAgIEEgbmV3IGNvbW1pdCBoYXMgYmVlbiBwdXNoZWQuCgogICAgICAgICAgUmVwbyAg IDogcnBtcy9nbGliMgogICAgICAgICAgQnJhbmNoIDogY3ZlLTIwMjYtNTgwMTYtZjQ0CiAgICAg ICAgICBDb21taXQgOiAwNWQ0NjZjMmYzYTE3YTg1OGM2ODlhN2IxMDQ2ZTYwODI4NjBjNWQwCiAg ICAgICAgICBBdXRob3IgOiBDb2xpbiBXYWx0ZXJzIDx3YWx0ZXJzQHZlcmJ1bS5vcmc+CiAgICAg ICAgICBEYXRlICAgOiAyMDE3LTA0LTExVDEyOjA2OjA1LTA0OjAwCiAgICAgICAgICBTdGF0cyAg OiArMTM4Ly0xIGluIDIgZmlsZShzKQogICAgICAgICAgVVJMICAgIDogaHR0cHM6Ly9zcmMuZmVk b3JhcHJvamVjdC5vcmcvcnBtcy9nbGliMi9jLzA1ZDQ2NmMyZjNhMTdhODU4YzY4OWE3YjEwNDZl NjA4Mjg2MGM1ZDA/YnJhbmNoPWN2ZS0yMDI2LTU4MDE2LWY0NAoKICAgICAgICAgIExvZzoKICAg ICAgICAgIEJhY2twb3J0IHBhdGNoZXMgZm9yIGdtYWluIHdha2V1cCBmb3IgcWVtdQpTZWU6IGh0 dHBzOi8vYnVnemlsbGEuZ25vbWUub3JnL3Nob3dfYnVnLmNnaT9pZD03NjExMDIKCi0tLQpkaWZm IC0tZ2l0IGEvZ2xpYjIuc3BlYyBiL2dsaWIyLnNwZWMKaW5kZXggYTU5ZGJjZC4uNTQxODc0OSAx MDA2NDQKLS0tIGEvZ2xpYjIuc3BlYworKysgYi9nbGliMi5zcGVjCkBAIC01LDEzICs1LDE2IEBA CiAKIE5hbWU6IGdsaWIyCiBWZXJzaW9uOiAyLjUyLjEKLVJlbGVhc2U6IDIlez9kaXN0fQorUmVs ZWFzZTogMyV7P2Rpc3R9CiBTdW1tYXJ5OiBBIGxpYnJhcnkgb2YgaGFuZHkgdXRpbGl0eSBmdW5j dGlvbnMKIAogTGljZW5zZTogTEdQTHYyKwogVVJMOiBodHRwOi8vd3d3Lmd0ay5vcmcKIFNvdXJj ZTA6IGh0dHA6Ly9kb3dubG9hZC5nbm9tZS5vcmcvc291cmNlcy9nbGliLzIuNTIvZ2xpYi0le3Zl cnNpb259LnRhci54egogCisjIGh0dHBzOi8vYnVnemlsbGEuZ25vbWUub3JnL3Nob3dfYnVnLmNn aT9pZD03NjExMDIKK1BhdGNoMDogZ21haW4td2FrZXVwLnBhdGNoCisKIEJ1aWxkUmVxdWlyZXM6 IGNocnBhdGgKIEJ1aWxkUmVxdWlyZXM6IGdldHRleHQKIEJ1aWxkUmVxdWlyZXM6IHBlcmwtZ2Vu ZXJhdG9ycwpAQCAtMjI5LDYgKzIzMiwxMCBAQCBnbGliLWNvbXBpbGUtc2NoZW1hcyAle19kYXRh ZGlyfS9nbGliLTIuMC9zY2hlbWFzICY+IC9kZXYvbnVsbCB8fCA6CiAle19kYXRhZGlyfS9pbnN0 YWxsZWQtdGVzdHMKIAogJWNoYW5nZWxvZworKiBUdWUgQXByIDExIDIwMTcgQ29saW4gV2FsdGVy cyA8d2FsdGVyc0B2ZXJidW0ub3JnPiAtIDIuNTIuMS0zCistIEJhY2twb3J0IHBhdGNoZXMgZm9y IGdtYWluIHdha2V1cCBmb3IgcWVtdQorICBTZWU6IGh0dHBzOi8vYnVnemlsbGEuZ25vbWUub3Jn L3Nob3dfYnVnLmNnaT9pZD03NjExMDIKKwogKiBUdWUgQXByIDExIDIwMTcgQ29saW4gV2FsdGVy cyA8d2FsdGVyc0B2ZXJidW0ub3JnPiAtIDIuNTIuMS0yCiAtIEV4cGxpY3RseSByZW1vdmUgUENS RSBzb3VyY2VzCiAtIFJlbGF0ZWQ6IGh0dHBzOi8vYnVnemlsbGEucmVkaGF0LmNvbS9zaG93X2J1 Zy5jZ2k/aWQ9MTMyNDc3MAoKZGlmZiAtLWdpdCBhL2dtYWluLXdha2V1cC5wYXRjaCBiL2dtYWlu LXdha2V1cC5wYXRjaApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwLi5mN2EzYWE2 Ci0tLSAvZGV2L251bGwKKysrIGIvZ21haW4td2FrZXVwLnBhdGNoCkBAIC0wLDAgKzEsMTMwIEBA CitGcm9tIGQyNmU4OTc5ODkxZDU0OTIxNGM5NTUxMDQ1MjkxNzc1NzZjZDlkZTAgTW9uIFNlcCAx NyAwMDowMDowMCAyMDAxCitGcm9tOiBDb2xpbiBXYWx0ZXJzIDx3YWx0ZXJzQHZlcmJ1bS5vcmc+ CitEYXRlOiBGcmksIDMxIE1hciAyMDE3IDE2OjE5OjU4IC0wNDAwCitTdWJqZWN0OiBbUEFUQ0gg MS8yXSBtYWluOiBDcmVhdGUgYSBoZWxwZXIgZnVuY3Rpb24gZm9yICJvd25lciB3YWtldXAiCisg b3B0aW1pemF0aW9uCisKK1RoZSBvcmlnaW5hbCBwYXRjaCByZWFsbHkgc2hvdWxkIGhhdmUgaW50 cm9kdWNlZCBhIGhlbHBlciAtIGFtb25nCitvdGhlciB0aGluZ3MgaXQgZGVzZXJ2ZXMgYSBjb2Rl IGNvbW1lbnQuICBXZSdyZSBsaWtlbHkgdG8gbWFrZQorZnVydGhlciBjaGFuZ2VzIHRvbywgc28g aXQncyBvYnZpb3VzbHkgYmV0dGVyIHRvIG9ubHkgZG8gaXQgaW4gb25lCitwbGFjZS4KKworU2Vl OiBodHRwczovL2J1Z3ppbGxhLmdub21lLm9yZy9zaG93X2J1Zy5jZ2k/aWQ9NzYxMTAyCistLS0K KyBnbGliL2dtYWluLmMgfCAyOCArKysrKysrKysrKysrKysrKysrLS0tLS0tLS0tCisgMSBmaWxl IGNoYW5nZWQsIDE5IGluc2VydGlvbnMoKyksIDkgZGVsZXRpb25zKC0pCisKK2RpZmYgLS1naXQg YS9nbGliL2dtYWluLmMgYi9nbGliL2dtYWluLmMKK2luZGV4IDRmOTA1NzQuLjg4YjU3ZmQgMTAw NjQ0CistLS0gYS9nbGliL2dtYWluLmMKKysrKyBiL2dsaWIvZ21haW4uYworQEAgLTExMTgsNiAr MTExOCwxOSBAQCBzb3VyY2VfcmVtb3ZlX2Zyb21fY29udGV4dCAoR1NvdXJjZSAgICAgICpzb3Vy Y2UsCisgICAgIH0KKyB9CisgCisrLyogU2VlIGh0dHBzOi8vYnVnemlsbGEuZ25vbWUub3JnL3No b3dfYnVnLmNnaT9pZD03NjExMDIgZm9yCisrICogdGhlIGludHJvZHVjdGlvbiBvZiB0aGlzLgor KyAqCisrICogVGhlIG1haW4gb3B0aW1pemF0aW9uIGlzIHRvIGF2b2lkIHdha2luZyB1cCB0aGUg bWFpbgorKyAqIGNvbnRleHQgaWYgYSBjaGFuZ2UgaXMgbWFkZSBieSB0aGUgY3VycmVudCBvd25l ci4KKysgKi8KKytzdGF0aWMgdm9pZAorK2NvbmRpdGlvbmFsX3dha2V1cCAoR01haW5Db250ZXh0 ICpjb250ZXh0KQorK3sKKysgIGlmIChjb250ZXh0LT5vd25lciAmJiBjb250ZXh0LT5vd25lciAh PSBHX1RIUkVBRF9TRUxGKQorKyAgICBnX3dha2V1cF9zaWduYWwgKGNvbnRleHQtPndha2V1cCk7 CisrfQorKworIHN0YXRpYyBndWludAorIGdfc291cmNlX2F0dGFjaF91bmxvY2tlZCAoR1NvdXJj ZSAgICAgICpzb3VyY2UsCisgICAgICAgICAgICAgICAgICAgICAgICAgICBHTWFpbkNvbnRleHQg KmNvbnRleHQsCitAQCAtMTE2NCw4ICsxMTc3LDggQEAgZ19zb3VyY2VfYXR0YWNoX3VubG9ja2Vk IChHU291cmNlICAgICAgKnNvdXJjZSwKKyAgIC8qIElmIGFub3RoZXIgdGhyZWFkIGhhcyBhY3F1 aXJlZCB0aGUgY29udGV4dCwgd2FrZSBpdCB1cCBzaW5jZSBpdAorICAgICogbWlnaHQgYmUgaW4g cG9sbCgpIHJpZ2h0IG5vdy4KKyAgICAqLworLSAgaWYgKGRvX3dha2V1cCAmJiBjb250ZXh0LT5v d25lciAmJiBjb250ZXh0LT5vd25lciAhPSBHX1RIUkVBRF9TRUxGKQorLSAgICBnX3dha2V1cF9z aWduYWwgKGNvbnRleHQtPndha2V1cCk7CisrICBpZiAoZG9fd2FrZXVwKQorKyAgICBjb25kaXRp b25hbF93YWtldXAgKGNvbnRleHQpOworIAorICAgcmV0dXJuIHNvdXJjZS0+c291cmNlX2lkOwor IH0KK0BAIC0xODM5LDggKzE4NTIsNyBAQCBnX3NvdXJjZV9zZXRfcmVhZHlfdGltZSAoR1NvdXJj ZSAqc291cmNlLAorICAgICB7CisgICAgICAgLyogUXVpdGUgbGlrZWx5IHRoYXQgd2UgbmVlZCB0 byBjaGFuZ2UgdGhlIHRpbWVvdXQgb24gdGhlIHBvbGwgKi8KKyAgICAgICBpZiAoIVNPVVJDRV9C TE9DS0VEIChzb3VyY2UpKQorLSAgICAgICAgaWYgKGNvbnRleHQtPm93bmVyICYmIGNvbnRleHQt Pm93bmVyICE9IEdfVEhSRUFEX1NFTEYpCistICAgICAgICAgIGdfd2FrZXVwX3NpZ25hbCAoY29u dGV4dC0+d2FrZXVwKTsKKysgICAgICAgIGNvbmRpdGlvbmFsX3dha2V1cCAoY29udGV4dCk7Cisg ICAgICAgVU5MT0NLX0NPTlRFWFQgKGNvbnRleHQpOworICAgICB9CisgfQorQEAgLTQzNTIsOCAr NDM2NCw3IEBAIGdfbWFpbl9jb250ZXh0X2FkZF9wb2xsX3VubG9ja2VkIChHTWFpbkNvbnRleHQg KmNvbnRleHQsCisgICBjb250ZXh0LT5wb2xsX2NoYW5nZWQgPSBUUlVFOworIAorICAgLyogTm93 IHdha2UgdXAgdGhlIG1haW4gbG9vcCBpZiBpdCBpcyB3YWl0aW5nIGluIHRoZSBwb2xsKCkgKi8K Ky0gIGlmIChjb250ZXh0LT5vd25lciAmJiBjb250ZXh0LT5vd25lciAhPSBHX1RIUkVBRF9TRUxG KQorLSAgICBnX3dha2V1cF9zaWduYWwgKGNvbnRleHQtPndha2V1cCk7CisrICBjb25kaXRpb25h bF93YWtldXAgKGNvbnRleHQpOworIH0KKyAKKyAvKioKK0BAIC00NDExLDEwICs0NDIyLDkgQEAg Z19tYWluX2NvbnRleHRfcmVtb3ZlX3BvbGxfdW5sb2NrZWQgKEdNYWluQ29udGV4dCAqY29udGV4 dCwKKyAgICAgfQorIAorICAgY29udGV4dC0+cG9sbF9jaGFuZ2VkID0gVFJVRTsKKy0gIAorKwor ICAgLyogTm93IHdha2UgdXAgdGhlIG1haW4gbG9vcCBpZiBpdCBpcyB3YWl0aW5nIGluIHRoZSBw b2xsKCkgKi8KKy0gIGlmIChjb250ZXh0LT5vd25lciAmJiBjb250ZXh0LT5vd25lciAhPSBHX1RI UkVBRF9TRUxGKQorLSAgICBnX3dha2V1cF9zaWduYWwgKGNvbnRleHQtPndha2V1cCk7CisrICBj b25kaXRpb25hbF93YWtldXAgKGNvbnRleHQpOworIH0KKyAKKyAvKioKKy0tIAorMi45LjMKKwor CitGcm9tIGM0YjNmZDE0ODdkYWQ5ZGVjZTY3NDUzY2VmNDk1NGIwN2RkM2JkYzEgTW9uIFNlcCAx NyAwMDowMDowMCAyMDAxCitGcm9tOiBQYW9sbyBCb256aW5pIDxib256aW5pQGdudS5vcmc+CitE YXRlOiBNb24sIDMgQXByIDIwMTcgMTM6MzI6MzIgLTA0MDAKK1N1YmplY3Q6IFtQQVRDSCAyLzJd IGdtYWluOiBTaWduYWwgd2FrZXVwcyBpZiBjb250ZXh0IGhhcyBuZXZlciBiZWVuIGFjcXVpcmVk CisgYXMgd2VsbAorCitTaG91bGQgYWRkcmVzcyBiYWNrd2FyZHMgY29tcGF0aWJpbGl0eSB3aXRo IGhvdyBxZW11IGlzIHVzaW5nCitgR01haW5Db250ZXh0YC4KKworU2VlIGh0dHBzOi8vYnVnemls bGEuZ25vbWUub3JnL3Nob3dfYnVnLmNnaT9pZD03NjExMDIjYzE0CisKK0lucHV0LWludG8ta2V5 Ym9hcmQtYnk6IENvbGluIFdhbHRlcnMgPHdhbHRlcnNAdmVyYnVtLm9yZz4KKy0tLQorIGdsaWIv Z21haW4uYyB8IDEyICsrKysrKysrKysrLQorIDEgZmlsZSBjaGFuZ2VkLCAxMSBpbnNlcnRpb25z KCspLCAxIGRlbGV0aW9uKC0pCisKK2RpZmYgLS1naXQgYS9nbGliL2dtYWluLmMgYi9nbGliL2dt YWluLmMKK2luZGV4IDg4YjU3ZmQuLmYzOTBjNDYgMTAwNjQ0CistLS0gYS9nbGliL2dtYWluLmMK KysrKyBiL2dsaWIvZ21haW4uYworQEAgLTExMjcsNyArMTEyNywxNyBAQCBzb3VyY2VfcmVtb3Zl X2Zyb21fY29udGV4dCAoR1NvdXJjZSAgICAgICpzb3VyY2UsCisgc3RhdGljIHZvaWQKKyBjb25k aXRpb25hbF93YWtldXAgKEdNYWluQ29udGV4dCAqY29udGV4dCkKKyB7CistICBpZiAoY29udGV4 dC0+b3duZXIgJiYgY29udGV4dC0+b3duZXIgIT0gR19USFJFQURfU0VMRikKKysgIC8qIFdlIHdh bnQgdG8gc2lnbmFsIHdha2V1cHMgaW4gdHdvIGNhc2VzOgorKyAgICogIDEgV2hlbiB0aGUgY29u dGV4dCBpcyBvd25lZCBieSBhbm90aGVyIHRocmVhZAorKyAgICogIDIgV2hlbiB0aGUgY29udGV4 dCBvd25lciBpcyBOVUxMICh0d28gc3ViY2FzZXMpCisrICAgKiAgIDJhIFBvc3NpYmxlIGlmIHRo ZSBjb250ZXh0IGhhcyBuZXZlciBiZWVuIGFjcXVpcmVkCisrICAgKiAgIDJiIE9yIGlmIHRoZSBj b250ZXh0IGhhcyBubyBjdXJyZW50IG93bmVyCisrICAgKgorKyAgICogQXQgbGVhc3QgY2FzZSAy YSkgaXMgbmVjZXNzYXJ5IHRvIGVuc3VyZSBiYWNrd2FyZHMgY29tcGF0aWJpbGl0eSB3aXRoCisr ICAgKiBxZW11J3MgdXNlIG9mIEdNYWluQ29udGV4dC4KKysgICAqIGh0dHBzOi8vYnVnemlsbGEu Z25vbWUub3JnL3Nob3dfYnVnLmNnaT9pZD03NjExMDIjYzE0CisrICAgKi8KKysgIGlmIChjb250 ZXh0LT5vd25lciAhPSBHX1RIUkVBRF9TRUxGKQorICAgICBnX3dha2V1cF9zaWduYWwgKGNvbnRl eHQtPndha2V1cCk7CisgfQorIAorLS0gCisyLjkuMworCg==