[rpms/glib2] cve-2026-58016-f44: Switch back to timestamp-based invalidation mode but fix seed

[rpms/glib2] cve-2026-58016-f44: Switch back to timestamp-based invalidation mode but fix seed

[@ 2026-08-11 10:36 UTC (permalink / raw)]

            A new commit has been pushed.

            Repo   : rpms/glib2
            Branch : cve-2026-58016-f44
            Commit : 12007a228deec5ff2a4c457edfeb7b4f7f77eab3
            Author : Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl>
            Date   : 2019-03-13T10:13:50+01:00
            Stats  : +7/-3 in 1 file(s)
            URL    : https://src.fedoraproject.org/rpms/glib2/c/12007a228deec5ff2a4c457edfeb7b4f7f77eab3?branch=cve-2026-58016-f44

            Log:
            Switch back to timestamp-based invalidation mode but fix seed

It turns out the hashed-based invalidation mode is buggy.

---
diff --git a/glib2.spec b/glib2.spec
index 4e5fa61..ec743c4 100644
--- a/glib2.spec
+++ b/glib2.spec
@@ -2,7 +2,7 @@
 
 Name: glib2
 Version: 2.60.0
-Release: 2%{?dist}
+Release: 3%{?dist}
 Summary: A library of handy utility functions
 
 License: LGPLv2+
@@ -108,8 +108,9 @@ chrpath --delete $RPM_BUILD_ROOT%{_libdir}/*.so
 
 # Perform byte compilation manually to avoid issues with
 # irreproducibility of the default invalidation mode, see
-# https://www.python.org/dev/peps/pep-0552/.
-export SOURCE_DATE_EPOCH=0
+# https://www.python.org/dev/peps/pep-0552/ and
+# https://bugzilla.redhat.com/show_bug.cgi?id=1686078
+export PYTHONHASHSEED=0
 %py_byte_compile %{__python3} %{buildroot}%{_datadir}
 
 mv  $RPM_BUILD_ROOT%{_bindir}/gio-querymodules $RPM_BUILD_ROOT%{_bindir}/gio-querymodules-%{__isa_bits}
@@ -218,6 +219,9 @@ glib-compile-schemas %{_datadir}/glib-2.0/schemas &> /dev/null || :
 %{_datadir}/installed-tests
 
 %changelog
+* Wed Mar 13 2019 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.60.0-3
+- Switch back to timestamp-based pyc invalidation mode
+
 * Wed Mar  6 2019 Zbigniew Jędrzejewski-Szmek <zbyszek@in.waw.pl> - 2.60.0-2
 - Make sure all .py files have fixed timestamps (fixes issue with
   parallel installability of i686 and amd64 -devel packages)