From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: David King To: git-commits@fedoraproject.org Subject: [rpms/glib2] cve-2026-58016-f44: Fix CVE-2019-12450 (#1719142) Date: Tue, 11 Aug 2026 10:36:48 GMT Message-ID: <178644460897.1.3573324142232169232.rpms-glib2-e81b0cb6f753@fedoraproject.org> List-ID: X-Git-Repo: rpms/glib2 X-Git-Branch: cve-2026-58016-f44 X-Git-Rev: e81b0cb6f753ea70dcb613a1e59fc875f8affe36 QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvZ2xpYjIKQnJhbmNo IDogY3ZlLTIwMjYtNTgwMTYtZjQ0CkNvbW1pdCA6IGU4MWIwY2I2Zjc1M2VhNzBkY2I2MTNhMWU1 OWZjODc1ZjhhZmZlMzYKQXV0aG9yIDogRGF2aWQgS2luZyA8YW1pZ2FkYXZlQGFtaWdhZGF2ZS5j b20+CkRhdGUgICA6IDIwMTktMDYtMTFUMDk6MDQ6NDIrMDE6MDAKU3RhdHMgIDogKzU5Ly0xIGlu IDIgZmlsZShzKQpVUkwgICAgOiBodHRwczovL3NyYy5mZWRvcmFwcm9qZWN0Lm9yZy9ycG1zL2ds aWIyL2MvZTgxYjBjYjZmNzUzZWE3MGRjYjYxM2ExZTU5ZmM4NzVmOGFmZmUzNj9icmFuY2g9Y3Zl LTIwMjYtNTgwMTYtZjQ0CgpMb2c6CkZpeCBDVkUtMjAxOS0xMjQ1MCAoIzE3MTkxNDIpCgotLS0K ZGlmZiAtLWdpdCBhL0NWRS0yMDE5LTEyNDUwLnBhdGNoIGIvQ1ZFLTIwMTktMTI0NTAucGF0Y2gK bmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXggMDAwMDAwMC4uNmM1MTRlMQotLS0gL2Rldi9udWxs CisrKyBiL0NWRS0yMDE5LTEyNDUwLnBhdGNoCkBAIC0wLDAgKzEsNTMgQEAKK0Zyb20gZDhmOGY0 ZDYzN2NlNDNmODY5OWJhOTRjOWI3NjQ4YmVkYTBjYTE3NCBNb24gU2VwIDE3IDAwOjAwOjAwIDIw MDEKK0Zyb206IE9uZHJlaiBIb2x5IDxvaG9seUByZWRoYXQuY29tPgorRGF0ZTogVGh1LCAyMyBN YXkgMjAxOSAxMDo0MTo1MyArMDIwMAorU3ViamVjdDogW1BBVENIXSBnZmlsZTogTGltaXQgYWNj ZXNzIHRvIGZpbGVzIHdoZW4gY29weWluZworCitmaWxlX2NvcHlfZmFsbGJhY2sgY3JlYXRlcyBu ZXcgZmlsZXMgd2l0aCBkZWZhdWx0IHBlcm1pc3Npb25zIGFuZAorc2V0IHRoZSBjb3JyZWN0IHBl cm1pc3Npb25zIGFmdGVyIHRoZSBvcGVyYXRpb24gaXMgZmluaXNoZWQuIFRoaXMKK21pZ2h0IGNh dXNlIHRoYXQgdGhlIGZpbGVzIGNhbiBiZSBhY2Nlc3NpYmxlIGJ5IG1vcmUgdXNlcnMgZHVyaW5n Cit0aGUgb3BlcmF0aW9uIHRoYW4gZXhwZWN0ZWQuIFVzZSBHX0ZJTEVfQ1JFQVRFX1BSSVZBVEUg Zm9yIHRoZSBuZXcKK2ZpbGVzIHRvIGxpbWl0IGFjY2VzcyB0byB0aG9zZSBmaWxlcy4KKy0tLQor IGdpby9nZmlsZS5jIHwgMTEgKysrKysrLS0tLS0KKyAxIGZpbGUgY2hhbmdlZCwgNiBpbnNlcnRp b25zKCspLCA1IGRlbGV0aW9ucygtKQorCitkaWZmIC0tZ2l0IGEvZ2lvL2dmaWxlLmMgYi9naW8v Z2ZpbGUuYworaW5kZXggMjRiMTM2ZDgwLi43NGI1ODA0N2MgMTAwNjQ0CistLS0gYS9naW8vZ2Zp bGUuYworKysrIGIvZ2lvL2dmaWxlLmMKK0BAIC0zMjg0LDEyICszMjg0LDEyIEBAIGZpbGVfY29w eV9mYWxsYmFjayAoR0ZpbGUgICAgICAgICAgICAgICAgICAqc291cmNlLAorICAgICAgICAgb3V0 ID0gKEdPdXRwdXRTdHJlYW0qKV9nX2xvY2FsX2ZpbGVfb3V0cHV0X3N0cmVhbV9yZXBsYWNlIChf Z19sb2NhbF9maWxlX2dldF9maWxlbmFtZSAoR19MT0NBTF9GSUxFIChkZXN0aW5hdGlvbikpLAor ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICBGQUxTRSwgTlVMTCwKKyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgZmxhZ3MgJiBHX0ZJTEVfQ09QWV9C QUNLVVAsCistICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgIEdfRklMRV9DUkVBVEVfUkVQTEFDRV9ERVNUSU5BVElPTiwKKy0g ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgaW5mbywKKysgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgR19GSUxFX0NSRUFURV9SRVBMQUNFX0RFU1RJTkFU SU9OIHwKKysgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgR19GSUxFX0NSRUFURV9QUklWQVRFLCBpbmZvLAorICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICBjYW5jZWxsYWJsZSwgZXJyb3IpOworICAgICAgIGVsc2UKKyAgICAgICAgIG91dCA9IChHT3V0 cHV0U3RyZWFtKilfZ19sb2NhbF9maWxlX291dHB1dF9zdHJlYW1fY3JlYXRlIChfZ19sb2NhbF9m aWxlX2dldF9maWxlbmFtZSAoR19MT0NBTF9GSUxFIChkZXN0aW5hdGlvbikpLAorLSAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg IEZBTFNFLCAwLCBpbmZvLAorKyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgIEZBTFNFLCBHX0ZJTEVfQ1JFQVRFX1BSSVZBVEUs IGluZm8sCisgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgY2FuY2VsbGFibGUsIGVycm9yKTsKKyAgICAgfQorICAgZWxzZSBp ZiAoZmxhZ3MgJiBHX0ZJTEVfQ09QWV9PVkVSV1JJVEUpCitAQCAtMzI5NywxMiArMzI5NywxMyBA QCBmaWxlX2NvcHlfZmFsbGJhY2sgKEdGaWxlICAgICAgICAgICAgICAgICAgKnNvdXJjZSwKKyAg ICAgICBvdXQgPSAoR091dHB1dFN0cmVhbSAqKWdfZmlsZV9yZXBsYWNlIChkZXN0aW5hdGlvbiwK KyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBOVUxMLAorICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGZsYWdzICYgR19GSUxF X0NPUFlfQkFDS1VQLAorLSAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIEdfRklMRV9DUkVBVEVfUkVQTEFDRV9ERVNUSU5BVElPTiwKKysgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBHX0ZJTEVfQ1JFQVRFX1JFUExBQ0VfREVTVElO QVRJT04gfAorKyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIEdf RklMRV9DUkVBVEVfUFJJVkFURSwKKyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICBjYW5jZWxsYWJsZSwgZXJyb3IpOworICAgICB9CisgICBlbHNlCisgICAgIHsK Ky0gICAgICBvdXQgPSAoR091dHB1dFN0cmVhbSAqKWdfZmlsZV9jcmVhdGUgKGRlc3RpbmF0aW9u LCAwLCBjYW5jZWxsYWJsZSwgZXJyb3IpOworKyAgICAgIG91dCA9IChHT3V0cHV0U3RyZWFtICop Z19maWxlX2NyZWF0ZSAoZGVzdGluYXRpb24sIEdfRklMRV9DUkVBVEVfUFJJVkFURSwgY2FuY2Vs bGFibGUsIGVycm9yKTsKKyAgICAgfQorIAorICAgaWYgKCFvdXQpCistLSAKKzIuMjEuMAorCgpk aWZmIC0tZ2l0IGEvZ2xpYjIuc3BlYyBiL2dsaWIyLnNwZWMKaW5kZXggZWZmMTQ5MS4uNWFkNzZk NyAxMDA2NDQKLS0tIGEvZ2xpYjIuc3BlYworKysgYi9nbGliMi5zcGVjCkBAIC0yLDEyICsyLDE0 IEBACiAKIE5hbWU6IGdsaWIyCiBWZXJzaW9uOiAyLjYxLjEKLVJlbGVhc2U6IDElez9kaXN0fQor UmVsZWFzZTogMiV7P2Rpc3R9CiBTdW1tYXJ5OiBBIGxpYnJhcnkgb2YgaGFuZHkgdXRpbGl0eSBm dW5jdGlvbnMKIAogTGljZW5zZTogTEdQTHYyKwogVVJMOiBodHRwOi8vd3d3Lmd0ay5vcmcKIFNv dXJjZTA6IGh0dHA6Ly9kb3dubG9hZC5nbm9tZS5vcmcvc291cmNlcy9nbGliLzIuNjEvZ2xpYi0l e3ZlcnNpb259LnRhci54egorIyBodHRwczovL2J1Z3ppbGxhLnJlZGhhdC5jb20vc2hvd19idWcu Y2dpP2lkPTE3MTkxNDIKK1BhdGNoMDogIENWRS0yMDE5LTEyNDUwLnBhdGNoCiAKIEJ1aWxkUmVx dWlyZXM6IGNocnBhdGgKIEJ1aWxkUmVxdWlyZXM6IGdjYwpAQCAtMjE5LDYgKzIyMSw5IEBAIGds aWItY29tcGlsZS1zY2hlbWFzICV7X2RhdGFkaXJ9L2dsaWItMi4wL3NjaGVtYXMgJj4gL2Rldi9u dWxsIHx8IDoKICV7X2RhdGFkaXJ9L2luc3RhbGxlZC10ZXN0cwogCiAlY2hhbmdlbG9nCisqIFR1 ZSBKdW4gMTEgMjAxOSBEYXZpZCBLaW5nIDxhbWlnYWRhdmVAYW1pZ2FkYXZlLmNvbT4gLSAyLjYx LjEtMgorLSBGaXggQ1ZFLTIwMTktMTI0NTAgKCMxNzE5MTQyKQorCiAqIEZyaSBNYXkgMjQgMjAx OSBLYWxldiBMZW1iZXIgPGtsZW1iZXJAcmVkaGF0LmNvbT4gLSAyLjYxLjEtMQogLSBVcGRhdGUg dG8gMi42MS4xCiAK