From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Kalev Lember To: git-commits@fedoraproject.org Subject: [rpms/glib2] cve-2026-58016-f44: Update to 2.63.5 Date: Tue, 11 Aug 2026 10:36:56 GMT Message-ID: <178644461606.1.4556813648235386352.rpms-glib2-807f65d4bde3@fedoraproject.org> List-ID: X-Git-Repo: rpms/glib2 X-Git-Branch: cve-2026-58016-f44 X-Git-Rev: 807f65d4bde3957a28bf711c2df6d3228a0e4b96 QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvZ2xpYjIKQnJhbmNo IDogY3ZlLTIwMjYtNTgwMTYtZjQ0CkNvbW1pdCA6IDgwN2Y2NWQ0YmRlMzk1N2EyOGJmNzExYzJk ZjZkMzIyOGEwZTRiOTYKQXV0aG9yIDogS2FsZXYgTGVtYmVyIDxrbGVtYmVyQHJlZGhhdC5jb20+ CkRhdGUgICA6IDIwMjAtMDItMDNUMTE6MTM6MDcrMDE6MDAKU3RhdHMgIDogKzYvLTEwNyBpbiAz IGZpbGUocykKVVJMICAgIDogaHR0cHM6Ly9zcmMuZmVkb3JhcHJvamVjdC5vcmcvcnBtcy9nbGli Mi9jLzgwN2Y2NWQ0YmRlMzk1N2EyOGJmNzExYzJkZjZkMzIyOGEwZTRiOTY/YnJhbmNoPWN2ZS0y MDI2LTU4MDE2LWY0NAoKTG9nOgpVcGRhdGUgdG8gMi42My41CgotLS0KZGlmZiAtLWdpdCBhLzAw MDEtRml4LWluaXRpYWxpemF0aW9uLWxvZ2ljLW9mLUdUaHJlYWRQb29sLWlmLXRoZS1maXJzdC5w YXRjaCBiLzAwMDEtRml4LWluaXRpYWxpemF0aW9uLWxvZ2ljLW9mLUdUaHJlYWRQb29sLWlmLXRo ZS1maXJzdC5wYXRjaApkZWxldGVkIGZpbGUgbW9kZSAxMDA2NDQKaW5kZXggNTY4YWM3Yi4uMDAw MDAwMAotLS0gYS8wMDAxLUZpeC1pbml0aWFsaXphdGlvbi1sb2dpYy1vZi1HVGhyZWFkUG9vbC1p Zi10aGUtZmlyc3QucGF0Y2gKKysrIC9kZXYvbnVsbApAQCAtMSw5OSArMCwwIEBACi1Gcm9tIDc4 YmFlODVkMjE1ZTNlMWNlNzdjODI4YzIwNzVkMjE2ZWRiYzM2ZjYgTW9uIFNlcCAxNyAwMDowMDow MCAyMDAxCi1Gcm9tOiA9P1VURi04P3E/U2ViYXN0aWFuPTIwRHI9QzM9QjZnZT89IDxzZWJhc3Rp YW5AY2VudHJpY3VsYXIuY29tPgotRGF0ZTogU2F0LCAyNSBKYW4gMjAyMCAxMTowODoyMiArMDIw MAotU3ViamVjdDogW1BBVENIXSBGaXggaW5pdGlhbGl6YXRpb24gbG9naWMgb2YgR1RocmVhZFBv b2wgaWYgdGhlIGZpcnN0IGNyZWF0ZWQKLSBwb29sIGlzIGFuIGV4Y2x1c2l2ZSBvbmUKLQotUHJl dmlvdXNseSB3ZSB3b3VsZCBvbmx5IGV2ZXIgcnVuIHRoZSBpbml0aWFsaXphdGlvbiBjb2RlIG9u Y2UsIGJ1dCBwYXJ0Ci1vZiBpdCBvbmx5IGlmIGEgbm9uLWV4Y2x1c2l2ZSBwb29sIHdhcyBjcmVh dGVkLiBUaGlzIGNhdXNlZCB0aGUgc2hhcmVkCi1zdGF0ZSB0byBiZSBpbmNvbnNpc3RlbnQgaWYg dGhlIGZpcnN0IHBvb2wgdG8gYmUgY3JlYXRlZCB3YXMgZXhjbHVzaXZlCi1hbmQgdGhlIHNlY29u ZCBub24tZXhjbHVzaXZlLgotCi1GaXhlcyBodHRwczovL2dpdGxhYi5nbm9tZS5vcmcvR05PTUUv Z2xpYi9pc3N1ZXMvMjAxMgotLS0tCi0gZ2xpYi9ndGhyZWFkcG9vbC5jIHwgNjcgKysrKysrKysr KysrKysrKysrKysrKystLS0tLS0tLS0tLS0tLS0tLS0tLS0tLQotIDEgZmlsZSBjaGFuZ2VkLCAz MyBpbnNlcnRpb25zKCspLCAzNCBkZWxldGlvbnMoLSkKLQotZGlmZiAtLWdpdCBhL2dsaWIvZ3Ro cmVhZHBvb2wuYyBiL2dsaWIvZ3RocmVhZHBvb2wuYwotaW5kZXggZGQ2NTQ2YmU0NTY4YzdiODE5 MTQ1ZDhjYmM2NjU0YzljMTgyZjc2Ny4uZWQzNGZjZDUyNWI2MzkzNzYzNmFlMzFiMTQ2MWFmODM0 MWU1NzhlNSAxMDA2NDQKLS0tLSBhL2dsaWIvZ3RocmVhZHBvb2wuYwotKysrIGIvZ2xpYi9ndGhy ZWFkcG9vbC5jCi1AQCAtNTc5LDQyICs1NzksNDEgQEAgZ190aHJlYWRfcG9vbF9uZXcgKEdGdW5j ICAgICAgZnVuYywKLSAKLSAgIEdfTE9DSyAoaW5pdCk7Ci0gICBpZiAoIXVudXNlZF90aHJlYWRf cXVldWUpCi0tICAgIHsKLSAgICAgICB1bnVzZWRfdGhyZWFkX3F1ZXVlID0gZ19hc3luY19xdWV1 ZV9uZXcgKCk7Ci0tICAgICAgLyogRm9yIHRoZSB2ZXJ5IGZpcnN0IG5vbi1leGNsdXNpdmUgdGhy ZWFkLXBvb2wgd2UgcmVtZW1iZXIgdGhlIHRocmVhZAotLSAgICAgICAqIHNjaGVkdWxlciBzZXR0 aW5ncyBvZiB0aGUgdGhyZWFkIGNyZWF0aW5nIHRoZSBwb29sLCBpZiBzdXBwb3J0ZWQgYnkKLS0g ICAgICAgKiB0aGUgR1RocmVhZCBpbXBsZW1lbnRhdGlvbi4gVGhpcyBpcyB0aGVuIHVzZWQgZm9y IG1ha2luZyBzdXJlIHRoYXQKLS0gICAgICAgKiBhbGwgdGhyZWFkcyBjcmVhdGVkIG9uIHRoZSBu b24tZXhjbHVzaXZlIHRocmVhZC1wb29sIGhhdmUgdGhlIHNhbWUKLS0gICAgICAgKiBzY2hlZHVs ZXIgc2V0dGluZ3MsIGFuZCBtb3JlIGltcG9ydGFudGx5IGRvbid0IGp1c3QgaW5oZXJpdCB0aGVt Ci0tICAgICAgICogZnJvbSB0aGUgdGhyZWFkIHRoYXQganVzdCBoYXBwZW5lZCB0byBwdXNoIGEg bmV3IHRhc2sgYW5kIGNhdXNlZAotLSAgICAgICAqIGEgbmV3IHRocmVhZCB0byBiZSBjcmVhdGVk LgotLSAgICAgICAqCi0tICAgICAgICogTm90IGRvaW5nIHNvIGNvdWxkIGNhdXNlIHJlYWwtdGlt ZSBwcmlvcml0eSB0aHJlYWRzIG9yIG90aGVyd2lzZQotLSAgICAgICAqIHRocmVhZHMgd2l0aCBw cm9ibGVtYXRpYyBzY2hlZHVsZXIgc2V0dGluZ3MgdG8gYmUgcGFydCBvZiB0aGUKLS0gICAgICAg KiBub24tZXhjbHVzaXZlIHRocmVhZC1wb29scy4KLS0gICAgICAgKgotLSAgICAgICAqIElmIHRo aXMgaXMgbm90IHN1cHBvcnRlZCBieSB0aGUgR1RocmVhZCBpbXBsZW1lbnRhdGlvbiB0aGVuIHdl IGhlcmUKLS0gICAgICAgKiBzdGFydCBhIHRocmVhZCB0aGF0IHdpbGwgaW5oZXJpdCB0aGUgc2No ZWR1bGVyIHNldHRpbmdzIGZyb20gdGhpcwotLSAgICAgICAqIHZlcnkgdGhyZWFkIGFuZCB3aG9z ZSBvbmx5IHB1cnBvc2UgaXMgdG8gc3Bhd24gbmV3IHRocmVhZHMgd2l0aCB0aGUKLS0gICAgICAg KiBzYW1lIHNldHRpbmdzIGZvciB1c2UgYnkgdGhlIG5vbi1leGNsdXNpdmUgdGhyZWFkLXBvb2xz LgotLSAgICAgICAqCi0tICAgICAgICoKLS0gICAgICAgKiBGb3Igbm9uLWV4Y2x1c2l2ZSB0aHJl YWQtcG9vbHMgdGhpcyBpcyBub3QgcmVxdWlyZWQgYXMgYWxsIHRocmVhZHMKLS0gICAgICAgKiBh cmUgY3JlYXRlZCBpbW1lZGlhdGVseSBiZWxvdyBhbmQgYXJlIHJ1bm5pbmcgZm9yZXZlciwgc28g dGhleSB3aWxsCi0tICAgICAgICogYXV0b21hdGljYWxseSBpbmhlcml0IHRoZSBzY2hlZHVsZXIg c2V0dGluZ3MgZnJvbSB0aGlzIHZlcnkgdGhyZWFkLgotLSAgICAgICAqLwotLSAgICAgIGlmICgh ZXhjbHVzaXZlKQotKwotKyAgLyogRm9yIHRoZSB2ZXJ5IGZpcnN0IG5vbi1leGNsdXNpdmUgdGhy ZWFkLXBvb2wgd2UgcmVtZW1iZXIgdGhlIHRocmVhZAotKyAgICogc2NoZWR1bGVyIHNldHRpbmdz IG9mIHRoZSB0aHJlYWQgY3JlYXRpbmcgdGhlIHBvb2wsIGlmIHN1cHBvcnRlZCBieQotKyAgICog dGhlIEdUaHJlYWQgaW1wbGVtZW50YXRpb24uIFRoaXMgaXMgdGhlbiB1c2VkIGZvciBtYWtpbmcg c3VyZSB0aGF0Ci0rICAgKiBhbGwgdGhyZWFkcyBjcmVhdGVkIG9uIHRoZSBub24tZXhjbHVzaXZl IHRocmVhZC1wb29sIGhhdmUgdGhlIHNhbWUKLSsgICAqIHNjaGVkdWxlciBzZXR0aW5ncywgYW5k IG1vcmUgaW1wb3J0YW50bHkgZG9uJ3QganVzdCBpbmhlcml0IHRoZW0KLSsgICAqIGZyb20gdGhl IHRocmVhZCB0aGF0IGp1c3QgaGFwcGVuZWQgdG8gcHVzaCBhIG5ldyB0YXNrIGFuZCBjYXVzZWQK LSsgICAqIGEgbmV3IHRocmVhZCB0byBiZSBjcmVhdGVkLgotKyAgICoKLSsgICAqIE5vdCBkb2lu ZyBzbyBjb3VsZCBjYXVzZSByZWFsLXRpbWUgcHJpb3JpdHkgdGhyZWFkcyBvciBvdGhlcndpc2UK LSsgICAqIHRocmVhZHMgd2l0aCBwcm9ibGVtYXRpYyBzY2hlZHVsZXIgc2V0dGluZ3MgdG8gYmUg cGFydCBvZiB0aGUKLSsgICAqIG5vbi1leGNsdXNpdmUgdGhyZWFkLXBvb2xzLgotKyAgICoKLSsg ICAqIElmIHRoaXMgaXMgbm90IHN1cHBvcnRlZCBieSB0aGUgR1RocmVhZCBpbXBsZW1lbnRhdGlv biB0aGVuIHdlIGhlcmUKLSsgICAqIHN0YXJ0IGEgdGhyZWFkIHRoYXQgd2lsbCBpbmhlcml0IHRo ZSBzY2hlZHVsZXIgc2V0dGluZ3MgZnJvbSB0aGlzCi0rICAgKiB2ZXJ5IHRocmVhZCBhbmQgd2hv c2Ugb25seSBwdXJwb3NlIGlzIHRvIHNwYXduIG5ldyB0aHJlYWRzIHdpdGggdGhlCi0rICAgKiBz YW1lIHNldHRpbmdzIGZvciB1c2UgYnkgdGhlIG5vbi1leGNsdXNpdmUgdGhyZWFkLXBvb2xzLgot KyAgICoKLSsgICAqCi0rICAgKiBGb3Igbm9uLWV4Y2x1c2l2ZSB0aHJlYWQtcG9vbHMgdGhpcyBp cyBub3QgcmVxdWlyZWQgYXMgYWxsIHRocmVhZHMKLSsgICAqIGFyZSBjcmVhdGVkIGltbWVkaWF0 ZWx5IGJlbG93IGFuZCBhcmUgcnVubmluZyBmb3JldmVyLCBzbyB0aGV5IHdpbGwKLSsgICAqIGF1 dG9tYXRpY2FsbHkgaW5oZXJpdCB0aGUgc2NoZWR1bGVyIHNldHRpbmdzIGZyb20gdGhpcyB2ZXJ5 IHRocmVhZC4KLSsgICAqLwotKyAgaWYgKCFleGNsdXNpdmUgJiYgIWhhdmVfc2hhcmVkX3RocmVh ZF9zY2hlZHVsZXJfc2V0dGluZ3MgJiYgIXNwYXduX3RocmVhZF9xdWV1ZSkKLSsgICAgewotKyAg ICAgIGlmIChnX3RocmVhZF9nZXRfc2NoZWR1bGVyX3NldHRpbmdzICgmc2hhcmVkX3RocmVhZF9z Y2hlZHVsZXJfc2V0dGluZ3MpKQotICAgICAgICAgewotLSAgICAgICAgICBpZiAoZ190aHJlYWRf Z2V0X3NjaGVkdWxlcl9zZXR0aW5ncyAoJnNoYXJlZF90aHJlYWRfc2NoZWR1bGVyX3NldHRpbmdz KSkKLS0gICAgICAgICAgICB7Ci0tICAgICAgICAgICAgICBoYXZlX3NoYXJlZF90aHJlYWRfc2No ZWR1bGVyX3NldHRpbmdzID0gVFJVRTsKLS0gICAgICAgICAgICB9Ci0tICAgICAgICAgIGVsc2UK LS0gICAgICAgICAgICB7Ci0tICAgICAgICAgICAgICBzcGF3bl90aHJlYWRfcXVldWUgPSBnX2Fz eW5jX3F1ZXVlX25ldyAoKTsKLS0gICAgICAgICAgICAgIGdfY29uZF9pbml0ICgmc3Bhd25fdGhy ZWFkX2NvbmQpOwotLSAgICAgICAgICAgICAgZ190aHJlYWRfbmV3ICgicG9vbC1zcGF3bmVyIiwg Z190aHJlYWRfcG9vbF9zcGF3bl90aHJlYWQsIE5VTEwpOwotLSAgICAgICAgICAgIH0KLSsgICAg ICAgICAgaGF2ZV9zaGFyZWRfdGhyZWFkX3NjaGVkdWxlcl9zZXR0aW5ncyA9IFRSVUU7Ci0rICAg ICAgICB9Ci0rICAgICAgZWxzZQotKyAgICAgICAgewotKyAgICAgICAgICBzcGF3bl90aHJlYWRf cXVldWUgPSBnX2FzeW5jX3F1ZXVlX25ldyAoKTsKLSsgICAgICAgICAgZ19jb25kX2luaXQgKCZz cGF3bl90aHJlYWRfY29uZCk7Ci0rICAgICAgICAgIGdfdGhyZWFkX25ldyAoInBvb2wtc3Bhd25l ciIsIGdfdGhyZWFkX3Bvb2xfc3Bhd25fdGhyZWFkLCBOVUxMKTsKLSAgICAgICAgIH0KLSAgICAg fQotICAgR19VTkxPQ0sgKGluaXQpOwotLS0gCi0yLjI0LjEKLQoKZGlmZiAtLWdpdCBhL2dsaWIy LnNwZWMgYi9nbGliMi5zcGVjCmluZGV4IDE1NTQxNTQuLjdlZmQ3YzIgMTAwNjQ0Ci0tLSBhL2ds aWIyLnNwZWMKKysrIGIvZ2xpYjIuc3BlYwpAQCAtMSw4ICsxLDggQEAKICVnbG9iYWwgX2NoYW5n ZWxvZ190cmltdGltZSAlKGRhdGUgKyVzIC1kICIxIHllYXIgYWdvIikKIAogTmFtZTogZ2xpYjIK LVZlcnNpb246IDIuNjMuNAotUmVsZWFzZTogMyV7P2Rpc3R9CitWZXJzaW9uOiAyLjYzLjUKK1Jl bGVhc2U6IDElez9kaXN0fQogU3VtbWFyeTogQSBsaWJyYXJ5IG9mIGhhbmR5IHV0aWxpdHkgZnVu Y3Rpb25zCiAKIExpY2Vuc2U6IExHUEx2MisKQEAgLTM1LDExICszNSw2IEBAIFJlY29tbWVuZHM6 IHNoYXJlZC1taW1lLWluZm8KICMgZ2xpYiAyLjU5LjAgaGFzaCB0YWJsZSBjaGFuZ2VzIGJyb2tl IG9sZGVyIGdjciB2ZXJzaW9ucyAvIHBhc3N3b3JkIHByb21wdHMgaW4gZ25vbWUtc2hlbGwKIENv bmZsaWN0czogZ2NyIDwgMy4yOC4xCiAKLSMgUGF0Y2hlcyBmcm9tIHVwc3RyZWFtCi0KLSMgRml4 IGZvciBodHRwczovL2dpdGxhYi5nbm9tZS5vcmcvR05PTUUvZ2xpYi9pc3N1ZXMvMjAxMgotUGF0 Y2gwMDAxOiAwMDAxLUZpeC1pbml0aWFsaXphdGlvbi1sb2dpYy1vZi1HVGhyZWFkUG9vbC1pZi10 aGUtZmlyc3QucGF0Y2gKLQogJWRlc2NyaXB0aW9uCiBHTGliIGlzIHRoZSBsb3ctbGV2ZWwgY29y ZSBsaWJyYXJ5IHRoYXQgZm9ybXMgdGhlIGJhc2lzIGZvciBwcm9qZWN0cwogc3VjaCBhcyBHVEsr IGFuZCBHTk9NRS4gSXQgcHJvdmlkZXMgZGF0YSBzdHJ1Y3R1cmUgaGFuZGxpbmcgZm9yIEMsCkBA IC0yMjEsNiArMjE2LDkgQEAgZ2xpYi1jb21waWxlLXNjaGVtYXMgJXtfZGF0YWRpcn0vZ2xpYi0y LjAvc2NoZW1hcyAmPiAvZGV2L251bGwgfHwgOgogJXtfZGF0YWRpcn0vaW5zdGFsbGVkLXRlc3Rz CiAKICVjaGFuZ2Vsb2cKKyogTW9uIEZlYiAwMyAyMDIwIEthbGV2IExlbWJlciA8a2xlbWJlckBy ZWRoYXQuY29tPiAtIDIuNjMuNS0xCistIFVwZGF0ZSB0byAyLjYzLjUKKwogKiBXZWQgSmFuIDI5 IDIwMjAgU3RlcGhlbiBHYWxsYWdoZXIgPHNnYWxsYWdoQHJlZGhhdC5jb20+IC0gMi42My40LTMK IC0gRml4IEdUaHJlYWRQb29sIGluaXRpYWxpemF0aW9uIHRoYXQgaXMgYnJlYWtpbmcgY3JlYXRl cmVwb19jIChCWiAjMTc5NTA1MikKIAoKZGlmZiAtLWdpdCBhL3NvdXJjZXMgYi9zb3VyY2VzCmlu ZGV4IDdhODk0NmMuLmMxZmIxYzkgMTAwNjQ0Ci0tLSBhL3NvdXJjZXMKKysrIGIvc291cmNlcwpA QCAtMSArMSBAQAotU0hBNTEyIChnbGliLTIuNjMuNC50YXIueHopID0gMzE5OGIxYTE1ZjQ1Y2M1 ZTVkYjA3N2ZkOGE0MmFjYWM1NzYyODA2ZjA3YzI3ODJhYmZiODczZjc1NGYyOGRhN2I1ZmEzODRh NjFhNWQxMGM2NTFhZTM3ZmRkOWQzMDBlN2Y0MGU4NDQ5NmUxMjA2OWY4MWY3ZGViMTc0ZGM0YTYK K1NIQTUxMiAoZ2xpYi0yLjYzLjUudGFyLnh6KSA9IGZkZmI5OGZhZmNmN2I5OGQ0ZGQ1NmZkYzNm Yzc4YzgzYWQ1YWMyMWVmNjlkYmExNmNkZWQ1OGIwZWU3NTg3M2Y0ZDZjNjk5YmUwZDU3ZjkxNTIy NTI0NmRkNDViNDhlZjQ2YTMzOTlhNjhlOTU2ZTY2YTkxNjU2MDYxNDUwZDVlCg==