From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Kevin Fenzi To: git-commits@fedoraproject.org Subject: [rpms/glib2] cve-2026-58016-f44: Add already upstream patch to fix gdm crasher. Date: Tue, 11 Aug 2026 10:37:14 GMT Message-ID: <178644463400.1.13494626053760027329.rpms-glib2-c71d2f1ddf70@fedoraproject.org> List-ID: X-Git-Repo: rpms/glib2 X-Git-Branch: cve-2026-58016-f44 X-Git-Rev: c71d2f1ddf7080b93282838798b4ad96e7fbdadd QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvZ2xpYjIKQnJhbmNo IDogY3ZlLTIwMjYtNTgwMTYtZjQ0CkNvbW1pdCA6IGM3MWQyZjFkZGY3MDgwYjkzMjgyODM4Nzk4 YjRhZDk2ZTdmYmRhZGQKQXV0aG9yIDogS2V2aW4gRmVuemkgPGtldmluQHNjcnllLmNvbT4KRGF0 ZSAgIDogMjAyMC0xMi0xOVQxNToyMDowMy0wODowMApTdGF0cyAgOiArMTMzLy0xIGluIDIgZmls ZShzKQpVUkwgICAgOiBodHRwczovL3NyYy5mZWRvcmFwcm9qZWN0Lm9yZy9ycG1zL2dsaWIyL2Mv YzcxZDJmMWRkZjcwODBiOTMyODI4Mzg3OThiNGFkOTZlN2ZiZGFkZD9icmFuY2g9Y3ZlLTIwMjYt NTgwMTYtZjQ0CgpMb2c6CkFkZCBhbHJlYWR5IHVwc3RyZWFtIHBhdGNoIHRvIGZpeCBnZG0gY3Jh c2hlci4KCi0tLQpkaWZmIC0tZ2l0IGEvMTc4Ni5wYXRjaCBiLzE3ODYucGF0Y2gKbmV3IGZpbGUg bW9kZSAxMDA2NDQKaW5kZXggMDAwMDAwMC4uYzlmNTM0ZgotLS0gL2Rldi9udWxsCisrKyBiLzE3 ODYucGF0Y2gKQEAgLTAsMCArMSwxMjcgQEAKK0Zyb20gYTJkZTRiMjQ3OTJlNmFhNjI4MjFiY2Vl YjVmNjBlYTgzYTU1MWM0YSBNb24gU2VwIDE3IDAwOjAwOjAwIDIwMDEKK0Zyb206ID0/VVRGLTg/ cT9TZWJhc3RpYW49MjBEcj1DMz1CNmdlPz0gPHNlYmFzdGlhbkBjZW50cmljdWxhci5jb20+CitE YXRlOiBUdWUsIDggRGVjIDIwMjAgMTg6MDk6NTAgKzAyMDAKK1N1YmplY3Q6IFtQQVRDSCAxLzJd IENsYXJpZnkgaW4gZ19vYmplY3Rfd2Vha19yZWYoKSBkb2NzIHRoYXQgdGhlIGNhbGxiYWNrIGlz CisgY2FsbGVkIGR1cmluZyBkaXNwb3NpbmcgYW5kIG5vdCBmaW5hbGl6aW5nCisKK1RoaXMgZXNw ZWNpYWxseSBoYXMgdGhlIGVmZmVjdCB0aGF0IGFueSBHV2Vha1JlZnMgdG8gdGhlIG9iamVjdCB3 aWxsIG5vdAorbmVjZXNzYXJpbHkgYmUgc2V0IHRvIE5VTEwgeWV0IGlmIGNhbGxlZCBhcyBwYXJ0 IG9mCitnX29iamVjdF9ydW5fZGlzcG9zZSgpIGFuZCBub3QgYXMgcGFydCBvZiBnX29iamVjdF91 bnJlZigpLgorLS0tCisgZ29iamVjdC9nb2JqZWN0LmMgfCAyICstCisgZ29iamVjdC9nb2JqZWN0 LmggfCA0ICsrLS0KKyAyIGZpbGVzIGNoYW5nZWQsIDMgaW5zZXJ0aW9ucygrKSwgMyBkZWxldGlv bnMoLSkKKworZGlmZiAtLWdpdCBhL2dvYmplY3QvZ29iamVjdC5jIGIvZ29iamVjdC9nb2JqZWN0 LmMKK2luZGV4IDg2M2Q1YjY3YS4uMjYxN2RjYTNlIDEwMDY0NAorLS0tIGEvZ29iamVjdC9nb2Jq ZWN0LmMKKysrKyBiL2dvYmplY3QvZ29iamVjdC5jCitAQCAtMjk3NSw3ICsyOTc1LDcgQEAgd2Vh a19yZWZzX25vdGlmeSAoZ3BvaW50ZXIgZGF0YSkKKyAgKiBAZGF0YTogZXh0cmEgZGF0YSB0byBw YXNzIHRvIG5vdGlmeQorICAqCisgICogQWRkcyBhIHdlYWsgcmVmZXJlbmNlIGNhbGxiYWNrIHRv IGFuIG9iamVjdC4gV2VhayByZWZlcmVuY2VzIGFyZQorLSAqIHVzZWQgZm9yIG5vdGlmaWNhdGlv biB3aGVuIGFuIG9iamVjdCBpcyBmaW5hbGl6ZWQuIFRoZXkgYXJlIGNhbGxlZAorKyAqIHVzZWQg Zm9yIG5vdGlmaWNhdGlvbiB3aGVuIGFuIG9iamVjdCBpcyBkaXNwb3NlZC4gVGhleSBhcmUgY2Fs bGVkCisgICogIndlYWsgcmVmZXJlbmNlcyIgYmVjYXVzZSB0aGV5IGFsbG93IHlvdSB0byBzYWZl bHkgaG9sZCBhIHBvaW50ZXIKKyAgKiB0byBhbiBvYmplY3Qgd2l0aG91dCBjYWxsaW5nIGdfb2Jq ZWN0X3JlZigpIChnX29iamVjdF9yZWYoKSBhZGRzIGEKKyAgKiBzdHJvbmcgcmVmZXJlbmNlLCB0 aGF0IGlzLCBmb3JjZXMgdGhlIG9iamVjdCB0byBzdGF5IGFsaXZlKS4KK2RpZmYgLS1naXQgYS9n b2JqZWN0L2dvYmplY3QuaCBiL2dvYmplY3QvZ29iamVjdC5oCitpbmRleCBhODRjMTgzZjguLmFl Yzg5NzVlNCAxMDA2NDQKKy0tLSBhL2dvYmplY3QvZ29iamVjdC5oCisrKysgYi9nb2JqZWN0L2dv YmplY3QuaAorQEAgLTIyNywxMSArMjI3LDExIEBAIHR5cGVkZWYgdm9pZCAoKkdPYmplY3RGaW5h bGl6ZUZ1bmMpICAgICAoR09iamVjdCAgICAgICpvYmplY3QpOworIC8qKgorICAqIEdXZWFrTm90 aWZ5OgorICAqIEBkYXRhOiBkYXRhIHRoYXQgd2FzIHByb3ZpZGVkIHdoZW4gdGhlIHdlYWsgcmVm ZXJlbmNlIHdhcyBlc3RhYmxpc2hlZAorLSAqIEB3aGVyZV90aGVfb2JqZWN0X3dhczogdGhlIG9i amVjdCBiZWluZyBmaW5hbGl6ZWQKKysgKiBAd2hlcmVfdGhlX29iamVjdF93YXM6IHRoZSBvYmpl Y3QgYmVpbmcgZGlzcG9zZWQKKyAgKiAKKyAgKiBBICNHV2Vha05vdGlmeSBmdW5jdGlvbiBjYW4g YmUgYWRkZWQgdG8gYW4gb2JqZWN0IGFzIGEgY2FsbGJhY2sgdGhhdCBnZXRzCisgICogdHJpZ2dl cmVkIHdoZW4gdGhlIG9iamVjdCBpcyBmaW5hbGl6ZWQuIFNpbmNlIHRoZSBvYmplY3QgaXMgYWxy ZWFkeSBiZWluZworLSAqIGZpbmFsaXplZCB3aGVuIHRoZSAjR1dlYWtOb3RpZnkgaXMgY2FsbGVk LCB0aGVyZSdzIG5vdCBtdWNoIHlvdSBjb3VsZCBkbyAKKysgKiBkaXNwb3NlZCB3aGVuIHRoZSAj R1dlYWtOb3RpZnkgaXMgY2FsbGVkLCB0aGVyZSdzIG5vdCBtdWNoIHlvdSBjb3VsZCBkbyAKKyAg KiB3aXRoIHRoZSBvYmplY3QsIGFwYXJ0IGZyb20gZS5nLiB1c2luZyBpdHMgYWRkcmVzcyBhcyBo YXNoLWluZGV4IG9yIHRoZSBsaWtlLiAKKyAgKi8KKyB0eXBlZGVmIHZvaWQgKCpHV2Vha05vdGlm eSkJCShncG9pbnRlciAgICAgIGRhdGEsCistLSAKK0dpdExhYgorCisKK0Zyb20gZTgyZWI0OTBm ZWEzMTJlYmUzMGUxMTcyODhmYzJlM2JmMjM3OGEyNSBNb24gU2VwIDE3IDAwOjAwOjAwIDIwMDEK K0Zyb206ID0/VVRGLTg/cT9TZWJhc3RpYW49MjBEcj1DMz1CNmdlPz0gPHNlYmFzdGlhbkBjZW50 cmljdWxhci5jb20+CitEYXRlOiBUdWUsIDggRGVjIDIwMjAgMTg6MzY6MTYgKzAyMDAKK1N1Ympl Y3Q6IFtQQVRDSCAyLzJdIEhhbmRsZSB0aGUgY2FzZSBvZiBnX29iamVjdF9ydW5fZGlzcG9zZSgp IGluIEdCaW5kaW5nCisKK1doZW4gdGhpcyBpcyBjYWxsZWQgb24gdGhlIHNvdXJjZSBvciB0YXJn ZXQsIHRoZSB3ZWFrIG5vdGlmeSBvZiB0aGUKK2NvcnJlc3BvbmRpbmcgb2JqZWN0IGlzIGNhbGxl ZCB3aXRob3V0IHRoZSBHV2Vha1JlZiBiZWluZyBjbGVhcmVkLgorU2VlIGh0dHBzOi8vZ2l0bGFi Lmdub21lLm9yZy9HTk9NRS9nbGliLy0vaXNzdWVzLzIyNjYgZm9yIHRoYXQgaXNzdWUuCisKK1Ro aXMgbWVhbnMgdGhhdCBhIHN0cm9uZyByZWZlcmVuY2UgdG8gdGhlc2Ugem9tYmllIG9iamVjdHMg Y2FuIGJlCityZXRyaWV2ZWQgZnJvbSB0aGUgR1dlYWtSZWZzIGFuZCB0aGUgcHJldmlvdXMgYXNz dW1wdGlvbiB0aGF0IHRoaXMgY2FuJ3QKK2hhcHBlbiB3YXMgd3JvbmcuIFJlbW92ZSB0aGUgYXNz ZXJ0aW9uIGZvciB0aGF0IGFjY29yZGluZ2x5IGFuZCBoYW5kbGUKK3RoaXMgY2FzZS4KKworU3Bl Y2lmaWNhbGx5LCBhbGwgc2lnbmFsIGhhbmRsZXJzIGFuZCB3ZWFrIG5vdGlmaWVzIG9mIHRoZSBv YmplY3QgYXJlCithbHJlYWR5IGdvbmUgYW5kIG11c3Qgbm90IGJlIGRpc2Nvbm5lY3RlZC9yZW1v dmVkIGEgc2Vjb25kIHRpbWUsIG9yCitvdGhlcndpc2UgbWVtb3J5IGNvcnJ1cHRpb24gd291bGQg YmUgY2F1c2VkLiBJbnN0ZWFkIGp1c3Qgc2V0IHRoZQorR1dlYWtSZWYgdG8gTlVMTCBhbmQgaGFu ZGxlIGl0IG90aGVyd2lzZSBhcyBpZiB0aGUgR1dlYWtSZWYgZGlkbid0IGdpdmUKK2Egc3Ryb25n IHJlZmVyZW5jZSB0byBiZWdpbiB3aXRoLgorCitGaXhlcyBodHRwczovL2dpdGxhYi5nbm9tZS5v cmcvR05PTUUvZ2xpYi8tL2lzc3Vlcy8yMjY1CistLS0KKyBnb2JqZWN0L2diaW5kaW5nLmMgfCAz MSArKysrKysrKysrKysrKysrKysrKysrKy0tLS0tLS0tCisgMSBmaWxlIGNoYW5nZWQsIDIzIGlu c2VydGlvbnMoKyksIDggZGVsZXRpb25zKC0pCisKK2RpZmYgLS1naXQgYS9nb2JqZWN0L2diaW5k aW5nLmMgYi9nb2JqZWN0L2diaW5kaW5nLmMKK2luZGV4IDU2MmYzMzlkYS4uNDhiNGZiYWVjIDEw MDY0NAorLS0tIGEvZ29iamVjdC9nYmluZGluZy5jCisrKysgYi9nb2JqZWN0L2diaW5kaW5nLmMK K0BAIC0zODgsMTEgKzM4OCwzMCBAQCB3ZWFrX3VuYmluZCAoZ3BvaW50ZXIgIHVzZXJfZGF0YSwK KyAgIHRhcmdldCA9IGdfd2Vha19yZWZfZ2V0ICgmY29udGV4dC0+dGFyZ2V0KTsKKyAKKyAgIC8q IElmIHRoaXMgaXMgY2FsbGVkIHRoZW4gZWl0aGVyIHRoZSBzb3VyY2Ugb3IgdGFyZ2V0IG9yIGJv dGggbXVzdCBiZSBpbiB0aGUKKy0gICAqIHByb2Nlc3Mgb2YgYmVpbmcgZmluYWxpemVkIGFuZCB0 aGVpciB3ZWFrIHJlZmVyZW5jZSBtdXN0IGJlIHJlc2V0IHRvIE5VTEwKKy0gICAqIGFscmVhZHku CisrICAgKiBwcm9jZXNzIG9mIGJlaW5nIGRpc3Bvc2VkLiBJZiB0aGlzIGhhcHBlbnMgYXMgcGFy dCBvZiBnX29iamVjdF91bnJlZigpCisrICAgKiB0aGVuIHRoZSB3ZWFrIHJlZmVyZW5jZXMgYXJl IGFjdHVhbGx5IGNsZWFyZWQsIG90aGVyd2lzZSBpZiBkaXNwb3NpbmcKKysgICAqIGhhcHBlbnMg YXMgcGFydCBvZiBnX29iamVjdF9ydW5fZGlzcG9zZSgpIHRoZW4gdGhleSB3b3VsZCBzdGlsbCBw b2ludCB0bworKyAgICogdGhlIGRpc3Bvc2VkIG9iamVjdC4KKyAgICAqCistICAgKiBJZiBzb3Vy Y2U9PXRhcmdldCB0aGVuIGJvdGggd2lsbCBhbHdheXMgYmUgTlVMTCBoZXJlLiAqLworLSAgZ19h c3NlcnQgKHNvdXJjZSA9PSBOVUxMIHx8IHRhcmdldCA9PSBOVUxMKTsKKysgICAqIElmIHRoZSBv YmplY3QgdGhpcyBpcyBiZWluZyBjYWxsZWQgZm9yIGlzIGVpdGhlciB0aGUgc291cmNlIG9yIHRo ZSB0YXJnZXQKKysgICAqIGFuZCB3ZSBhY3R1YWxseSBnb3QgYSBzdHJvbmcgcmVmZXJlbmNlIHRv IGl0IG5vbmV0aGVsZXNzIChzZWUgYWJvdmUpLAorKyAgICogdGhlbiBzaWduYWwgaGFuZGxlcnMg YW5kIHdlYWsgbm90aWZpZXMgZm9yIGl0IGFyZSBhbHJlYWR5IGRpc2Nvbm5lY3RlZAorKyAgICog YW5kIHRoZXkgbXVzdCBub3QgYmUgZGlzY29ubmVjdGVkIGEgc2Vjb25kIHRpbWUuIEluc3RlYWQg c2ltcGx5IGNsZWFyIHRoZQorKyAgICogd2VhayByZWZlcmVuY2UgYW5kIGJlIGRvbmUgd2l0aCBp dC4KKysgICAqCisrICAgKiBTZWUgaHR0cHM6Ly9naXRsYWIuZ25vbWUub3JnL0dOT01FL2dsaWIv LS9pc3N1ZXMvMjI2NiAqLworKworKyAgaWYgKHNvdXJjZSA9PSB3aGVyZV90aGVfb2JqZWN0X3dh cykKKysgICAgeworKyAgICAgIGdfd2Vha19yZWZfc2V0ICgmY29udGV4dC0+c291cmNlLCBOVUxM KTsKKysgICAgICBnX2NsZWFyX29iamVjdCAoJnNvdXJjZSk7CisrICAgIH0KKysKKysgIGlmICh0 YXJnZXQgPT0gd2hlcmVfdGhlX29iamVjdF93YXMpCisrICAgIHsKKysgICAgICBnX3dlYWtfcmVm X3NldCAoJmNvbnRleHQtPnRhcmdldCwgTlVMTCk7CisrICAgICAgZ19jbGVhcl9vYmplY3QgKCZ0 YXJnZXQpOworKyAgICB9CisgCisgICBiaW5kaW5nX3dhc19yZW1vdmVkID0gdW5iaW5kX2ludGVy bmFsX2xvY2tlZCAoY29udGV4dCwgYmluZGluZywgc291cmNlLCB0YXJnZXQpOworIAorQEAgLTYy NywxMCArNjQ2LDYgQEAgZ19iaW5kaW5nX3VuYmluZF9pbnRlcm5hbCAoR0JpbmRpbmcgKmJpbmRp bmcsCisgICBzb3VyY2UgPSBnX3dlYWtfcmVmX2dldCAoJmNvbnRleHQtPnNvdXJjZSk7CisgICB0 YXJnZXQgPSBnX3dlYWtfcmVmX2dldCAoJmNvbnRleHQtPnRhcmdldCk7CisgCistICAvKiBJZiB0 aGUgYmluZGluZyB3YXMgcmVtb3ZlZCBwcmV2aW91c2x5LCBzb3VyY2UgYW5kIHRhcmdldCBhcmUg Ym90aCBOVUxMLgorLSAgICogT3RoZXJ3aXNlIGJvdGggd2lsbCBub3QgYmUgTlVMTC4gKi8KKy0g IGdfYXNzZXJ0ICgoc291cmNlID09IE5VTEwgJiYgdGFyZ2V0ID09IE5VTEwpIHx8IChzb3VyY2Ug IT0gTlVMTCAmJiB0YXJnZXQgIT0gTlVMTCkpOworLQorICAgYmluZGluZ193YXNfcmVtb3ZlZCA9 IHVuYmluZF9pbnRlcm5hbF9sb2NrZWQgKGNvbnRleHQsIGJpbmRpbmcsIHNvdXJjZSwgdGFyZ2V0 KTsKKyAKKyAgIGdfbXV0ZXhfdW5sb2NrICgmYmluZGluZy0+dW5iaW5kX2xvY2spOworLS0gCitH aXRMYWIKKwoKZGlmZiAtLWdpdCBhL2dsaWIyLnNwZWMgYi9nbGliMi5zcGVjCmluZGV4IGRhZGE1 NTkuLjhmM2E4OTAgMTAwNjQ0Ci0tLSBhL2dsaWIyLnNwZWMKKysrIGIvZ2xpYjIuc3BlYwpAQCAt MSw2ICsxLDYgQEAKIE5hbWU6IGdsaWIyCiBWZXJzaW9uOiAyLjY3LjEKLVJlbGVhc2U6IDElez9k aXN0fQorUmVsZWFzZTogMiV7P2Rpc3R9CiBTdW1tYXJ5OiBBIGxpYnJhcnkgb2YgaGFuZHkgdXRp bGl0eSBmdW5jdGlvbnMKIAogTGljZW5zZTogTEdQTHYyKwpAQCAtMTEsNiArMTEsOCBAQCBTb3Vy Y2UwOiBodHRwOi8vZG93bmxvYWQuZ25vbWUub3JnL3NvdXJjZXMvZ2xpYi8yLjY3L2dsaWItJXt2 ZXJzaW9ufS50YXIueHoKICMgaHR0cHM6Ly9naXRsYWIuZ25vbWUub3JnL0dOT01FL2dsaWIvLS9t ZXJnZV9yZXF1ZXN0cy85MDMKIFBhdGNoMDogZ251dGxzLWhtYWMucGF0Y2gKIAorUGF0Y2gxOiBo dHRwczovL2dpdGxhYi5nbm9tZS5vcmcvR05PTUUvZ2xpYi8tL21lcmdlX3JlcXVlc3RzLzE3ODYu cGF0Y2gKKwogIyBGb3IgZ251dGxzLWhtYWMucGF0Y2gKIEJ1aWxkUmVxdWlyZXM6IHBrZ2NvbmZp ZyhnbnV0bHMpCiAKQEAgLTIzNiw2ICsyMzgsOSBAQCBnbGliLWNvbXBpbGUtc2NoZW1hcyAle19k YXRhZGlyfS9nbGliLTIuMC9zY2hlbWFzICY+IC9kZXYvbnVsbCB8fCA6CiAle19kYXRhZGlyfS9p bnN0YWxsZWQtdGVzdHMKIAogJWNoYW5nZWxvZworKiBTYXQgRGVjIDE5IDIwMjAgS2V2aW4gRmVu emkgPGtldmluQHNjcnllLmNvbT4gLSAyLjY3LjEtMgorLSBBZGQgYWxyZWFkeSB1cHN0cmVhbSBw YXRjaCB0byBmaXggZ2RtIGNyYXNoZXIuCisKICogU2F0IERlYyAxOSAyMDIwIEthbGV2IExlbWJl ciA8a2xlbWJlckByZWRoYXQuY29tPiAtIDIuNjcuMS0xCiAtIFVwZGF0ZSB0byAyLjY3LjEKIAo=