From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Kalev Lember To: git-commits@fedoraproject.org Subject: [rpms/glib2] cve-2026-58016-f44: Backport another GRegex upstream fix Date: Tue, 11 Aug 2026 10:37:45 GMT Message-ID: <178644466598.1.6776625083929302988.rpms-glib2-17a834805e1e@fedoraproject.org> List-ID: X-Git-Repo: rpms/glib2 X-Git-Branch: cve-2026-58016-f44 X-Git-Rev: 17a834805e1ed93c7a1caf3cc0aa7b6e8fe6012b ICAgICAgICAgICAgQSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KCiAgICAgICAgICAgIFJl cG8gICA6IHJwbXMvZ2xpYjIKICAgICAgICAgICAgQnJhbmNoIDogY3ZlLTIwMjYtNTgwMTYtZjQ0 CiAgICAgICAgICAgIENvbW1pdCA6IDE3YTgzNDgwNWUxZWQ5M2M3YTFjYWYzY2MwYWE3YjZlOGZl NjAxMmIKICAgICAgICAgICAgQXV0aG9yIDogS2FsZXYgTGVtYmVyIDxrbGVtYmVyQHJlZGhhdC5j b20+CiAgICAgICAgICAgIERhdGUgICA6IDIwMjItMDctMjdUMTI6MzY6NTMrMDI6MDAKICAgICAg ICAgICAgU3RhdHMgIDogKzcyLy0wIGluIDIgZmlsZShzKQogICAgICAgICAgICBVUkwgICAgOiBo dHRwczovL3NyYy5mZWRvcmFwcm9qZWN0Lm9yZy9ycG1zL2dsaWIyL2MvMTdhODM0ODA1ZTFlZDkz YzdhMWNhZjNjYzBhYTdiNmU4ZmU2MDEyYj9icmFuY2g9Y3ZlLTIwMjYtNTgwMTYtZjQ0CgogICAg ICAgICAgICBMb2c6CiAgICAgICAgICAgIEJhY2twb3J0IGFub3RoZXIgR1JlZ2V4IHVwc3RyZWFt IGZpeAoKVGhhbmtzIGFnYWluIHRvIE1hbW9ydSBUQVNBS0EgPG10YXNha2FAZmVkb3JhcHJvamVj dC5vcmc+IQoKaHR0cHM6Ly9naXRsYWIuZ25vbWUub3JnL0dOT01FL2dsaWIvLS9tZXJnZV9yZXF1 ZXN0cy8yODM4CgotLS0KZGlmZiAtLWdpdCBhLzI4MzgucGF0Y2ggYi8yODM4LnBhdGNoCm5ldyBm aWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAwMDAwMDAuLmM3ZWEwNjEKLS0tIC9kZXYvbnVsbAorKysg Yi8yODM4LnBhdGNoCkBAIC0wLDAgKzEsNzAgQEAKK0Zyb20gNjUzNWM3N2IwMGE0NDQ3NTAxNDhk OWQ2NThlNGQ0NzIxNGJiNDU2MiBNb24gU2VwIDE3IDAwOjAwOjAwIDIwMDEKK0Zyb206IEFsZWtz ZWkgUnliYWxraW4gPGFsZWtzZWlAcnliYWxraW4ub3JnPgorRGF0ZTogTW9uLCAyNSBKdWwgMjAy MiAxNjo0ODowMyArMDIwMAorU3ViamVjdDogW1BBVENIIDEvMl0gZ3JlZ2V4OiBkbyBub3Qgc2V0 IG1hdGNoIGFuZCByZWN1cnNpb24gbGltaXRzIG9uIG1hdGNoCisgY29udGV4dAorCitUaGVzZSBh cmUgbm90IHJlYWxseSBuZWNlc3NhcnksIGFuZCBjYXVzZSBicmVha2FnZXMgKGUuZy4gIzI3MDAp LgorcGNyZTJfc2V0X3JlY3Vyc2lvbl9saW1pdCBpcyBhbHNvIGRlcHJlY2F0ZWQuCisKK0ZpeGVz OiAjMjcwMAorLS0tCisgZ2xpYi9ncmVnZXguYyAgICAgIHwgMiAtLQorIGdsaWIvdGVzdHMvcmVn ZXguYyB8IDMgKysrCisgMiBmaWxlcyBjaGFuZ2VkLCAzIGluc2VydGlvbnMoKyksIDIgZGVsZXRp b25zKC0pCisKK2RpZmYgLS1naXQgYS9nbGliL2dyZWdleC5jIGIvZ2xpYi9ncmVnZXguYworaW5k ZXggNjc0MWQyNDc5Zi4uZGQ2MWRjNDgxMyAxMDA2NDQKKy0tLSBhL2dsaWIvZ3JlZ2V4LmMKKysr KyBiL2dsaWIvZ3JlZ2V4LmMKK0BAIC03NjksOCArNzY5LDYgQEAgbWF0Y2hfaW5mb19uZXcgKGNv bnN0IEdSZWdleCAqcmVnZXgsCisgICAgICAgICAgICAgICAgICAgICAgICZtYXRjaF9pbmZvLT5u X3N1YnBhdHRlcm5zKTsKKyAKKyAgIG1hdGNoX2luZm8tPm1hdGNoX2NvbnRleHQgPSBwY3JlMl9t YXRjaF9jb250ZXh0X2NyZWF0ZSAoTlVMTCk7CistICBwY3JlMl9zZXRfbWF0Y2hfbGltaXQgKG1h dGNoX2luZm8tPm1hdGNoX2NvbnRleHQsIDY1NTM2KTsgLyogc2hvdWxkIGJlIHBsZW50eSAqLwor LSAgcGNyZTJfc2V0X3JlY3Vyc2lvbl9saW1pdCAobWF0Y2hfaW5mby0+bWF0Y2hfY29udGV4dCwg NjQpOyAvKiBzaG91bGQgYmUgcGxlbnR5ICovCisgCisgICBpZiAoaXNfZGZhKQorICAgICB7Citk aWZmIC0tZ2l0IGEvZ2xpYi90ZXN0cy9yZWdleC5jIGIvZ2xpYi90ZXN0cy9yZWdleC5jCitpbmRl eCBiYjFhNWZmNzYyLi41ODM5NDY1ZmFlIDEwMDY0NAorLS0tIGEvZ2xpYi90ZXN0cy9yZWdleC5j CisrKysgYi9nbGliL3Rlc3RzL3JlZ2V4LmMKK0BAIC0yNDkzLDYgKzI0OTMsOSBAQCBtYWluIChp bnQgYXJnYywgY2hhciAqYXJndltdKQorICAgVEVTVF9NQVRDSCgiW8eEXSIsIEdfUkVHRVhfQ0FT RUxFU1MsIDAsICLHhiIsIC0xLCAwLCAwLCBUUlVFKTsKKyAgIFRFU1RfTUFUQ0goIlvHhF0iLCBH X1JFR0VYX0NBU0VMRVNTLCAwLCAix4UiLCAtMSwgMCwgMCwgVFJVRSk7CisgCisrICAvKiBzZWUg aHR0cHM6Ly9naXRsYWIuZ25vbWUub3JnL0dOT01FL2dsaWIvLS9pc3N1ZXMvMjcwMCAqLworKyAg VEVTVF9NQVRDSCgiKFxuLispKyIsIEdfUkVHRVhfREVGQVVMVCwgMCwgIlxuIFxuICBcbiAgXG4g IFxuICBcbiAgXG4gIFxuICBcbiAgXG4gIFxuICBcbiAgXG4gIFxuICBcbiAgXG4gIFxuICBcbiAg XG4gIFxuICBcbiAgXG4iLCAtMSwgMCwgMCwgVFJVRSk7CisrCisgICAvKiBURVNUX01BVENIX05F WFQjKHBhdHRlcm4sIHN0cmluZywgc3RyaW5nX2xlbiwgc3RhcnRfcG9zaXRpb24sIC4uLikgKi8K KyAgIFRFU1RfTUFUQ0hfTkVYVDAoImEiLCAieCIsIC0xLCAwKTsKKyAgIFRFU1RfTUFUQ0hfTkVY VDAoImEiLCAiYXgiLCAtMSwgMSk7CistLSAKK0dpdExhYgorCisKK0Zyb20gYTJiNWI5ZTkwNjI1 NmY0M2IwYmFjNzAyNDI0NjEzZWEwZTdkZGNiMCBNb24gU2VwIDE3IDAwOjAwOjAwIDIwMDEKK0Zy b206IEFsZWtzZWkgUnliYWxraW4gPGFsZWtzZWlAcnliYWxraW4ub3JnPgorRGF0ZTogTW9uLCAy NSBKdWwgMjAyMiAxNjo1NzowNiArMDIwMAorU3ViamVjdDogW1BBVENIIDIvMl0gZ3JlZ2V4OiBh ZGQgb3JpZ2luYWwgdGVzdCBjYXNlIGZvciBpc3N1ZSAjMjcwMAorCistLS0KKyBnbGliL3Rlc3Rz L3JlZ2V4LmMgfCAxICsKKyAxIGZpbGUgY2hhbmdlZCwgMSBpbnNlcnRpb24oKykKKworZGlmZiAt LWdpdCBhL2dsaWIvdGVzdHMvcmVnZXguYyBiL2dsaWIvdGVzdHMvcmVnZXguYworaW5kZXggNTgz OTQ2NWZhZS4uYWNiMDgyYjcwNCAxMDA2NDQKKy0tLSBhL2dsaWIvdGVzdHMvcmVnZXguYworKysr IGIvZ2xpYi90ZXN0cy9yZWdleC5jCitAQCAtMjQ5NSw2ICsyNDk1LDcgQEAgbWFpbiAoaW50IGFy Z2MsIGNoYXIgKmFyZ3ZbXSkKKyAKKyAgIC8qIHNlZSBodHRwczovL2dpdGxhYi5nbm9tZS5vcmcv R05PTUUvZ2xpYi8tL2lzc3Vlcy8yNzAwICovCisgICBURVNUX01BVENIKCIoXG4uKykrIiwgR19S RUdFWF9ERUZBVUxULCAwLCAiXG4gXG4gIFxuICBcbiAgXG4gIFxuICBcbiAgXG4gIFxuICBcbiAg XG4gIFxuICBcbiAgXG4gIFxuICBcbiAgXG4gIFxuICBcbiAgXG4gIFxuICBcbiIsIC0xLCAwLCAw LCBUUlVFKTsKKysgIFRFU1RfTUFUQ0goIlxuKFtcXC1cXC5hLXpBLVpdK1tcXC1cXC4wLTldKikg K2Nvbm5lY3RlZCAoW14oXG4gXSopW15cbl0qKChcbiArWzAtOV0reFswLTldK1teXG5dKykrKSIs IEdfUkVHRVhfREVGQVVMVCwgMCwgIlNjcmVlbiAwOiBtaW5pbXVtIDEgeCAxLCBjdXJyZW50IDM4 NDAgeCAxMDgwLCBtYXhpbXVtIDgxOTIgeCA4MTkyXG5WaXJ0dWFsMSBjb25uZWN0ZWQgcHJpbWFy eSAxOTIweDEwODArMCswIChub3JtYWwgbGVmdCBpbnZlcnRlZCByaWdodCB4IGF4aXMgeSBheGlz KSAwbW0geCAwbW1cbiAgIDE5MjB4MTA4MCAgICAgNjAuMDAqKyAgNTkuOTYgIFxuICAgMzg0MHgy NDAwICAgICA1OS45NyAgXG4gICAzODQweDIxNjAgICAgIDU5Ljk3ICBcbiAgIDI4ODB4MTgwMCAg ICAgNTkuOTUgIFxuICAgMjU2MHgxNjAwICAgICA1OS45OSAgXG4gICAyNTYweDE0NDAgICAgIDU5 Ljk1ICBcbiAgIDE5MjB4MTQ0MCAgICAgNjAuMDAgIFxuICAgMTg1NngxMzkyICAgICA2MC4wMCAg XG4gICAxNzkyeDEzNDQgICAgIDYwLjAwICBcbiAgIDE5MjB4MTIwMCAgICAgNTkuODggIFxuICAg MTYwMHgxMjAwICAgICA2MC4wMCAgXG4gICAxNjgweDEwNTAgICAgIDU5Ljk1ICBcbiAgIDE0MDB4 MTA1MCAgICAgNTkuOTggIFxuICAgMTI4MHgxMDI0ICAgICA2MC4wMiAgXG4gICAxNDQweDkwMCAg ICAgIDU5Ljg5ICBcbiAgIDEyODB4OTYwICAgICAgNjAuMDAgIFxuICAgMTM2MHg3NjggICAgICA2 MC4wMiAgXG4gICAxMjgweDgwMCAgICAgIDU5LjgxICBcbiAgIDExNTJ4ODY0ICAgICAgNzUuMDAg IFxuICAgMTI4MHg3NjggICAgICA1OS44NyAgXG4gICAxMjgweDcyMCAgICAgIDU5Ljg2ICBcbiAg IDEwMjR4NzY4ICAgICAgNjAuMDAgIFxuICAgODAweDYwMCAgICAgICA2MC4zMiAgXG4gICA2NDB4 NDgwICAgICAgIDU5Ljk0ICBcblZpcnR1YWwyIGNvbm5lY3RlZCAxOTIweDEwODArMTkyMCswIChu b3JtYWwgbGVmdCBpbnZlcnRlZCByaWdodCB4IGF4aXMgeSBheGlzKSAwbW0geCAwbW1cbiAgIDE5 MjB4MTA4MCAgICAgNjAuMDAqKyAgNTkuOTYgIFxuICAgMzg0MHgyNDAwICAgICA1OS45NyAgXG4g ICAzODQweDIxNjAgICAgIDU5Ljk3ICBcbiAgIDI4ODB4MTgwMCAgICAgNTkuOTUgIFxuICAgMjU2 MHgxNjAwICAgICA1OS45OSAgXG4gICAyNTYweDE0NDAgICAgIDU5Ljk1ICBcbiAgIDE5MjB4MTQ0 MCAgICAgNjAuMDAgIFxuICAgMTg1NngxMzkyICAgICA2MC4wMCAgXG4gICAxNzkyeDEzNDQgICAg IDYwLjAwICBcbiAgIDE5MjB4MTIwMCAgICAgNTkuODggIFxuICAgMTYwMHgxMjAwICAgICA2MC4w MCAgXG4gICAxNjgweDEwNTAgICAgIDU5Ljk1ICBcbiAgIDE0MDB4MTA1MCAgICAgNTkuOTggIFxu ICAgMTI4MHgxMDI0ICAgICA2MC4wMiAgXG4gICAxNDQweDkwMCAgICAgIDU5Ljg5ICBcbiAgIDEy ODB4OTYwICAgICAgNjAuMDAgIFxuICAgMTM2MHg3NjggICAgICA2MC4wMiAgXG4gICAxMjgweDgw MCAgICAgIDU5LjgxICBcbiAgIDExNTJ4ODY0ICAgICAgNzUuMDAgIFxuICAgMTI4MHg3NjggICAg ICA1OS44NyAgXG4gICAxMjgweDcyMCAgICAgIDU5Ljg2ICBcbiAgIDEwMjR4NzY4ICAgICAgNjAu MDAgIFxuICAgODAweDYwMCAgICAgICA2MC4zMiAgXG4gICA2NDB4NDgwICAgICAgIDU5Ljk0ICBc blZpcnR1YWwzIGRpc2Nvbm5lY3RlZCAobm9ybWFsIGxlZnQgaW52ZXJ0ZWQgcmlnaHQgeCBheGlz IHkgYXhpcylcblZpcnR1YWw0IGRpc2Nvbm5lY3RlZCAobm9ybWFsIGxlZnQgaW52ZXJ0ZWQgcmln aHQgeCBheGlzIHkgYXhpcylcblZpcnR1YWw1IGRpc2Nvbm5lY3RlZCAobm9ybWFsIGxlZnQgaW52 ZXJ0ZWQgcmlnaHQgeCBheGlzIHkgYXhpcylcblZpcnR1YWw2IGRpc2Nvbm5lY3RlZCAobm9ybWFs IGxlZnQgaW52ZXJ0ZWQgcmlnaHQgeCBheGlzIHkgYXhpcylcblZpcnR1YWw3IGRpc2Nvbm5lY3Rl ZCAobm9ybWFsIGxlZnQgaW52ZXJ0ZWQgcmlnaHQgeCBheGlzIHkgYXhpcylcblZpcnR1YWw4IGRp c2Nvbm5lY3RlZCAobm9ybWFsIGxlZnQgaW52ZXJ0ZWQgcmlnaHQgeCBheGlzIHkgYXhpcylcbiIs IC0xLCAwLCAwLCBUUlVFKTsKKyAKKyAgIC8qIFRFU1RfTUFUQ0hfTkVYVCMocGF0dGVybiwgc3Ry aW5nLCBzdHJpbmdfbGVuLCBzdGFydF9wb3NpdGlvbiwgLi4uKSAqLworICAgVEVTVF9NQVRDSF9O RVhUMCgiYSIsICJ4IiwgLTEsIDApOworLS0gCitHaXRMYWIKKwoKZGlmZiAtLWdpdCBhL2dsaWIy LnNwZWMgYi9nbGliMi5zcGVjCmluZGV4IGQzZDNiMGMuLjZlMTFiYTYgMTAwNjQ0Ci0tLSBhL2ds aWIyLnNwZWMKKysrIGIvZ2xpYjIuc3BlYwpAQCAtMjAsNiArMjAsOCBAQCBQYXRjaDE6IGdkZXNr dG9wYXBwaW5mby5wYXRjaAogIyBCYWNrcG9ydGVkIGZyb20gdXBzdHJlYW0gdG8gZml4IEdSZWdl eCBvbiBzMzkweAogIyBodHRwczovL2dpdGxhYi5nbm9tZS5vcmcvR05PTUUvZ2xpYi8tL21lcmdl X3JlcXVlc3RzLzI4NDAKIFBhdGNoMjogMjg0MC5wYXRjaAorIyBodHRwczovL2dpdGxhYi5nbm9t ZS5vcmcvR05PTUUvZ2xpYi8tL21lcmdlX3JlcXVlc3RzLzI4MzgKK1BhdGNoMzogMjgzOC5wYXRj aAogCiBCdWlsZFJlcXVpcmVzOiBnY2MKIEJ1aWxkUmVxdWlyZXM6IGdjYy1jKysK