From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Kalev Lember To: git-commits@fedoraproject.org Subject: [rpms/glib2] cve-2026-58016-f44: Backport an upstream patch to fix GParam validation crashes Date: Tue, 11 Aug 2026 10:37:48 GMT Message-ID: <178644466877.1.1659780577411876603.rpms-glib2-0a32a39f0dd5@fedoraproject.org> List-ID: X-Git-Repo: rpms/glib2 X-Git-Branch: cve-2026-58016-f44 X-Git-Rev: 0a32a39f0dd5430cc2520841765b95d0fc0525dc ICAgICAgICAgICAgQSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KCiAgICAgICAgICAgIFJl cG8gICA6IHJwbXMvZ2xpYjIKICAgICAgICAgICAgQnJhbmNoIDogY3ZlLTIwMjYtNTgwMTYtZjQ0 CiAgICAgICAgICAgIENvbW1pdCA6IDBhMzJhMzlmMGRkNTQzMGNjMjUyMDg0MTc2NWI5NWQwZmMw NTI1ZGMKICAgICAgICAgICAgQXV0aG9yIDogS2FsZXYgTGVtYmVyIDxrbGVtYmVyQHJlZGhhdC5j b20+CiAgICAgICAgICAgIERhdGUgICA6IDIwMjItMDktMjZUMjI6MzQ6MjUrMDI6MDAKICAgICAg ICAgICAgU3RhdHMgIDogKzM3Ly0wIGluIDIgZmlsZShzKQogICAgICAgICAgICBVUkwgICAgOiBo dHRwczovL3NyYy5mZWRvcmFwcm9qZWN0Lm9yZy9ycG1zL2dsaWIyL2MvMGEzMmEzOWYwZGQ1NDMw Y2MyNTIwODQxNzY1Yjk1ZDBmYzA1MjVkYz9icmFuY2g9Y3ZlLTIwMjYtNTgwMTYtZjQ0CgogICAg ICAgICAgICBMb2c6CiAgICAgICAgICAgIEJhY2twb3J0IGFuIHVwc3RyZWFtIHBhdGNoIHRvIGZp eCBHUGFyYW0gdmFsaWRhdGlvbiBjcmFzaGVzCgpodHRwczovL2dpdGxhYi5nbm9tZS5vcmcvR05P TUUvZ2xpYi8tL2lzc3Vlcy8yNzcwCgotLS0KZGlmZiAtLWdpdCBhLzI5MjEucGF0Y2ggYi8yOTIx LnBhdGNoCm5ldyBmaWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAwMDAwMDAuLmVmMWRjZmIKLS0tIC9k ZXYvbnVsbAorKysgYi8yOTIxLnBhdGNoCkBAIC0wLDAgKzEsMzMgQEAKK0Zyb20gZWEzZjE3ZDU5 OGQ1NTAzNDVlOTRlNDU3MTEzMGU0Mjk0NDNlOTFjYiBNb24gU2VwIDE3IDAwOjAwOjAwIDIwMDEK K0Zyb206IEVtbWFudWVsZSBCYXNzaSA8ZWJhc3NpQGdub21lLm9yZz4KK0RhdGU6IFN1biwgMjUg U2VwIDIwMjIgMTQ6MjA6MjQgKzAxMDAKK1N1YmplY3Q6IFtQQVRDSF0gRW1wdHkgdmFsdWVzIGFy ZSBub3QgdmFsaWQgR1BhcmFtU3BlYworCitUaGUgdmFsaWRhdGUoKSB2ZnVuYyBmb3IgR1BhcmFt U3BlY1BhcmFtIHJldHVybnMgRkFMU0UgZm9yIGVtcHR5IEdWYWx1ZSwKK3doaWNoIG1lYW5zIHRo ZSBpc192YWxpZCgpIHZmdW5jIHNob3VsZCBkbyB0aGUgc2FtZS4KKworVGhpcyBhdm9pZHMgYSBz ZWdmYXVsdCB3aGVuIGNhbGxpbmcgZ19wYXJhbV92YWx1ZV9pc192YWxpZCgpIG9uIGEKK0dQYXJh bVNwZWNQYXJhbS4KKworRml4ZXM6ICMyNzcwCistLS0KKyBnb2JqZWN0L2dwYXJhbXNwZWNzLmMg fCAzICsrKworIDEgZmlsZSBjaGFuZ2VkLCAzIGluc2VydGlvbnMoKykKKworZGlmZiAtLWdpdCBh L2dvYmplY3QvZ3BhcmFtc3BlY3MuYyBiL2dvYmplY3QvZ3BhcmFtc3BlY3MuYworaW5kZXggZjE3 YjM0ODhiOS4uMTdiODYwNjU3MiAxMDA2NDQKKy0tLSBhL2dvYmplY3QvZ3BhcmFtc3BlY3MuYwor KysrIGIvZ29iamVjdC9ncGFyYW1zcGVjcy5jCitAQCAtODk0LDYgKzg5NCw5IEBAIHBhcmFtX3Bh cmFtX2lzX3ZhbGlkIChHUGFyYW1TcGVjICAgKnBzcGVjLAorIHsKKyAgIEdQYXJhbVNwZWMgKnBh cmFtID0gdmFsdWUtPmRhdGFbMF0udl9wb2ludGVyOworIAorKyAgaWYgKHBhcmFtID09IE5VTEwp CisrICAgIHJldHVybiBGQUxTRTsKKysKKyAgIHJldHVybiBnX3ZhbHVlX3R5cGVfY29tcGF0aWJs ZSAoR19QQVJBTV9TUEVDX1RZUEUgKHBhcmFtKSwgR19QQVJBTV9TUEVDX1ZBTFVFX1RZUEUgKHBz cGVjKSk7CisgfQorIAorLS0gCitHaXRMYWIKKwoKZGlmZiAtLWdpdCBhL2dsaWIyLnNwZWMgYi9n bGliMi5zcGVjCmluZGV4IDZhNzI5MTAuLmFlOWM3ZjIgMTAwNjQ0Ci0tLSBhL2dsaWIyLnNwZWMK KysrIGIvZ2xpYjIuc3BlYwpAQCAtMTIsNiArMTIsMTAgQEAgU291cmNlMDogaHR0cHM6Ly9kb3du bG9hZC5nbm9tZS5vcmcvc291cmNlcy9nbGliLzIuNzIvZ2xpYi0le3ZlcnNpb259LnRhci54egog IyBodHRwczovL2dpdGxhYi5nbm9tZS5vcmcvR05PTUUvZ2xpYi8tL21lcmdlX3JlcXVlc3RzLzkw MwogUGF0Y2gwOiBnbnV0bHMtaG1hYy5wYXRjaAogCisjIEJhY2twb3J0ZWQgZnJvbSB1cHN0cmVh bQorIyBodHRwczovL2dpdGxhYi5nbm9tZS5vcmcvR05PTUUvZ2xpYi8tL21lcmdlX3JlcXVlc3Rz LzI5MjEKK1BhdGNoMTogMjkyMS5wYXRjaAorCiBCdWlsZFJlcXVpcmVzOiBnY2MKIEJ1aWxkUmVx dWlyZXM6IGdjYy1jKysKIEJ1aWxkUmVxdWlyZXM6IGdldHRleHQK