From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: David King To: git-commits@fedoraproject.org Subject: [rpms/glib2] cve-2026-58016-f44: Add upstream revert of fd mishandling Date: Tue, 11 Aug 2026 10:37:50 GMT Message-ID: <178644467016.1.3658031598418590030.rpms-glib2-a9177ca9af19@fedoraproject.org> List-ID: X-Git-Repo: rpms/glib2 X-Git-Branch: cve-2026-58016-f44 X-Git-Rev: a9177ca9af194d61788e4b72838da1d350d69af7 ICAgICAgICAgICAgQSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KCiAgICAgICAgICAgIFJl cG8gICA6IHJwbXMvZ2xpYjIKICAgICAgICAgICAgQnJhbmNoIDogY3ZlLTIwMjYtNTgwMTYtZjQ0 CiAgICAgICAgICAgIENvbW1pdCA6IGE5MTc3Y2E5YWYxOTRkNjE3ODhlNGI3MjgzOGRhMWQzNTBk NjlhZjcKICAgICAgICAgICAgQXV0aG9yIDogRGF2aWQgS2luZyA8YW1pZ2FkYXZlQGFtaWdhZGF2 ZS5jb20+CiAgICAgICAgICAgIERhdGUgICA6IDIwMjItMTEtMDJUMTU6MDA6MjIrMDA6MDAKICAg ICAgICAgICAgU3RhdHMgIDogKzE1My8tMCBpbiAyIGZpbGUocykKICAgICAgICAgICAgVVJMICAg IDogaHR0cHM6Ly9zcmMuZmVkb3JhcHJvamVjdC5vcmcvcnBtcy9nbGliMi9jL2E5MTc3Y2E5YWYx OTRkNjE3ODhlNGI3MjgzOGRhMWQzNTBkNjlhZjc/YnJhbmNoPWN2ZS0yMDI2LTU4MDE2LWY0NAoK ICAgICAgICAgICAgTG9nOgogICAgICAgICAgICBBZGQgdXBzdHJlYW0gcmV2ZXJ0IG9mIGZkIG1p c2hhbmRsaW5nCgpodHRwczovL2dpdGxhYi5nbm9tZS5vcmcvR05PTUUvZ2xpYi8tL21lcmdlX3Jl cXVlc3RzLzMwMzkKCi0tLQpkaWZmIC0tZ2l0IGEvZ2xpYi0yLjc0LjEtcmV2ZXJ0LWZkLWhhbmRs aW5nLnBhdGNoIGIvZ2xpYi0yLjc0LjEtcmV2ZXJ0LWZkLWhhbmRsaW5nLnBhdGNoCm5ldyBmaWxl IG1vZGUgMTAwNjQ0CmluZGV4IDAwMDAwMDAuLjJlOTk2MjMKLS0tIC9kZXYvbnVsbAorKysgYi9n bGliLTIuNzQuMS1yZXZlcnQtZmQtaGFuZGxpbmcucGF0Y2gKQEAgLTAsMCArMSwxNTAgQEAKK0Zy b20gMmEzNmJiNGI3ZTQ2ZjlhYzA0MzU2MWM2MWY5YTc5MDc4NmE1NDQwYyBNb24gU2VwIDE3IDAw OjAwOjAwIDIwMDEKK0Zyb206IFJheSBTdHJvZGUgPHJzdHJvZGVAcmVkaGF0LmNvbT4KK0RhdGU6 IEZyaSwgMjggT2N0IDIwMjIgMTE6MjE6MDQgLTA0MDAKK1N1YmplY3Q6IFtQQVRDSCAxLzJdIFJl dmVydCAiSGFuZGxpbmcgY29sbGlzaW9uIGJldHdlZW4gc3RhbmRhcmQgaS9vIGZpbGUKKyBkZXNj cmlwdG9ycyBhbmQgbmV3bHkgY3JlYXRlZCBvbmVzIgorCitnX3VuaXhfb3Blbl9waXBlIHRyaWVz IHRvIGF2b2lkIHRoZSBzdGFuZGFyZCBpbyBmZCByYW5nZQord2hlbiBnZXR0aW5nIHBpcGUgZmRz LiBUaGlzIHR1cm5zIG91dCB0byBiZSBhIGJhZCBpZGVhIGJlY2F1c2UKK2NlcnRhaW4gYnVnZ3kg cHJvZ3JhbXMgcmVseSBvbiBpdCB1c2luZyB0aGF0IHJhbmdlLgorCitUaGlzIHJldmVydHMgY29t bWl0IGQ5YmE2MTUwOTA5ODE4YmViMDU1NzNmNTRmMjYyMzIwNjM0OTJjNWIKKworQ2xvc2VzOiAj Mjc5NQorUmVvcGVuczogIzE2CistLS0KKyBnbGliL2dsaWItdW5peC5jIHwgMjQgLS0tLS0tLS0t LS0tLS0tLS0tLS0tLS0tCisgMSBmaWxlIGNoYW5nZWQsIDI0IGRlbGV0aW9ucygtKQorCitkaWZm IC0tZ2l0IGEvZ2xpYi9nbGliLXVuaXguYyBiL2dsaWIvZ2xpYi11bml4LmMKK2luZGV4IDQ3MTBj NTExNjguLmJjMTUyZDc2NjMgMTAwNjQ0CistLS0gYS9nbGliL2dsaWItdW5peC5jCisrKysgYi9n bGliL2dsaWItdW5peC5jCitAQCAtMTA4LDE3ICsxMDgsNiBAQCBnX3VuaXhfb3Blbl9waXBlIChp bnQgICAgICpmZHMsCisgICAgIGVjb2RlID0gcGlwZTIgKGZkcywgcGlwZTJfZmxhZ3MpOworICAg ICBpZiAoZWNvZGUgPT0gLTEgJiYgZXJybm8gIT0gRU5PU1lTKQorICAgICAgIHJldHVybiBnX3Vu aXhfc2V0X2Vycm9yX2Zyb21fZXJybm8gKGVycm9yLCBlcnJubyk7CistICAgIC8qIERvbid0IHJl YXNzaWduIHBpcGVzIHRvIHN0ZGluLCBzdGRvdXQsIHN0ZGVyciBpZiBjbG9zZWQgbWVhbndoaWxl ICovCistICAgIGVsc2UgaWYgKGZkc1swXSA8IDMgfHwgZmRzWzFdIDwgMykKKy0gICAgICB7Cist ICAgICAgICBpbnQgb2xkX2Zkc1syXSA9IHsgZmRzWzBdLCBmZHNbMV0gfTsKKy0gICAgICAgIGdi b29sZWFuIHJlc3VsdCA9IGdfdW5peF9vcGVuX3BpcGUgKGZkcywgZmxhZ3MsIGVycm9yKTsKKy0g ICAgICAgIGNsb3NlIChvbGRfZmRzWzBdKTsKKy0gICAgICAgIGNsb3NlIChvbGRfZmRzWzFdKTsK Ky0KKy0gICAgICAgIGlmICghcmVzdWx0KQorLSAgICAgICAgICBnX3VuaXhfc2V0X2Vycm9yX2Zy b21fZXJybm8gKGVycm9yLCBlcnJubyk7CistICAgICAgfQorICAgICBlbHNlIGlmIChlY29kZSA9 PSAwKQorICAgICAgIHJldHVybiBUUlVFOworICAgICAvKiBGYWxsIHRocm91Z2ggb24gLUVOT1NZ Uywgd2UgbXVzdCBiZSBydW5uaW5nIG9uIGFuIG9sZCBrZXJuZWwgKi8KK0BAIC0xMjcsMTkgKzEx Niw2IEBAIGdfdW5peF9vcGVuX3BpcGUgKGludCAgICAgKmZkcywKKyAgIGVjb2RlID0gcGlwZSAo ZmRzKTsKKyAgIGlmIChlY29kZSA9PSAtMSkKKyAgICAgcmV0dXJuIGdfdW5peF9zZXRfZXJyb3Jf ZnJvbV9lcnJubyAoZXJyb3IsIGVycm5vKTsKKy0gIC8qIERvbid0IHJlYXNzaWduIHBpcGVzIHRv IHN0ZGluLCBzdGRvdXQsIHN0ZGVyciBpZiBjbG9zZWQgbWVhbndoaWxlICovCistICBlbHNlIGlm IChmZHNbMF0gPCAzIHx8IGZkc1sxXSA8IDMpCistICAgIHsKKy0gICAgICBpbnQgb2xkX2Zkc1sy XSA9IHsgZmRzWzBdLCBmZHNbMV0gfTsKKy0gICAgICBnYm9vbGVhbiByZXN1bHQgPSBnX3VuaXhf b3Blbl9waXBlIChmZHMsIGZsYWdzLCBlcnJvcik7CistICAgICAgY2xvc2UgKG9sZF9mZHNbMF0p OworLSAgICAgIGNsb3NlIChvbGRfZmRzWzFdKTsKKy0KKy0gICAgICBpZiAoIXJlc3VsdCkKKy0g ICAgICAgIGdfdW5peF9zZXRfZXJyb3JfZnJvbV9lcnJubyAoZXJyb3IsIGVycm5vKTsKKy0KKy0g ICAgICByZXR1cm4gcmVzdWx0OworLSAgICB9CisgCisgICBpZiAoZmxhZ3MgPT0gMCkKKyAgICAg cmV0dXJuIFRSVUU7CistLSAKK0dpdExhYgorCisKK0Zyb20gMWMxYzQ1MmZmMjAzMDEzNWU0YWJj MjgxNmU4MWI3MDc4YTg0NTU4MCBNb24gU2VwIDE3IDAwOjAwOjAwIDIwMDEKK0Zyb206IFJheSBT dHJvZGUgPHJzdHJvZGVAcmVkaGF0LmNvbT4KK0RhdGU6IE1vbiwgMzEgT2N0IDIwMjIgMDk6MTc6 NTUgLTA0MDAKK1N1YmplY3Q6IFtQQVRDSCAyLzJdIGdsaWItdW5peDogQWRkIHRlc3QgdG8gbWFr ZSBzdXJlIGdfdW5peF9vcGVuX3BpcGUgd2lsbAorIGludHJ1ZGUgc3RhbmRhcmQgcmFuZ2UKKwor Tm93IHRoYXQgd2Uga25vdyBpdCdzIGEgYmFkIGlkZWEgdG8gYXZvaWQgdGhlIHN0YW5kYXJkIGlv IGZkIHJhbmdlCit3aGVuIGdldHRpbmcgcGlwZSBmZHMgZm9yIGdfdW5peF9vcGVuX3BpcGUsIHdl IHNob3VsZCB0ZXN0IHRvIG1ha2Ugc3VyZQord2UgZG9uJ3QgaW5hZHZlcnRlbnRseSB0cnkgdG8g ZG8gaXQgYWdhaW4uCisKK1RoaXMgY29tbWl0IGFkZHMgdGhhdCB0ZXN0LgorLS0tCisgZ2xpYi90 ZXN0cy91bml4LmMgfCA0MSArKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysr KworIDEgZmlsZSBjaGFuZ2VkLCA0MSBpbnNlcnRpb25zKCspCisKK2RpZmYgLS1naXQgYS9nbGli L3Rlc3RzL3VuaXguYyBiL2dsaWIvdGVzdHMvdW5peC5jCitpbmRleCAyMTEyY2FiNmJmLi42YzRh NTlkZWU3IDEwMDY0NAorLS0tIGEvZ2xpYi90ZXN0cy91bml4LmMKKysrKyBiL2dsaWIvdGVzdHMv dW5peC5jCitAQCAtMjQsOCArMjQsMTEgQEAKKyAjaW5jbHVkZSAiY29uZmlnLmgiCisgCisgI2lu Y2x1ZGUgImdsaWItdW5peC5oIgorKyNpbmNsdWRlICJnc3RkaW8uaCIKKysKKyAjaW5jbHVkZSA8 c3RyaW5nLmg+CisgI2luY2x1ZGUgPHB3ZC5oPgorKyNpbmNsdWRlIDx1bmlzdGQuaD4KKyAKKyBz dGF0aWMgdm9pZAorIHRlc3RfcGlwZSAodm9pZCkKK0BAIC01Miw2ICs1NSw0MyBAQCB0ZXN0X3Bp cGUgKHZvaWQpCisgICBnX2Fzc2VydCAoZ19zdHJfaGFzX3ByZWZpeCAoYnVmLCAiaGVsbG8iKSk7 CisgfQorIAorK3N0YXRpYyB2b2lkCisrdGVzdF9waXBlX3N0ZGlvX292ZXJ3cml0ZSAodm9pZCkK Kyt7CisrICBHRXJyb3IgKmVycm9yID0gTlVMTDsKKysgIGludCBwaXBlZmRbMl0sIHJldDsKKysg IGdib29sZWFuIHJlczsKKysgIGludCBzdGRpbl9mZDsKKysKKysKKysgIGdfdGVzdF9zdW1tYXJ5 ICgiVGVzdCB0aGF0IGdfdW5peF9vcGVuX3BpcGUoKSB3aWxsIHVzZSB0aGUgZmlyc3QgYXZhaWxh YmxlIEZELCBldmVuIGlmIGl04oCZcyBzdGRpbi9zdGRvdXQvc3RkZXJyIik7CisrICBnX3Rlc3Rf YnVnICgiaHR0cHM6Ly9naXRsYWIuZ25vbWUub3JnL0dOT01FL2dsaWIvLS9pc3N1ZXMvMjc5NSIp OworKworKyAgc3RkaW5fZmQgPSBkdXAgKFNURElOX0ZJTEVOTyk7CisrICBnX2Fzc2VydF9jbXBp bnQgKHN0ZGluX2ZkLCA+LCAwKTsKKysKKysgIGdfY2xvc2UgKFNURElOX0ZJTEVOTywgJmVycm9y KTsKKysgIGdfYXNzZXJ0X25vX2Vycm9yIChlcnJvcik7CisrCisrICByZXMgPSBnX3VuaXhfb3Bl bl9waXBlIChwaXBlZmQsIEZEX0NMT0VYRUMsICZlcnJvcik7CisrICBnX2Fzc2VydF9ub19lcnJv ciAoZXJyb3IpOworKyAgZ19hc3NlcnRfdHJ1ZSAocmVzKTsKKysKKysgIGdfYXNzZXJ0X2NtcGlu dCAocGlwZWZkWzBdLCA9PSwgU1RESU5fRklMRU5PKTsKKysKKysgIGdfY2xvc2UgKHBpcGVmZFsw XSwgJmVycm9yKTsKKysgIGdfYXNzZXJ0X25vX2Vycm9yIChlcnJvcik7CisrCisrICBnX2Nsb3Nl IChwaXBlZmRbMV0sICZlcnJvcik7CisrICBnX2Fzc2VydF9ub19lcnJvciAoZXJyb3IpOworKwor KyAgcmV0ID0gZHVwMiAoc3RkaW5fZmQsIFNURElOX0ZJTEVOTyk7CisrICBnX2Fzc2VydF9jbXBp bnQgKHJldCwgPj0sIDApOworKworKyAgZ19jbG9zZSAoc3RkaW5fZmQsICZlcnJvcik7CisrICBn X2Fzc2VydF9ub19lcnJvciAoZXJyb3IpOworK30KKysKKyBzdGF0aWMgdm9pZAorIHRlc3RfZXJy b3IgKHZvaWQpCisgeworQEAgLTMzNyw2ICszNzcsNyBAQCBtYWluIChpbnQgICBhcmdjLAorICAg Z190ZXN0X2luaXQgKCZhcmdjLCAmYXJndiwgTlVMTCk7CisgCisgICBnX3Rlc3RfYWRkX2Z1bmMg KCIvZ2xpYi11bml4L3BpcGUiLCB0ZXN0X3BpcGUpOworKyAgZ190ZXN0X2FkZF9mdW5jICgiL2ds aWItdW5peC9waXBlLXN0ZGlvLW92ZXJ3cml0ZSIsIHRlc3RfcGlwZV9zdGRpb19vdmVyd3JpdGUp OworICAgZ190ZXN0X2FkZF9mdW5jICgiL2dsaWItdW5peC9lcnJvciIsIHRlc3RfZXJyb3IpOwor ICAgZ190ZXN0X2FkZF9mdW5jICgiL2dsaWItdW5peC9ub25ibG9ja2luZyIsIHRlc3Rfbm9uYmxv Y2tpbmcpOworICAgZ190ZXN0X2FkZF9mdW5jICgiL2dsaWItdW5peC9zaWdodXAiLCB0ZXN0X3Np Z2h1cCk7CistLSAKK0dpdExhYgorCgpkaWZmIC0tZ2l0IGEvZ2xpYjIuc3BlYyBiL2dsaWIyLnNw ZWMKaW5kZXggYmRlMDE4OC4uMzJlYjAwYSAxMDA2NDQKLS0tIGEvZ2xpYjIuc3BlYworKysgYi9n bGliMi5zcGVjCkBAIC0xMiw2ICsxMiw5IEBAIFNvdXJjZTA6IGh0dHBzOi8vZG93bmxvYWQuZ25v bWUub3JnL3NvdXJjZXMvZ2xpYi8yLjcyL2dsaWItJXt2ZXJzaW9ufS50YXIueHoKICMgaHR0cHM6 Ly9naXRsYWIuZ25vbWUub3JnL0dOT01FL2dsaWIvLS9tZXJnZV9yZXF1ZXN0cy85MDMKIFBhdGNo MDogZ251dGxzLWhtYWMucGF0Y2gKIAorIyBodHRwczovL2dpdGxhYi5nbm9tZS5vcmcvR05PTUUv Z2xpYi8tL21lcmdlX3JlcXVlc3RzLzMwMzkKK1BhdGNoMTogZ2xpYi0yLjc0LjEtcmV2ZXJ0LWZk LWhhbmRsaW5nLnBhdGNoCisKIEJ1aWxkUmVxdWlyZXM6IGdjYwogQnVpbGRSZXF1aXJlczogZ2Nj LWMrKwogQnVpbGRSZXF1aXJlczogZ2V0dGV4dAo=