public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
* [rpms/glib2] cve-2026-58016-f44: Fix up patch to actually apply
@ 2026-08-11 10:37 Richard Hughes
0 siblings, 0 replies; only message in thread
From: Richard Hughes @ 2026-08-11 10:37 UTC (permalink / raw)
To: git-commits
A new commit has been pushed.
Repo : rpms/glib2
Branch : cve-2026-58016-f44
Commit : bdde047c9fa7627dd28875f803e4345af78ae274
Author : Richard Hughes <richard@hughsie.com>
Date : 2023-07-19T15:47:15+01:00
Stats : +7/-7 in 1 file(s)
URL : https://src.fedoraproject.org/rpms/glib2/c/bdde047c9fa7627dd28875f803e4345af78ae274?branch=cve-2026-58016-f44
Log:
Fix up patch to actually apply
---
diff --git a/gspawn-eperm.patch b/gspawn-eperm.patch
index f233bc9..66036c9 100644
--- a/gspawn-eperm.patch
+++ b/gspawn-eperm.patch
@@ -2,7 +2,7 @@ diff --git a/glib/gspawn.c b/glib/gspawn.c
index 67be6a6af..aaefd5b0d 100644
--- a/glib/gspawn.c
+++ b/glib/gspawn.c
-@@ -1533,9 +1533,18 @@ safe_fdwalk_set_cloexec (int lowfd)
+@@ -1598,9 +1598,18 @@ safe_fdwalk_set_cloexec (int lowfd)
*
* Handle ENOSYS in case it’s supported in libc but not the kernel; if so,
* fall back to safe_fdwalk(). Handle EINVAL in case `CLOSE_RANGE_CLOEXEC`
@@ -17,13 +17,13 @@ index 67be6a6af..aaefd5b0d 100644
+ * - https://salsa.debian.org/debian/libseccomp/-/blob/debian/bullseye/debian/patches/syscalls_add_close_range_syscall.patch
+ * - https://github.com/opencontainers/runc/issues/2151
+ */
- int ret = close_range (lowfd, G_MAXUINT, CLOSE_RANGE_CLOEXEC);
+ ret = close_range (lowfd, G_MAXUINT, CLOSE_RANGE_CLOEXEC);
- if (ret == 0 || !(errno == ENOSYS || errno == EINVAL))
+ if (ret == 0 || !(errno == ENOSYS || errno == EINVAL || errno == EPERM))
return ret;
#endif /* HAVE_CLOSE_RANGE */
- return safe_fdwalk (set_cloexec, GINT_TO_POINTER (lowfd));
-@@ -1586,9 +1595,15 @@ safe_closefrom (int lowfd)
+
+@@ -1624,9 +1633,15 @@ safe_closefrom (int lowfd)
* situations: https://bugs.python.org/issue38061
*
* Handle ENOSYS in case it’s supported in libc but not the kernel; if so,
@@ -35,9 +35,9 @@ index 67be6a6af..aaefd5b0d 100644
+ * to it under a default security policy which returns EPERM rather than (the
+ * correct) ENOSYS.
+ */
- int ret = close_range (lowfd, G_MAXUINT, 0);
+ ret = close_range (lowfd, G_MAXUINT, 0);
- if (ret == 0 || errno != ENOSYS)
-+ if (ret == 0 || !(errno == ENOSYS || errno == EPERM))
++ if (ret == 0 || errno != ENOSYS || errno == EPERM)
return ret;
#endif /* HAVE_CLOSE_RANGE */
- return safe_fdwalk (close_func, GINT_TO_POINTER (lowfd));
+
^ permalink raw reply related [flat|nested] only message in thread
only message in thread, other threads:[~2026-08-11 10:37 UTC | newest]
Thread overview: (only message) (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2026-08-11 10:37 [rpms/glib2] cve-2026-58016-f44: Fix up patch to actually apply Richard Hughes
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox