From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Kalev Lember To: git-commits@fedoraproject.org Subject: [rpms/glib2] cve-2026-58016-f44: gkeyfile: Temporarily re-allow invalid escapes when parsing strings Date: Tue, 11 Aug 2026 10:38:02 GMT Message-ID: <178644468223.1.13062739872595018911.rpms-glib2-fa84f8591f19@fedoraproject.org> List-ID: X-Git-Repo: rpms/glib2 X-Git-Branch: cve-2026-58016-f44 X-Git-Rev: fa84f8591f19e460bc206048fb1a6390efaa94e9 ICAgICAgICAgICAgQSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KCiAgICAgICAgICAgIFJl cG8gICA6IHJwbXMvZ2xpYjIKICAgICAgICAgICAgQnJhbmNoIDogY3ZlLTIwMjYtNTgwMTYtZjQ0 CiAgICAgICAgICAgIENvbW1pdCA6IGZhODRmODU5MWYxOWU0NjBiYzIwNjA0OGZiMWE2MzkwZWZh YTk0ZTkKICAgICAgICAgICAgQXV0aG9yIDogS2FsZXYgTGVtYmVyIDxrbGVtYmVyQHJlZGhhdC5j b20+CiAgICAgICAgICAgIERhdGUgICA6IDIwMjMtMDktMDdUMTE6NDU6MTYrMDI6MDAKICAgICAg ICAgICAgU3RhdHMgIDogKzg2Ly0wIGluIDIgZmlsZShzKQogICAgICAgICAgICBVUkwgICAgOiBo dHRwczovL3NyYy5mZWRvcmFwcm9qZWN0Lm9yZy9ycG1zL2dsaWIyL2MvZmE4NGY4NTkxZjE5ZTQ2 MGJjMjA2MDQ4ZmIxYTYzOTBlZmFhOTRlOT9icmFuY2g9Y3ZlLTIwMjYtNTgwMTYtZjQ0CgogICAg ICAgICAgICBMb2c6CiAgICAgICAgICAgIGdrZXlmaWxlOiBUZW1wb3JhcmlseSByZS1hbGxvdyBp bnZhbGlkIGVzY2FwZXMgd2hlbiBwYXJzaW5nIHN0cmluZ3MKCkJhY2twb3J0IGFuIHVwc3RyZWFt IHBhdGNoIHRvIHRlbXBvcmFyaWx5IHJldmVydCBjaGFuZ2VkIFxcIGJlaGF2aW91ciBpbgprZXlm aWxlcy4KCmh0dHBzOi8vYnVnemlsbGEucmVkaGF0LmNvbS9zaG93X2J1Zy5jZ2k/aWQ9MjIzNzU2 MgoKLS0tCmRpZmYgLS1naXQgYS8zNTY1LnBhdGNoIGIvMzU2NS5wYXRjaApuZXcgZmlsZSBtb2Rl IDEwMDY0NAppbmRleCAwMDAwMDAwLi5hOTNhMGRkCi0tLSAvZGV2L251bGwKKysrIGIvMzU2NS5w YXRjaApAQCAtMCwwICsxLDgzIEBACitGcm9tIDRhOTY3Mjc2NDIxNGQ1ZmFiNTY5Yjc3NGZlNzYx YWU3ZDJlYzExZDkgTW9uIFNlcCAxNyAwMDowMDowMCAyMDAxCitGcm9tOiBQaGlsaXAgV2l0aG5h bGwgPHBoaWxpcEB0ZWNub2NvZGUuY28udWs+CitEYXRlOiBXZWQsIDYgU2VwIDIwMjMgMTI6MDg6 NTYgKzAxMDAKK1N1YmplY3Q6IFtQQVRDSF0gZ2tleWZpbGU6IFRlbXBvcmFyaWx5IHJlLWFsbG93 IGludmFsaWQgZXNjYXBlcyB3aGVuIHBhcnNpbmcKKyBzdHJpbmdzCitNSU1FLVZlcnNpb246IDEu MAorQ29udGVudC1UeXBlOiB0ZXh0L3BsYWluOyBjaGFyc2V0PVVURi04CitDb250ZW50LVRyYW5z ZmVyLUVuY29kaW5nOiA4Yml0CisKK0JlZm9yZSBjb21taXQgNzFiN2VmZDA4YTFmZWFkYzhkZGNh MzFlMTY0MDM0YjFmNWE2YmQ3NCwgYEdLZXlGaWxlYAoraW5jb3JyZWN0bHkgYWxsb3dlZCBpbnZh bGlkIGVzY2FwZSBzZXF1ZW5jZXM6IGl0IHdvdWxkIHRyZWF0IHRoZQorc2VxdWVuY2UgYXMgYSBs aXRlcmFsLCBzZXQgYSBgR0Vycm9yYCwgYnV0IG5vdCByZXR1cm4gZmFpbHVyZSBmcm9tIHRoZQor ZnVuY3Rpb24uIFNvIGlmIGEgY2FsbGVyIHdhcyBleHBsaWNpdGx5IGNoZWNraW5nIGZvciByZXR1 cm5lZCBgR0Vycm9yYHMsCit0aGV5IGNvdWxkIGRldGVjdCB0aGUgaW52YWxpZCBlc2NhcGU7IGJ1 dCBpZiB0aGV5IHdlcmUganVzdCBjaGVja2luZyB0aGUKK2Z1bmN0aW9u4oCZcyByZXR1cm4gdmFs dWUsIHRoZXnigJlkIG1pc3MgaXQuCisKK1RoaXMgaXMgbm90IGNvcnJlY3QgdXNlIG9mIGBHRXJy b3JgLCBhbmQgdGhlIFtEZXNrdG9wIEVudHJ5CitTcGVjXShodHRwczovL3NwZWNpZmljYXRpb25z LmZyZWVkZXNrdG9wLm9yZy9kZXNrdG9wLWVudHJ5LXNwZWMvbGF0ZXN0L2FyMDFzMDQuaHRtbCkK K2RvZXNu4oCZdCBhbGxvdyBmb3IgaW52YWxpZCBlc2NhcGUgc2VxdWVuY2VzIHRvIGJlIGFjY2Vw dGVkLiBTbyBpdOKAmXMgd3JvbmcKK2luIGJvdGggd2F5cy4KKworSG93ZXZlciwgdGhlIGNvbW1p dCBhYm92ZSBjaGFuZ2VkIHRoaXMgYmVoYXZpb3VyIHdpdGhvdXQgcmVhbGlzaW5nIGl0LAorcXVp dGUgY2xvc2UgdG8gdGhlIDIuNzggc3RhYmxlIHJlbGVhc2UgZGVhZGxpbmUuIFRoZXJlIGFyZSBu dW1lcm91cyBrZXkKK2ZpbGVzIGluIHRoZSB3aWxkIHdoaWNoIHVzZSBpbnZhbGlkIGVzY2FwZSBz ZXF1ZW5jZXMsIGFuZCBpdOKAmXMgdG9vIGxhdGUKK2luIHRoZSBjeWNsZSB0byDigJhicmVha+KA mSBwYXJzaW5nIG9mIGFsbCBvZiB0aGVtLgorCitTbywgZm9yIG5vdywgcmV2ZXJ0IHRvIHRoZSBv bGQgYmVoYXZpb3VyIGZvciBpbnZhbGlkIGVzY2FwZSBzZXF1ZW5jZXMsCithbmQgZ2l2ZSBwZW9w bGUgYW5vdGhlciBjeWNsZSB0byBhZGFwdCB0byB0aGUgY2hhbmdlcy4gVGhpcyB3aWxsIGxpa2Vs eQorbWVhbiB0aGV5IGVuZCB1cCBjYWxsaW5nIGBnX2tleV9maWxlX2dldF92YWx1ZSgpYCByYXRo ZXIgdGhhbgorYGdfa2V5X2ZpbGVfZ2V0X3N0cmluZygpYC4gU2VlCitodHRwczovL2dpdGxhYi5n bm9tZS5vcmcvR05PTUUvZ2xpYi8tL2lzc3Vlcy8zMDk4IGZvciB0cmFja2luZworcmUtZW5hYmxp bmcgdGhlIGVycm9yIGhhbmRsaW5nIGZvciBpbnZhbGlkIGVzY2FwZSBzZXF1ZW5jZXMuCisKK1Np Z25lZC1vZmYtYnk6IFBoaWxpcCBXaXRobmFsbCA8cGhpbGlwQHRlY25vY29kZS5jby51az4KKwor Rml4ZXM6ICMzMDk1CitTZWU6ICMzMDk4CistLS0KKyBnbGliL2drZXlmaWxlLmMgfCAxNyArKysr KysrKysrKysrKysrLQorIDEgZmlsZSBjaGFuZ2VkLCAxNiBpbnNlcnRpb25zKCspLCAxIGRlbGV0 aW9uKC0pCisKK2RpZmYgLS1naXQgYS9nbGliL2drZXlmaWxlLmMgYi9nbGliL2drZXlmaWxlLmMK K2luZGV4IDY4MTMwZmVhZDkuLmQwOGE0ODVjMDYgMTAwNjQ0CistLS0gYS9nbGliL2drZXlmaWxl LmMKKysrKyBiL2dsaWIvZ2tleWZpbGUuYworQEAgLTQzNTEsNiArNDM1MSw3IEBAIGdfa2V5X2Zp bGVfcGFyc2VfdmFsdWVfYXNfc3RyaW5nIChHS2V5RmlsZSAgICAgKmtleV9maWxlLAorICAgICAg ICAgICAgICAgYnJlYWs7CisgCisgCSAgICBjYXNlICdcMCc6CisrICAgICAgICAgICAgICBnX2Ns ZWFyX2Vycm9yIChlcnJvcik7CisgCSAgICAgIGdfc2V0X2Vycm9yX2xpdGVyYWwgKGVycm9yLCBH X0tFWV9GSUxFX0VSUk9SLAorICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgR19L RVlfRklMRV9FUlJPUl9JTlZBTElEX1ZBTFVFLAorICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgXygiS2V5IGZpbGUgY29udGFpbnMgZXNjYXBlIGNoYXJhY3RlciAiCitAQCAtNDM3 MywxMSArNDM3NCwyNSBAQCBnX2tleV9maWxlX3BhcnNlX3ZhbHVlX2FzX3N0cmluZyAoR0tleUZp bGUgICAgICprZXlfZmlsZSwKKyAJCSAgICAgIHNlcXVlbmNlWzFdID0gKnA7CisgCQkgICAgICBz ZXF1ZW5jZVsyXSA9ICdcMCc7CisgCQkgICAgICAKKysgICAgICAgICAgICAgICAgICAgICAgLyog RklYTUU6IFRoaXMgc2hvdWxkIGJlIGEgZmF0YWwgZXJyb3IsIGJ1dCB0aGVyZSB3YXMgYQorKyAg ICAgICAgICAgICAgICAgICAgICAgKiBidWcgd2hpY2ggcHJldmVudGVkIHRoYXQgYmVpbmcgcmVw b3J0ZWQgZm9yIGEgbG9uZworKyAgICAgICAgICAgICAgICAgICAgICAgKiB0aW1lLCBzbyBhIGxv dCBvZiBhcHBsaWNhdGlvbnMgYW5kIGluLXRoZS1maWVsZCBrZXkKKysgICAgICAgICAgICAgICAg ICAgICAgICogZmlsZXMgdXNlIGludmFsaWQgZXNjYXBlIHNlcXVlbmNlcyB3aXRob3V0IGFudGlj aXBhdGluZworKyAgICAgICAgICAgICAgICAgICAgICAgKiBwcm9ibGVtcy4gRm9yIG5vdyAoR0xp YiAyLjc4KSwgbWVzc2FnZSBhYm91dCBpdDsgaW4KKysgICAgICAgICAgICAgICAgICAgICAgICog ZnV0dXJlLCB0aGUgYmVoYXZpb3VyIG1heSBiZWNvbWUgZmF0YWwgYWdhaW4uCisrICAgICAgICAg ICAgICAgICAgICAgICAqCisrICAgICAgICAgICAgICAgICAgICAgICAqIFRoZSBwcmV2aW91cyBi ZWhhdmlvdXIgd2FzIHRvIHNldCB0aGUgI0dFcnJvciBidXQgbm90CisrICAgICAgICAgICAgICAg ICAgICAgICAqIHJldHVybiBmYWlsdXJlIGZyb20gdGhlIGZ1bmN0aW9uLCBzbyB0aGUgY2FsbGVy IGNvdWxkCisrICAgICAgICAgICAgICAgICAgICAgICAqIGV4cGxpY2l0bHkgY2hlY2sgZm9yIGlu dmFsaWQgZXNjYXBlcywgYnV0IGFsc28gaWdub3JlCisrICAgICAgICAgICAgICAgICAgICAgICAq IHRoZSBlcnJvciBpZiB0aGV5IHdhbnQuIFRoaXMgaXMgbm90IGhvdyAjR0Vycm9yIGlzCisrICAg ICAgICAgICAgICAgICAgICAgICAqIG1lYW50IHRvIGJlIHVzZWQsIGJ1dCB0aGUgI0dLZXlGaWxl IGNvZGUgaXMgdmVyeSBvbGQuCisrICAgICAgICAgICAgICAgICAgICAgICAqCisrICAgICAgICAg ICAgICAgICAgICAgICAqIFNlZSBodHRwczovL2dpdGxhYi5nbm9tZS5vcmcvR05PTUUvZ2xpYi8t L2lzc3Vlcy8zMDk4ICovCisrICAgICAgICAgICAgICAgICAgICAgIGdfY2xlYXJfZXJyb3IgKGVy cm9yKTsKKyAJCSAgICAgIGdfc2V0X2Vycm9yIChlcnJvciwgR19LRVlfRklMRV9FUlJPUiwKKyAJ CQkJICAgR19LRVlfRklMRV9FUlJPUl9JTlZBTElEX1ZBTFVFLAorIAkJCQkgICBfKCJLZXkgZmls ZSBjb250YWlucyBpbnZhbGlkIGVzY2FwZSAiCisgCQkJCSAgICAgInNlcXVlbmNlIOKAnCVz4oCd IiksIHNlcXVlbmNlKTsKKy0gICAgICAgICAgICAgICAgICAgICAgZ290byBlcnJvcjsKKyAgICAg ICAgICAgICAgICAgICAgIH0KKyAgICAgICAgICAgICAgICAgfQorICAgICAgICAgICAgICAgYnJl YWs7CistLSAKK0dpdExhYgorCgpkaWZmIC0tZ2l0IGEvZ2xpYjIuc3BlYyBiL2dsaWIyLnNwZWMK aW5kZXggYWUyMTliNi4uOWNmYzgwOSAxMDA2NDQKLS0tIGEvZ2xpYjIuc3BlYworKysgYi9nbGli Mi5zcGVjCkBAIC0xNiw2ICsxNiw5IEBAIFBhdGNoMDogZ251dGxzLWhtYWMucGF0Y2gKICMgdGhl IGJhcmVtZXRhbCBEb2NrZXIgaXMgdXBkYXRlZCB0aGVyZSBpLmUuIGxldHMgYmUgYSBsaXR0bGUg Yml0IHByYWdtYXRpYy4uLgogUGF0Y2gyOiBnc3Bhd24tZXBlcm0ucGF0Y2gKIAorIyBodHRwczov L2dpdGxhYi5nbm9tZS5vcmcvR05PTUUvZ2xpYi8tL21lcmdlX3JlcXVlc3RzLzM1NjUKK1BhdGNo MzogMzU2NS5wYXRjaAorCiBCdWlsZFJlcXVpcmVzOiBnY2MKIEJ1aWxkUmVxdWlyZXM6IGdjYy1j KysKIEJ1aWxkUmVxdWlyZXM6IGdldHRleHQK