From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Kalev Lember To: git-commits@fedoraproject.org Subject: [rpms/glib2] cve-2026-58016-f44: Update to 2.78.1 Date: Tue, 11 Aug 2026 10:38:04 GMT Message-ID: <178644468458.1.9849695175561000421.rpms-glib2-79f461e49706@fedoraproject.org> List-ID: X-Git-Repo: rpms/glib2 X-Git-Branch: cve-2026-58016-f44 X-Git-Rev: 79f461e497064703f2c00a64b0da4f4cefeb556b QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvZ2xpYjIKQnJhbmNo IDogY3ZlLTIwMjYtNTgwMTYtZjQ0CkNvbW1pdCA6IDc5ZjQ2MWU0OTcwNjQ3MDNmMmMwMGE2NGIw ZGE0ZjRjZWZlYjU1NmIKQXV0aG9yIDogS2FsZXYgTGVtYmVyIDxrbGVtYmVyQHJlZGhhdC5jb20+ CkRhdGUgICA6IDIwMjMtMTAtMjZUMTc6NTI6NDYrMDI6MDAKU3RhdHMgIDogKzIvLTEzOCBpbiAz IGZpbGUocykKVVJMICAgIDogaHR0cHM6Ly9zcmMuZmVkb3JhcHJvamVjdC5vcmcvcnBtcy9nbGli Mi9jLzc5ZjQ2MWU0OTcwNjQ3MDNmMmMwMGE2NGIwZGE0ZjRjZWZlYjU1NmI/YnJhbmNoPWN2ZS0y MDI2LTU4MDE2LWY0NAoKTG9nOgpVcGRhdGUgdG8gMi43OC4xCgotLS0KZGlmZiAtLWdpdCBhL2ds aWIyLnNwZWMgYi9nbGliMi5zcGVjCmluZGV4IDUwYzI1YzYuLmNiYTExNmUgMTAwNjQ0Ci0tLSBh L2dsaWIyLnNwZWMKKysrIGIvZ2xpYjIuc3BlYwpAQCAtMSw1ICsxLDUgQEAKIE5hbWU6ICAgICAg ICAgICBnbGliMgotVmVyc2lvbjogICAgICAgIDIuNzguMAorVmVyc2lvbjogICAgICAgIDIuNzgu MQogUmVsZWFzZTogICAgICAgICVhdXRvcmVsZWFzZQogU3VtbWFyeTogICAgICAgIEEgbGlicmFy eSBvZiBoYW5keSB1dGlsaXR5IGZ1bmN0aW9ucwogCkBAIC0xNiwxMCArMTYsNiBAQCBQYXRjaDog ICAgICAgICAgZ251dGxzLWhtYWMucGF0Y2gKICMgdGhlIGJhcmVtZXRhbCBEb2NrZXIgaXMgdXBk YXRlZCB0aGVyZSBpLmUuIGxldHMgYmUgYSBsaXR0bGUgYml0IHByYWdtYXRpYy4uLgogUGF0Y2g6 ICAgICAgICAgIGdzcGF3bi1lcGVybS5wYXRjaAogCi0jIGh0dHBzOi8vZ2l0bGFiLmdub21lLm9y Zy9HTk9NRS9nbGliLy0vbWVyZ2VfcmVxdWVzdHMvMzU3NQotIyBub3QgcmVsZWFzZWQgeWV0Ci1Q YXRjaDogICAgICAgICAgZ3RocmVhZGVkcmVzb2x2ZXItcmFjZS5wYXRjaAotCiBCdWlsZFJlcXVp cmVzOiAgZ2NjCiBCdWlsZFJlcXVpcmVzOiAgZ2NjLWMrKwogQnVpbGRSZXF1aXJlczogIGdldHRl eHQKCmRpZmYgLS1naXQgYS9ndGhyZWFkZWRyZXNvbHZlci1yYWNlLnBhdGNoIGIvZ3RocmVhZGVk cmVzb2x2ZXItcmFjZS5wYXRjaApkZWxldGVkIGZpbGUgbW9kZSAxMDA2NDQKaW5kZXggOTExYjc4 Yy4uMDAwMDAwMAotLS0gYS9ndGhyZWFkZWRyZXNvbHZlci1yYWNlLnBhdGNoCisrKyAvZGV2L251 bGwKQEAgLTEsMTMyICswLDAgQEAKLUZyb20gODJjNzY0Y2UyZTQyZjBkMTAzMjYyN2RhYmNiZDc0 MmQ1ZjJiZDhmYSBNb24gU2VwIDE3IDAwOjAwOjAwIDIwMDEKLUZyb206IFBoaWxpcCBXaXRobmFs bCA8cGhpbGlwQHRlY25vY29kZS5jby51az4KLURhdGU6IE1vbiwgMTEgU2VwIDIwMjMgMTY6MDI6 MTUgKzAxMDAKLVN1YmplY3Q6IFtQQVRDSF0gZ3RocmVhZGVkcmVzb2x2ZXI6IEZpeCByYWNlIGJl dHdlZW4gc291cmNlIGNhbGxiYWNrcyBhbmQKLSBmaW5hbGl6ZQotTUlNRS1WZXJzaW9uOiAxLjAK LUNvbnRlbnQtVHlwZTogdGV4dC9wbGFpbjsgY2hhcnNldD1VVEYtOAotQ29udGVudC1UcmFuc2Zl ci1FbmNvZGluZzogOGJpdAotCi1JIGhhZCB0aG91Z2h0IHRoYXQgYmVjYXVzZSBgZ19zb3VyY2Vf ZGVzdHJveSgpYCB3YXMgY2FsbGVkIGZvciB0aGUgdHdvCi1zb3VyY2VzIChjYW5jZWwgYW5kIHRp bWVvdXQpIGluIHRoZSBgR1Rhc2tgIGZpbmFsaXplIGZ1bmN0aW9uIGZvciBhCi10aHJlYWRlZCBy ZXNvbHZlciBvcGVyYXRpb24sIHRoYXQgaXQgd291bGQgYmUgZmluZSB0byB1c2UgYSBwbGFpbgot cG9pbnRlciBpbiB0aGUgc291cmNlIGNhbGxiYWNrcyB0byBwb2ludCB0byB0aGUgYEdUYXNrYC4K LQotVGhhdCB0dXJucyBvdXQgdG8gbm90IGJlIHRydWU6IGJlY2F1c2UgdGhlIHNvdXJjZSBjYWxs YmFja3MgYXJlIGV4ZWN1dGVkCi1pbiB0aGUgR0xpYiB3b3JrZXIgdGhyZWFkLCBhbmQgdGhlIGBH VGFza2AgY2FuIGJlIGZpbmFsaXplZCBpbiBhbm90aGVyCi10aHJlYWQsIGl04oCZcyBwb3NzaWJs ZSBmb3IgYSBzb3VyY2UgY2FsbGJhY2sgKGUuZy4gYGNhbmNlbGxlZF9jYigpYCkgdG8KLWJlIHNj aGVkdWxlZCBpbiB0aGUgd29ya2VyIHRocmVhZCwgdGhlbiBmb3IgdGhlIGBHVGFza2AgdG8gYmUg ZmluYWxpemVkLAotYW5kIHRoZW4gdGhlIHNvdXJjZSBjYWxsYmFjayB0byBjb250aW51ZSBleGVj dXRpb24gYW5kIGZpbmQgaXRzZWxmCi1kb2luZyBhIHVzZS1hZnRlci1mcmVlLgotCi1GaXggdGhh dCBieSB1c2luZyBhIHdlYWsgcmVmIHRvIHRoZSBgR1Rhc2tgIGluIHRoZSBzb3VyY2UgY2FsbGJh Y2tzLAotcmF0aGVyIHRoYW4gYSBwbGFpbiBwb2ludGVyLgotCi1TaWduZWQtb2ZmLWJ5OiBQaGls aXAgV2l0aG5hbGwgPHBoaWxpcEB0ZWNub2NvZGUuY28udWs+Ci0KLUZpeGVzOiAjMzEwNQotLS0t Ci0gZ2lvL2d0aHJlYWRlZHJlc29sdmVyLmMgfCA0MyArKysrKysrKysrKysrKysrKysrKysrKysr KysrKysrKysrKy0tLS0tLQotIDEgZmlsZSBjaGFuZ2VkLCAzNyBpbnNlcnRpb25zKCspLCA2IGRl bGV0aW9ucygtKQotCi1kaWZmIC0tZ2l0IGEvZ2lvL2d0aHJlYWRlZHJlc29sdmVyLmMgYi9naW8v Z3RocmVhZGVkcmVzb2x2ZXIuYwotaW5kZXggMmQ5NDUzMWJmZC4uYzdhNTY3NTQ5ZiAxMDA2NDQK LS0tLSBhL2dpby9ndGhyZWFkZWRyZXNvbHZlci5jCi0rKysgYi9naW8vZ3RocmVhZGVkcmVzb2x2 ZXIuYwotQEAgLTE0MjIsMTAgKzE0MjIsMTcgQEAgbG9va3VwX3JlY29yZHNfZmluaXNoIChHUmVz b2x2ZXIgICAgICpyZXNvbHZlciwKLSBzdGF0aWMgZ2Jvb2xlYW4KLSB0aW1lb3V0X2NiIChncG9p bnRlciB1c2VyX2RhdGEpCi0gewotLSAgR1Rhc2sgKnRhc2sgPSBHX1RBU0sgKHVzZXJfZGF0YSk7 Ci0tICBMb29rdXBEYXRhICpkYXRhID0gZ190YXNrX2dldF90YXNrX2RhdGEgKHRhc2spOwotKyAg R1dlYWtSZWYgKndlYWtfdGFzayA9IHVzZXJfZGF0YTsKLSsgIEdUYXNrICp0YXNrID0gTlVMTDsg IC8qIChvd25lZCkgKi8KLSsgIExvb2t1cERhdGEgKmRhdGE7Ci0gICBnYm9vbGVhbiBzaG91bGRf cmV0dXJuOwotIAotKyAgdGFzayA9IGdfd2Vha19yZWZfZ2V0ICh3ZWFrX3Rhc2spOwotKyAgaWYg KHRhc2sgPT0gTlVMTCkKLSsgICAgcmV0dXJuIEdfU09VUkNFX1JFTU9WRTsKLSsKLSsgIGRhdGEg PSBnX3Rhc2tfZ2V0X3Rhc2tfZGF0YSAodGFzayk7Ci0rCi0gICBnX211dGV4X2xvY2sgKCZkYXRh LT5sb2NrKTsKLSAKLSAgIHNob3VsZF9yZXR1cm4gPSBnX2F0b21pY19pbnRfY29tcGFyZV9hbmRf ZXhjaGFuZ2UgKCZkYXRhLT53aWxsX3JldHVybiwgTk9UX1lFVCwgVElNRURfT1VUKTsKLUBAIC0x NDQzLDYgKzE0NTAsOCBAQCB0aW1lb3V0X2NiIChncG9pbnRlciB1c2VyX2RhdGEpCi0gICBnX2Nv bmRfYnJvYWRjYXN0ICgmZGF0YS0+Y29uZCk7Ci0gICBnX211dGV4X3VubG9jayAoJmRhdGEtPmxv Y2spOwotIAotKyAgZ19vYmplY3RfdW5yZWYgKHRhc2spOwotKwotICAgcmV0dXJuIEdfU09VUkNF X1JFTU9WRTsKLSB9Ci0gCi1AQCAtMTQ1MiwxMCArMTQ2MSwxNyBAQCBzdGF0aWMgZ2Jvb2xlYW4K LSBjYW5jZWxsZWRfY2IgKEdDYW5jZWxsYWJsZSAqY2FuY2VsbGFibGUsCi0gICAgICAgICAgICAg ICBncG9pbnRlciAgICAgIHVzZXJfZGF0YSkKLSB7Ci0tICBHVGFzayAqdGFzayA9IEdfVEFTSyAo dXNlcl9kYXRhKTsKLS0gIExvb2t1cERhdGEgKmRhdGEgPSBnX3Rhc2tfZ2V0X3Rhc2tfZGF0YSAo dGFzayk7Ci0rICBHV2Vha1JlZiAqd2Vha190YXNrID0gdXNlcl9kYXRhOwotKyAgR1Rhc2sgKnRh c2sgPSBOVUxMOyAgLyogKG93bmVkKSAqLwotKyAgTG9va3VwRGF0YSAqZGF0YTsKLSAgIGdib29s ZWFuIHNob3VsZF9yZXR1cm47Ci0gCi0rICB0YXNrID0gZ193ZWFrX3JlZl9nZXQgKHdlYWtfdGFz ayk7Ci0rICBpZiAodGFzayA9PSBOVUxMKQotKyAgICByZXR1cm4gR19TT1VSQ0VfUkVNT1ZFOwot KwotKyAgZGF0YSA9IGdfdGFza19nZXRfdGFza19kYXRhICh0YXNrKTsKLSsKLSAgIGdfbXV0ZXhf bG9jayAoJmRhdGEtPmxvY2spOwotIAotICAgZ19hc3NlcnQgKGdfY2FuY2VsbGFibGVfaXNfY2Fu Y2VsbGVkIChjYW5jZWxsYWJsZSkpOwotQEAgLTE0NzMsOSArMTQ4OSwxOCBAQCBjYW5jZWxsZWRf Y2IgKEdDYW5jZWxsYWJsZSAqY2FuY2VsbGFibGUsCi0gICBnX2NvbmRfYnJvYWRjYXN0ICgmZGF0 YS0+Y29uZCk7Ci0gICBnX211dGV4X3VubG9jayAoJmRhdGEtPmxvY2spOwotIAotKyAgZ19vYmpl Y3RfdW5yZWYgKHRhc2spOwotKwotICAgcmV0dXJuIEdfU09VUkNFX1JFTU9WRTsKLSB9Ci0gCi0r c3RhdGljIHZvaWQKLSt3ZWFrX3JlZl9jbGVhcl9hbmRfZnJlZSAoR1dlYWtSZWYgKndlYWtfcmVm KQotK3sKLSsgIGdfd2Vha19yZWZfY2xlYXIgKHdlYWtfcmVmKTsKLSsgIGdfZnJlZSAod2Vha19y ZWYpOwotK30KLSsKLSBzdGF0aWMgdm9pZAotIHJ1bl90YXNrX2luX3RocmVhZF9wb29sX2FzeW5j IChHVGhyZWFkZWRSZXNvbHZlciAqc2VsZiwKLSAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgR1Rhc2sgICAgICAgICAgICAgKnRhc2spCi1AQCAtMTQ5MCwxNyArMTUxNSwyMyBAQCBydW5f dGFza19pbl90aHJlYWRfcG9vbF9hc3luYyAoR1RocmVhZGVkUmVzb2x2ZXIgKnNlbGYsCi0gCi0g ICBpZiAodGltZW91dF9tcyAhPSAwKQotICAgICB7Ci0rICAgICAgR1dlYWtSZWYgKndlYWtfdGFz ayA9IGdfbmV3MCAoR1dlYWtSZWYsIDEpOwotKyAgICAgIGdfd2Vha19yZWZfc2V0ICh3ZWFrX3Rh c2ssIHRhc2spOwotKwotICAgICAgIGRhdGEtPnRpbWVvdXRfc291cmNlID0gZ190aW1lb3V0X3Nv dXJjZV9uZXcgKHRpbWVvdXRfbXMpOwotICAgICAgIGdfc291cmNlX3NldF9zdGF0aWNfbmFtZSAo ZGF0YS0+dGltZW91dF9zb3VyY2UsICJbZ2lvXSB0aHJlYWRlZCByZXNvbHZlciB0aW1lb3V0Iik7 Ci0tICAgICAgZ19zb3VyY2Vfc2V0X2NhbGxiYWNrIChkYXRhLT50aW1lb3V0X3NvdXJjZSwgR19T T1VSQ0VfRlVOQyAodGltZW91dF9jYiksIHRhc2ssIE5VTEwpOwotKyAgICAgIGdfc291cmNlX3Nl dF9jYWxsYmFjayAoZGF0YS0+dGltZW91dF9zb3VyY2UsIEdfU09VUkNFX0ZVTkMgKHRpbWVvdXRf Y2IpLCBnX3N0ZWFsX3BvaW50ZXIgKCZ3ZWFrX3Rhc2spLCAoR0Rlc3Ryb3lOb3RpZnkpIHdlYWtf cmVmX2NsZWFyX2FuZF9mcmVlKTsKLSAgICAgICBnX3NvdXJjZV9hdHRhY2ggKGRhdGEtPnRpbWVv dXRfc291cmNlLCBHTElCX1BSSVZBVEVfQ0FMTCAoZ19nZXRfd29ya2VyX2NvbnRleHQpICgpKTsK LSAgICAgfQotIAotICAgaWYgKGNhbmNlbGxhYmxlICE9IE5VTEwpCi0gICAgIHsKLSsgICAgICBH V2Vha1JlZiAqd2Vha190YXNrID0gZ19uZXcwIChHV2Vha1JlZiwgMSk7Ci0rICAgICAgZ193ZWFr X3JlZl9zZXQgKHdlYWtfdGFzaywgdGFzayk7Ci0rCi0gICAgICAgZGF0YS0+Y2FuY2VsbGFibGVf c291cmNlID0gZ19jYW5jZWxsYWJsZV9zb3VyY2VfbmV3IChjYW5jZWxsYWJsZSk7Ci0gICAgICAg Z19zb3VyY2Vfc2V0X3N0YXRpY19uYW1lIChkYXRhLT5jYW5jZWxsYWJsZV9zb3VyY2UsICJbZ2lv XSB0aHJlYWRlZCByZXNvbHZlciBjYW5jZWxsYWJsZSIpOwotLSAgICAgIGdfc291cmNlX3NldF9j YWxsYmFjayAoZGF0YS0+Y2FuY2VsbGFibGVfc291cmNlLCBHX1NPVVJDRV9GVU5DIChjYW5jZWxs ZWRfY2IpLCB0YXNrLCBOVUxMKTsKLSsgICAgICBnX3NvdXJjZV9zZXRfY2FsbGJhY2sgKGRhdGEt PmNhbmNlbGxhYmxlX3NvdXJjZSwgR19TT1VSQ0VfRlVOQyAoY2FuY2VsbGVkX2NiKSwgZ19zdGVh bF9wb2ludGVyICgmd2Vha190YXNrKSwgKEdEZXN0cm95Tm90aWZ5KSB3ZWFrX3JlZl9jbGVhcl9h bmRfZnJlZSk7Ci0gICAgICAgZ19zb3VyY2VfYXR0YWNoIChkYXRhLT5jYW5jZWxsYWJsZV9zb3Vy Y2UsIEdMSUJfUFJJVkFURV9DQUxMIChnX2dldF93b3JrZXJfY29udGV4dCkgKCkpOwotICAgICB9 Ci0gCi0tLSAKLUdpdExhYgotCgpkaWZmIC0tZ2l0IGEvc291cmNlcyBiL3NvdXJjZXMKaW5kZXgg MWIwN2RlZC4uY2FlODRmYyAxMDA2NDQKLS0tIGEvc291cmNlcworKysgYi9zb3VyY2VzCkBAIC0x ICsxIEBACi1TSEE1MTIgKGdsaWItMi43OC4wLnRhci54eikgPSAzZDA2ODkwMDAyZjRiMTNmODMx YzgzZmJiNzBjZmNlNTI5Zjk3NTBlMzA4ODg2MTllNGQ2Mjc3MTE2YmUxNWQxMDYzNzlhMDMxNDM0 MTJjZjRiMmEyODljMGNiZGJiYzI5OWVjZjE3Mjg0ZmJmZmMwNmM3OTFlY2Y3NTU2Yzc2NQorU0hB NTEyIChnbGliLTIuNzguMS50YXIueHopID0gYWE5ZWQ5MTk1OTUxYjAwYWM4MjIxZTk1OGVhMzM3 ZmJkYTgyNjIxYTg2MmVmOGYyOWRjMmVhMzk2YTYyNTNjZTUxYzJhMGE0OThkZmE0ZTEyNjQyZjE4 MzZmODVmOTU2NGYwOTk5MTk3OWFlODVjNWVkNDM2ODM1NWQ4NTczNzYK