From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Michael Kuhn To: git-commits@fedoraproject.org Subject: [rpms/glib2] cve-2026-58016-f44: Unbreak setting special directories to $HOME Date: Tue, 11 Aug 2026 10:38:34 GMT Message-ID: <178644471486.1.6949487499005368142.rpms-glib2-82ac7aba87d3@fedoraproject.org> List-ID: X-Git-Repo: rpms/glib2 X-Git-Branch: cve-2026-58016-f44 X-Git-Rev: 82ac7aba87d3a07be2e9dd2ca8ca429c63220b2c ICAgICAgICAgICAgQSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KCiAgICAgICAgICAgIFJl cG8gICA6IHJwbXMvZ2xpYjIKICAgICAgICAgICAgQnJhbmNoIDogY3ZlLTIwMjYtNTgwMTYtZjQ0 CiAgICAgICAgICAgIENvbW1pdCA6IDgyYWM3YWJhODdkM2EwN2JlMmU5ZGQyY2E4Y2E0MjljNjMy MjBiMmMKICAgICAgICAgICAgQXV0aG9yIDogTWljaGFlbCBLdWhuIDxzdXJhaWFAZmVkb3JhcHJv amVjdC5vcmc+CiAgICAgICAgICAgIERhdGUgICA6IDIwMjUtMTEtMDVUMTQ6MDY6MjUrMDE6MDAK ICAgICAgICAgICAgU3RhdHMgIDogKzczLy0wIGluIDIgZmlsZShzKQogICAgICAgICAgICBVUkwg ICAgOiBodHRwczovL3NyYy5mZWRvcmFwcm9qZWN0Lm9yZy9ycG1zL2dsaWIyL2MvODJhYzdhYmE4 N2QzYTA3YmUyZTlkZDJjYThjYTQyOWM2MzIyMGIyYz9icmFuY2g9Y3ZlLTIwMjYtNTgwMTYtZjQ0 CgogICAgICAgICAgICBMb2c6CiAgICAgICAgICAgIFVuYnJlYWsgc2V0dGluZyBzcGVjaWFsIGRp cmVjdG9yaWVzIHRvICRIT01FCgpUaGlzIGlzIGEgcmVncmVzc2lvbiBpbiBHTGliIDIuODYuMS4K Cmh0dHBzOi8vc3JjLmZlZG9yYXByb2plY3Qub3JnL3JwbXMvZ2xpYjIvcHVsbC1yZXF1ZXN0LzIz CgotLS0KZGlmZiAtLWdpdCBhL2dsaWIyLnNwZWMgYi9nbGliMi5zcGVjCmluZGV4IGJkMjI1Mjgu LjMzY2E0ODcgMTAwNjQ0Ci0tLSBhL2dsaWIyLnNwZWMKKysrIGIvZ2xpYjIuc3BlYwpAQCAtMTUs NiArMTUsMTAgQEAgUGF0Y2g6ICAgICAgICAgIGdudXRscy1obWFjLnBhdGNoCiAjIGh0dHBzOi8v YnVnemlsbGEucmVkaGF0LmNvbS9zaG93X2J1Zy5jZ2k/aWQ9MjE5MjIwNAogUGF0Y2g6ICAgICAg ICAgIGRlZmF1bHQtdGVybWluYWwucGF0Y2gKIAorIyBodHRwczovL2dpdGxhYi5nbm9tZS5vcmcv R05PTUUvZ2xpYi8tL2lzc3Vlcy8zODExCisjIGh0dHBzOi8vZ2l0bGFiLmdub21lLm9yZy9HTk9N RS9uYXV0aWx1cy8tL2lzc3Vlcy80MDE0CitQYXRjaDogICAgICAgICAgc3RyaXAtdHJhaWxpbmct c2xhc2hlcy5wYXRjaAorCiBCdWlsZFJlcXVpcmVzOiAgZ2NjCiBCdWlsZFJlcXVpcmVzOiAgZ2Nj LWMrKwogQnVpbGRSZXF1aXJlczogIGdldHRleHQKCmRpZmYgLS1naXQgYS9zdHJpcC10cmFpbGlu Zy1zbGFzaGVzLnBhdGNoIGIvc3RyaXAtdHJhaWxpbmctc2xhc2hlcy5wYXRjaApuZXcgZmlsZSBt b2RlIDEwMDY0NAppbmRleCAwMDAwMDAwLi45Zjk2OGM5Ci0tLSAvZGV2L251bGwKKysrIGIvc3Ry aXAtdHJhaWxpbmctc2xhc2hlcy5wYXRjaApAQCAtMCwwICsxLDY5IEBACitGcm9tIGJiMjNhMGU4 Y2IyNDI2YzFiNTJhMGQzZDg5YmQ5N2NjMTc5MTk5NjEgTW9uIFNlcCAxNyAwMDowMDowMCAyMDAx CitGcm9tOiBUb2JpYXMgU3RvZWNrbWFubiA8dG9iaWFzQHN0b2Vja21hbm4ub3JnPgorRGF0ZTog RnJpLCAyNCBPY3QgMjAyNSAxMzozNDowMyArMDIwMAorU3ViamVjdDogW1BBVENIXSBndXRpbHM6 IFN0cmlwIGFsbCB0cmFpbGluZyBzbGFzaGVzCisKK1RoZSBjb2RlIHN0cmlwcGVkIGFsbCBidXQg dGhlIGZpcnN0IHRyYWlsaW5nIHNsYXNoIGluIG9yZGVyIHRvIGhhbmRsZQordGhlIGFic29sdXRl IHJvb3QgcGF0aCAiLyIuIFRoaXMgYnJlYWtzIHRoZSByZW1vdmFsIG9mIHRyYWlsaW5nIHNsYXNo ZXMKK2ZvciBwYXRocyBzdGFydGluZyB3aXRoICRIT01FLCB0aG91Z2guCisKK0ZpeCB0aGUgbG9n aWMgdG8gcmVtb3ZlIGFsbCB0cmFpbGluZyBzbGFzaGVzIGlmICRIT01FIGlzIGVuY291bnRlcmVk LgorCitDbG9zZXMgIzM4MTEKKy0tLQorIGdsaWIvZ3V0aWxzcHJpdmF0ZS5jIHwgNiArKysrLS0K KyBnbGliL3Rlc3RzL3V0aWxzLmMgICB8IDcgKysrKysrLQorIDIgZmlsZXMgY2hhbmdlZCwgMTAg aW5zZXJ0aW9ucygrKSwgMyBkZWxldGlvbnMoLSkKKworZGlmZiAtLWdpdCBhL2dsaWIvZ3V0aWxz cHJpdmF0ZS5jIGIvZ2xpYi9ndXRpbHNwcml2YXRlLmMKK2luZGV4IDA4M2Y4OGMyY2NjMi4uM2I5 MjA2YzQ1Y2U5IDEwMDY0NAorLS0tIGEvZ2xpYi9ndXRpbHNwcml2YXRlLmMKKysrKyBiL2dsaWIv Z3V0aWxzcHJpdmF0ZS5jCitAQCAtMjcsNiArMjcsNyBAQCBsb2FkX3VzZXJfc3BlY2lhbF9kaXJz X2Zyb21fc3RyaW5nIChjb25zdCBnY2hhciAqc3RyaW5nLCBjb25zdCBnY2hhciAqaG9tZV9kaXIs CisgeworICAgZ2NoYXIgKipsaW5lczsKKyAgIGdpbnQgbl9saW5lcywgaTsKKysgIHNpemVfdCBt aW5fbGVuOworIAorICAgbGluZXMgPSBnX3N0cnNwbGl0IChzdHJpbmcsICJcbiIsIC0xKTsKKyAg IG5fbGluZXMgPSBnX3N0cnZfbGVuZ3RoIChsaW5lcyk7CitAQCAtMTIyLDggKzEyMyw5IEBAIGxv YWRfdXNlcl9zcGVjaWFsX2RpcnNfZnJvbV9zdHJpbmcgKGNvbnN0IGdjaGFyICpzdHJpbmcsIGNv bnN0IGdjaGFyICpob21lX2RpciwKKyAKKyAgICAgICBkID0gcDsKKyAKKy0gICAgICAvKiByZW1v dmUgdHJhaWxpbmcgc2xhc2hlcyAqLworLSAgICAgIGZvciAobGVuID0gc3RybGVuIChkKTsgbGVu ID4gMSAmJiBkW2xlbiAtIDFdID09ICcvJzsgbGVuLS0pCisrICAgICAgLyogcmVtb3ZlIHRyYWls aW5nIHNsYXNoZXMsIGJ1dCBrZWVwIGZpcnN0IHNsYXNoIGluIGFic29sdXRlIHBhdGggKi8KKysg ICAgICBtaW5fbGVuID0gaXNfcmVsYXRpdmUgPyAwIDogMTsKKysgICAgICBmb3IgKGxlbiA9IHN0 cmxlbiAoZCk7IGxlbiA+IG1pbl9sZW4gJiYgZFtsZW4gLSAxXSA9PSAnLyc7IGxlbi0tKQorICAg ICAgICAgZFtsZW4gLSAxXSA9IDA7CisgCisgICAgICAgLyogRHVwbGljYXRlcyBvdmVycmlkZSB0 aGUgcHJldmlvdXMgdmFsdWUuIFRoaXMgaXMgbm90IGV4cGxpY2l0IGluIHRoZQorZGlmZiAtLWdp dCBhL2dsaWIvdGVzdHMvdXRpbHMuYyBiL2dsaWIvdGVzdHMvdXRpbHMuYworaW5kZXggMmQwYjJl ZDcwODc2Li5lODg2ODk3YmEwOTUgMTAwNjQ0CistLS0gYS9nbGliL3Rlc3RzL3V0aWxzLmMKKysr KyBiL2dsaWIvdGVzdHMvdXRpbHMuYworQEAgLTg4Myw3ICs4ODMsOSBAQCB0ZXN0X3VzZXJfc3Bl Y2lhbF9kaXJzX2xvYWRfdW5sb2NrZWQgKHZvaWQpCisgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIlhER19ET1dOTE9BRF9ESVIgPSBcIiRIT01FL0Rvd25sb2Fkc1wiXG4iCisg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIlhER19NVVNJQ19ESVIgPSBcIi8v L1wiXG4iCisgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIlhER19QSUNUVVJF U19ESVIgPSBcIiRIT01FL1BpY3R1cmVzXCJcbiIKKy0gICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAiWERHX1BJQ1RVUkVTX0RJUiA9IFwiL1wiXG5YREdfRE9XTkxPQURfRElSID0g XCIvZGV2L251bGxcbiIpOworKyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICJY REdfUElDVFVSRVNfRElSID0gXCIvXCJcbiIKKysgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAiWERHX1BVQkxJQ1NIQVJFX0RJUiA9IFwiJEhPTUUvXCJcbiIKKysgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAiWERHX0RPV05MT0FEX0RJUiA9IFwiL2Rldi9udWxs XG4iKTsKKyAKKyAgICAgICBnX3JlbG9hZF91c2VyX3NwZWNpYWxfZGlyc19jYWNoZSAoKTsKKyAK K0BAIC05MDMsNiArOTA1LDkgQEAgdGVzdF91c2VyX3NwZWNpYWxfZGlyc19sb2FkX3VubG9ja2Vk ICh2b2lkKQorIAorICAgICAgIGRpciA9IGdfZ2V0X3VzZXJfc3BlY2lhbF9kaXIgKEdfVVNFUl9E SVJFQ1RPUllfUElDVFVSRVMpOworICAgICAgIGdfYXNzZXJ0X2NtcHN0ciAoZGlyLCA9PSwgIi8i KTsKKysKKysgICAgICBkaXIgPSBnX2dldF91c2VyX3NwZWNpYWxfZGlyIChHX1VTRVJfRElSRUNU T1JZX1BVQkxJQ19TSEFSRSk7CisrICAgICAgZ19hc3NlcnRfY21wc3RyIChkaXIsID09LCBnX2dl dF9ob21lX2RpciAoKSk7CisgICAgIH0KKyAgIGVsc2UKKyAgICAgeworLS0gCisyLjUxLjEKKwo=