Backport upstream fix for CVE-2026-58011 from MR !5131.
The patch includes two cherry-picked commits: a preparatory
refactoring introducing MIN_DAYS/MAX_DAYS constants, and the
actual fix adding bounds validation to g_date_time_add_full()
to prevent creation of invalid GDateTime objects. Test cases
for out-of-range inputs are also included.
CVE: CVE-2026-58011
Upstream patches:
- https://gitlab.gnome.org/GNOME/glib/-/merge_requests/5131.patch
Resolves: RHEL-212183
This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.
Assisted-by: Ymir
