Backport fix for CVE-2026-58010 from upstream commit
8338414f6560. The patch fixes an off-by-one error in
gvs_tuple_is_normal() in glib/gvariant-serialiser.c, changing
`offset > value.size` to `offset >= value.size`, preventing a
single byte out-of-bounds read when checking a GVariant for
normal form. Includes a regression test adapted for the
glib2 2.56.4 API.
CVE: CVE-2026-58010
Upstream patches:
- 8338414f65.patch
Resolves: RHEL-212168
This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.
Assisted-by: Ymir
