Commit Graph

1 Commits

Author SHA1 Message Date
RHEL Packaging Agent
ebe9cedbc9 Fix CVE-2026-58011: range validation in g_date_time_add_full()
Backport upstream fix for CVE-2026-58011 from GNOME/glib MR !5131
to glib2 2.56.4. The patch adds range validation in
g_date_time_add_full() to prevent creation of invalid GDateTime
objects with out-of-range day values, returning NULL instead.
Includes five test cases verifying the fix.

CVE: CVE-2026-58011
Upstream patches:
 - https://gitlab.gnome.org/GNOME/glib/-/merge_requests/5131.patch
Resolves: RHEL-212187

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-07-30 12:42:22 +00:00