Backport upstream commit c9da977c178 to fix CVE-2026-58016 in
glib2. The fix corrects a broken logical condition in the D-Bus
introspection XML parser (gio/gdbusintrospection.c) that failed
to properly validate `<node>` element nesting. The original
negated tautological OR expression always evaluated to false;
the fix replaces it with the correct check. Includes new unit
tests for invalid XML parsing.
CVE: CVE-2026-58016
Upstream patches:
- c9da977c17.patch
Resolves: RHEL-190622
This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.
Assisted-by: Ymir
