Commit Graph

1 Commits

Author SHA1 Message Date
RHEL Packaging Agent
27fb374f16 Fix CVE-2026-58011: range validation in g_date_time_add_full()
Backport upstream fix from GNOME/glib MR #5131 for
CVE-2026-58011. The patch adds missing range validation to
g_date_time_add_full() to prevent creation of invalid
GDateTime objects outside the 0001-01-01 to 9999-12-31
range. Also refactors magic day-count constants into named
defines for clarity.

CVE: CVE-2026-58011
Upstream patches:
 - https://gitlab.gnome.org/GNOME/glib/-/merge_requests/5131.patch
Resolves: RHEL-212196

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-08-19 16:26:07 +00:00