Add backport patch for CVE-2026-58012 which fixes case changing
substitutions when using G_REGEX_RAW mode. Without this fix,
g_regex_replace() could perform out-of-bounds reads when
processing non-UTF-8 matched data with case change escape
sequences (e.g. \U\0) because it incorrectly assumed UTF-8
encoding. The fix adds raw-mode-aware case conversion that uses
ASCII operations instead of UTF-8 character functions.
CVE: CVE-2026-58012
Upstream patches:
- https://gitlab.gnome.org/GNOME/glib/-/merge_requests/5132.patch
Resolves: RHEL-212218
This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.
Assisted-by: Ymir
