Backport upstream commit c9da977c178 to fix CVE-2026-58016 in
glib2. The fix corrects a broken logical condition in the D-Bus
introspection XML parser (gio/gdbusintrospection.c) that failed
to properly validate `<node>` element nesting. The original
negated tautological OR expression always evaluated to false;
the fix replaces it with the correct check. Includes new unit
tests for invalid XML parsing.
CVE: CVE-2026-58016
Upstream patches:
- c9da977c17.patch
Resolves: RHEL-190622
This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.
Assisted-by: Ymir
Backport a patch that prevents sending an invalid D-Bus message with a serial of zero when the message serial counter overflows. Instead of wrapping to 0, the serial now wraps to 1, avoiding the issue.
Upstream fix: b94b44407a.patch
Resolves: RHEL-114086
This commit was backported by Jotnar, a Red Hat Enterprise Linux software maintenance AI agent.
Assisted-by: Jotnar
