rpms/glib2
7
0
Fork 0
Code Issues Pull Requests Releases Activity
A library of handy utility functions
762 Commits 9 Branches 85 Tags 1.8 MiB
Diff 100%
4acf5b6da2
Go to file
RHEL Packaging Agent 4acf5b6da2 Fix CVE-2026-58014: heap under-read in g_key_file_get_locale_string_list 
Backport upstream commit 5f6d86b50bebf5458ab1becf4de2c5e5f066122b
to fix CVE-2026-58014, a one-byte heap under-read in
g_key_file_get_locale_string_list() when called on a key
with an empty value. The fix adds a `len > 0` guard check
before accessing the buffer. The patch also includes
fuzzing and unit test improvements.

CVE: CVE-2026-58014
Upstream patches:
 - 5f6d86b50b.patch
Resolves: RHEL-190597

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-08-20 13:03:22 +00:00
.fmf metadata preparation for RHIVOS 2024-10-30 16:28:23 +00:00
.gitignore fix merge 2012-04-18 17:36:51 +01:00
changelog Adopt rpmautospec 2021-07-12 15:42:05 -05:00
CVE-2024-52533.patch Add patches for CVE-2024-52533 and CVE-2025-4373 2025-07-10 16:23:34 -05:00
CVE-2025-4373.patch Add patches for CVE-2024-52533 and CVE-2025-4373 2025-07-10 16:23:34 -05:00
CVE-2025-13601.patch Add patch for CVE-2025-13601 and patches for GUnixMount issues 2026-01-19 15:09:19 -06:00
CVE-2025-14087.patch Fix CVE-2025-14087 and CVE-2025-14512 2026-05-07 14:23:50 -05:00
CVE-2025-14512.patch Fix CVE-2025-14087 and CVE-2025-14512 2026-05-07 14:23:50 -05:00
CVE-2026-58013.patch Fix CVE-2026-58013: GIOChannel memcmp buffer over-read 2026-08-20 13:00:19 +00:00
CVE-2026-58014.patch Fix CVE-2026-58014: heap under-read in g_key_file_get_locale_string_list 2026-08-20 13:03:22 +00:00
CVE-2026-58016.patch Fix CVE-2026-58016: XML parser state handling for node nesting 2026-07-24 13:03:51 +00:00
default-terminal.patch Add patch to allow launching terminal applications with Ptyxis 2024-10-01 10:26:38 -05:00
gating.yaml gating enabled 2024-04-09 08:56:36 +00:00
gdatetime-test.patch Add patch to fix test failure with newer tzdata 2025-03-21 16:39:28 -05:00
gdbusconnection-serial-number-overflow.patch Add patch for CVE-2025-13601 and patches for GUnixMount issues 2026-01-19 15:09:19 -06:00
gdbusnameowning-releasename-warning.patch gdbusnameowning: Downgrade ReleaseName warning on closed connection to debug 2026-07-14 17:31:09 +02:00
glib2.spec Fix CVE-2026-58014: heap under-read in g_key_file_get_locale_string_list 2026-08-20 13:03:22 +00:00
gnutls-hmac.patch Remove FIPS mode test 2024-07-10 11:17:52 -05:00
gunixmount-improvements.patch Add patch for CVE-2025-13601 and patches for GUnixMount issues 2026-01-19 15:09:19 -06:00
main.fmf Sync the content of main.fmf from rhel9 to rhel10 2025-09-16 10:23:05 +02:00
rpminspect.yaml Update annocheck policy 2021-12-06 13:45:12 -06:00
sources Update to 2.80.4 2024-07-10 11:28:32 -05:00
startup-notify-without-gappinfo.patch Add patch for CVE-2025-13601 and patches for GUnixMount issues 2026-01-19 15:09:19 -06:00
x-gvfs-trash.patch Add patch to fix test failure with newer tzdata 2025-03-21 16:39:28 -05:00