A library of handy utility functions
Go to file
RHEL Packaging Agent 5900a80b66 Fix CVE-2026-58013: GIOChannel memcmp buffer over-read
Backport upstream fix for CVE-2026-58013 from MR !5170. The fix
prevents a memcmp() from reading past the end of the GString
buffer when using a multi-byte line terminator in GIOChannel.
The patch also includes a unit test for the fix. An additional
#include <stdint.h> was added to the test file to ensure
compatibility with glib 2.80.4 headers.

CVE: CVE-2026-58013
Upstream patches:
 - https://gitlab.gnome.org/GNOME/glib/-/merge_requests/5170.patch
Resolves: RHEL-212239

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-08-20 13:00:19 +00:00
.fmf metadata preparation for RHIVOS 2024-10-30 16:28:23 +00:00
.gitignore fix merge 2012-04-18 17:36:51 +01:00
changelog Adopt rpmautospec 2021-07-12 15:42:05 -05:00
CVE-2024-52533.patch Add patches for CVE-2024-52533 and CVE-2025-4373 2025-07-10 16:23:34 -05:00
CVE-2025-4373.patch Add patches for CVE-2024-52533 and CVE-2025-4373 2025-07-10 16:23:34 -05:00
CVE-2025-13601.patch Add patch for CVE-2025-13601 and patches for GUnixMount issues 2026-01-19 15:09:19 -06:00
CVE-2025-14087.patch Fix CVE-2025-14087 and CVE-2025-14512 2026-05-07 14:23:50 -05:00
CVE-2025-14512.patch Fix CVE-2025-14087 and CVE-2025-14512 2026-05-07 14:23:50 -05:00
CVE-2026-58013.patch Fix CVE-2026-58013: GIOChannel memcmp buffer over-read 2026-08-20 13:00:19 +00:00
CVE-2026-58016.patch Fix CVE-2026-58016: XML parser state handling for node nesting 2026-07-24 13:03:51 +00:00
default-terminal.patch Add patch to allow launching terminal applications with Ptyxis 2024-10-01 10:26:38 -05:00
gating.yaml gating enabled 2024-04-09 08:56:36 +00:00
gdatetime-test.patch Add patch to fix test failure with newer tzdata 2025-03-21 16:39:28 -05:00
gdbusconnection-serial-number-overflow.patch Add patch for CVE-2025-13601 and patches for GUnixMount issues 2026-01-19 15:09:19 -06:00
gdbusnameowning-releasename-warning.patch gdbusnameowning: Downgrade ReleaseName warning on closed connection to debug 2026-07-14 17:31:09 +02:00
glib2.spec Fix CVE-2026-58013: GIOChannel memcmp buffer over-read 2026-08-20 13:00:19 +00:00
gnutls-hmac.patch Remove FIPS mode test 2024-07-10 11:17:52 -05:00
gunixmount-improvements.patch Add patch for CVE-2025-13601 and patches for GUnixMount issues 2026-01-19 15:09:19 -06:00
main.fmf Sync the content of main.fmf from rhel9 to rhel10 2025-09-16 10:23:05 +02:00
rpminspect.yaml Update annocheck policy 2021-12-06 13:45:12 -06:00
sources Update to 2.80.4 2024-07-10 11:28:32 -05:00
startup-notify-without-gappinfo.patch Add patch for CVE-2025-13601 and patches for GUnixMount issues 2026-01-19 15:09:19 -06:00
x-gvfs-trash.patch Add patch to fix test failure with newer tzdata 2025-03-21 16:39:28 -05:00