rpms/glib2
7
0
Fork 0
Code Issues Pull Requests Releases Activity
A library of handy utility functions
767 Commits 9 Branches 85 Tags 1.8 MiB
Diff 100%
d37e0dee7b
Go to file
RHEL Packaging Agent d37e0dee7b Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context 
Backport upstream commit 8b72ad09c874ddff to fix
CVE-2026-58015, a path traversal vulnerability in D-Bus
SHA-1 authentication. The patch adds validation of the
cookie context sent by the server, preventing exfiltration
of SHA-1 hashed copies of arbitrary files from the client's
filesystem. The upstream patch was adjusted to use guint8
instead of uint8_t for compatibility with the existing
GLib headers.

CVE: CVE-2026-58015
Upstream patches:
 - 8b72ad09c8.patch
Resolves: RHEL-212242

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-08-20 21:14:51 +00:00
.fmf metadata preparation for RHIVOS 2024-10-30 16:28:23 +00:00
.gitignore fix merge 2012-04-18 17:36:51 +01:00
changelog Adopt rpmautospec 2021-07-12 15:42:05 -05:00
CVE-2024-52533.patch Add patches for CVE-2024-52533 and CVE-2025-4373 2025-07-10 16:23:34 -05:00
CVE-2025-4373.patch Add patches for CVE-2024-52533 and CVE-2025-4373 2025-07-10 16:23:34 -05:00
CVE-2025-13601.patch Add patch for CVE-2025-13601 and patches for GUnixMount issues 2026-01-19 15:09:19 -06:00
CVE-2025-14087.patch Fix CVE-2025-14087 and CVE-2025-14512 2026-05-07 14:23:50 -05:00
CVE-2025-14512.patch Fix CVE-2025-14087 and CVE-2025-14512 2026-05-07 14:23:50 -05:00
CVE-2026-15588.patch Fix CVE-2026-15588: limit D-Bus auth line read length in glib2 2026-08-20 21:10:08 +00:00
CVE-2026-58010.patch Fix CVE-2026-58010: off-by-one in GVariant tuple offset checking 2026-08-20 21:10:08 +00:00
CVE-2026-58011.patch Fix CVE-2026-58011: range validation in g_date_time_add_full() 2026-08-20 21:10:08 +00:00
CVE-2026-58012.patch Add patch for CVE-2026-58012 to glib2 2026-08-20 21:13:28 +00:00
CVE-2026-58013.patch Fix CVE-2026-58013: GIOChannel memcmp buffer over-read 2026-08-20 13:00:19 +00:00
CVE-2026-58014.patch Fix CVE-2026-58014: heap under-read in g_key_file_get_locale_string_list 2026-08-20 13:03:22 +00:00
CVE-2026-58015.patch Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context 2026-08-20 21:14:51 +00:00
CVE-2026-58016.patch Fix CVE-2026-58016: XML parser state handling for node nesting 2026-07-24 13:03:51 +00:00
default-terminal.patch Add patch to allow launching terminal applications with Ptyxis 2024-10-01 10:26:38 -05:00
gating.yaml gating enabled 2024-04-09 08:56:36 +00:00
gdatetime-test.patch Add patch to fix test failure with newer tzdata 2025-03-21 16:39:28 -05:00
gdbusconnection-serial-number-overflow.patch Add patch for CVE-2025-13601 and patches for GUnixMount issues 2026-01-19 15:09:19 -06:00
gdbusnameowning-releasename-warning.patch gdbusnameowning: Downgrade ReleaseName warning on closed connection to debug 2026-07-14 17:31:09 +02:00
glib2.spec Fix CVE-2026-58015: validate D-Bus DBUS_COOKIE_SHA1 cookie context 2026-08-20 21:14:51 +00:00
gnutls-hmac.patch Remove FIPS mode test 2024-07-10 11:17:52 -05:00
gunixmount-improvements.patch Add patch for CVE-2025-13601 and patches for GUnixMount issues 2026-01-19 15:09:19 -06:00
main.fmf Sync the content of main.fmf from rhel9 to rhel10 2025-09-16 10:23:05 +02:00
rpminspect.yaml Update annocheck policy 2021-12-06 13:45:12 -06:00
sources Update to 2.80.4 2024-07-10 11:28:32 -05:00
startup-notify-without-gappinfo.patch Add patch for CVE-2025-13601 and patches for GUnixMount issues 2026-01-19 15:09:19 -06:00
x-gvfs-trash.patch Add patch to fix test failure with newer tzdata 2025-03-21 16:39:28 -05:00