rpms/mingw-glib2
7
0
Fork 0
Code Issues Pull Requests Releases Activity
MinGW Windows GLib2 library
12 Commits 7 Branches 26 Tags 449 KiB
Diff 100%
c8s
Go to file
RHEL Packaging Agent 99e6f79ece Fix CVE-2026-58010: off-by-one error in gvs_tuple_is_normal() 
Backport upstream fix for CVE-2026-58010 from GNOME/glib MR !5129
to mingw-glib2 2.70.1. The fix corrects an off-by-one error in
gvs_tuple_is_normal() in glib/gvariant-serialiser.c that allowed
a single byte out-of-bounds read when checking a GVariant for
normal form. A regression test is included.

CVE: CVE-2026-58010
Upstream patches:
 - https://gitlab.gnome.org/GNOME/glib/-/merge_requests/5129.patch
Resolves: RHEL-212164

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-07-22 16:24:15 +00:00
.gitignore Import rpm: c8s 2023-02-27 14:24:00 -05:00
0001-Use-CreateFile-on-Win32-to-make-sure-g_unlink-always.patch Auto sync2gitlab import of mingw-glib2-2.70.1-1.el8_5.src.rpm 2022-05-26 11:33:06 -04:00
gating.yaml Bring gating.yaml over from Brew dist-git 2023-03-10 11:04:29 -08:00
glib-prefer-constructors-over-DllMain.patch Auto sync2gitlab import of mingw-glib2-2.70.1-1.el8_5.src.rpm 2022-05-26 11:33:06 -04:00
mingw-glib2-2.70.1-CVE-2025-14087.patch Fix CVE-2025-14087: integer overflow in GVariant parser 2026-07-22 16:17:37 +00:00
mingw-glib2-2.70.1-CVE-2026-58010.patch Fix CVE-2026-58010: off-by-one error in gvs_tuple_is_normal() 2026-07-22 16:24:15 +00:00
mingw-glib2-2.70.1-CVE-2026-58011.patch Fix CVE-2026-58011 in mingw-glib2: g_date_time_add_full() range validation 2026-07-22 16:23:02 +00:00
mingw-glib2-2.70.1-CVE-2026-58012.patch Fix CVE-2026-58012: buffer overflow in gregex substitutions 2026-07-22 16:20:18 +00:00
mingw-glib2-2.70.1-CVE-2026-58013.patch Fix CVE-2026-58013: memcmp buffer over-read in giochannel 2026-07-22 16:21:43 +00:00
mingw-glib2-2.70.1-CVE-2026-58014.patch Fix CVE-2026-58014: one-byte heap under-read in mingw-glib2 2026-07-22 16:17:37 +00:00
mingw-glib2-2.70.1-CVE-2026-58015.patch Fix CVE-2026-58015: D-Bus cookie context path traversal 2026-07-22 16:17:37 +00:00
mingw-glib2-2.70.1-CVE-2026-58016.patch Fix CVE-2026-58016: D-Bus introspection XML node nesting check 2026-07-22 16:17:37 +00:00
mingw-glib2.spec Fix CVE-2026-58010: off-by-one error in gvs_tuple_is_normal() 2026-07-22 16:24:15 +00:00
sources Auto sync2gitlab import of mingw-glib2-2.70.1-1.el8_5.src.rpm 2022-05-26 11:33:06 -04:00