From 9898a5a65258129b7ad44536af0e7159fac2926e Mon Sep 17 00:00:00 2001
From: Konstantin Kostiuk <kkostiuk@redhat.com>
Date: Mon, 25 Nov 2024 16:04:06 +0200
Subject: [PATCH] Bump glib to 2.82.2

Resolve: RHEL-35772 - CVE-2024-34397
Resolve: RHEL-67083 - CVE-2024-52533

Signed-off-by: Konstantin Kostiuk <kkostiuk@redhat.com>
---
 mingw-glib2.spec | 17 +++++++++++++++--
 sources          |  2 +-
 2 files changed, 16 insertions(+), 3 deletions(-)

diff --git a/mingw-glib2.spec b/mingw-glib2.spec
index abc7d59..8d1f6bb 100644
--- a/mingw-glib2.spec
+++ b/mingw-glib2.spec
@@ -1,8 +1,8 @@
 %{?mingw_package_header}
 
 Name:           mingw-glib2
-Version:        2.79.1
-Release:        4%{?dist}
+Version:        2.82.2
+Release:        1%{?dist}
 Summary:        MinGW Windows GLib2 library
 
 License:        LGPL-2.0-or-later
@@ -179,6 +179,9 @@ find %{buildroot} -name "*.la" -delete
 %files -n mingw32-glib2 -f mingw32-glib20.lang
 %license COPYING
 %{mingw32_bindir}/gdbus.exe
+%{mingw32_bindir}/gi-compile-repository.exe
+%{mingw32_bindir}/gi-decompile-typelib.exe
+%{mingw32_bindir}/gi-inspect-typelib.exe
 %{mingw32_bindir}/gio.exe
 %{mingw32_bindir}/gio-querymodules.exe
 %{mingw32_bindir}/glib-compile-resources.exe
@@ -224,6 +227,7 @@ find %{buildroot} -name "*.la" -delete
 
 %files -n mingw32-glib2-static
 %{mingw32_libdir}/libgio-2.0.a
+%{mingw32_libdir}/libgirepository-2.0.a
 %{mingw32_libdir}/libglib-2.0.a
 %{mingw32_libdir}/libgmodule-2.0.a
 %{mingw32_libdir}/libgobject-2.0.a
@@ -233,6 +237,9 @@ find %{buildroot} -name "*.la" -delete
 %files -n mingw64-glib2 -f mingw64-glib20.lang
 %license COPYING
 %{mingw64_bindir}/gdbus.exe
+%{mingw64_bindir}/gi-compile-repository.exe
+%{mingw64_bindir}/gi-decompile-typelib.exe
+%{mingw64_bindir}/gi-inspect-typelib.exe
 %{mingw64_bindir}/gio.exe
 %{mingw64_bindir}/gio-querymodules.exe
 %{mingw64_bindir}/glib-compile-resources.exe
@@ -278,6 +285,7 @@ find %{buildroot} -name "*.la" -delete
 
 %files -n mingw64-glib2-static
 %{mingw64_libdir}/libgio-2.0.a
+%{mingw64_libdir}/libgirepository-2.0.a
 %{mingw64_libdir}/libglib-2.0.a
 %{mingw64_libdir}/libgmodule-2.0.a
 %{mingw64_libdir}/libgobject-2.0.a
@@ -285,6 +293,11 @@ find %{buildroot} -name "*.la" -delete
 
 
 %changelog
+* Mon Nov 25 2024 Konstantin Kostiuk <kkostiuk@redhat.com> - 2.82.2-1
+- Update to 2.82.2
+- RHEL-35772 - CVE-2024-34397 mingw-glib2: glib2: Signal subscription vulnerabilities
+- RHEL-67083 - CVE-2024-52533 mingw-glib2: buffer overflow in set_connect_msg()
+
 * Tue Oct 29 2024 Troy Dawson <tdawson@redhat.com> - 2.79.1-4
 - Bump release for October 2024 mass rebuild:
   Resolves: RHEL-64018
diff --git a/sources b/sources
index 1ec9cf8..99ee564 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (glib-2.79.1.tar.xz) = 6968ac28451a72f2d8d50ce31a887be2c26ae2bc5ddba1a4aadaafb955c1bb11576017084006d78a6e6f09e88696534b94eb50c61b0b0509695a547de34c7620
+SHA512 (glib-2.82.2.tar.xz) = d5b761ec0c088496f2f9e5767568076a30ff492c272f21133560689f4e6a177d403c78d71ef85da63de331152c4d1f27b65d3e927ebfaf0fb63592f66e564ea1