Backport upstream fix for CVE-2026-58010 from GNOME/glib MR !5129
to mingw-glib2 2.70.1. The fix corrects an off-by-one error in
gvs_tuple_is_normal() in glib/gvariant-serialiser.c that allowed
a single byte out-of-bounds read when checking a GVariant for
normal form. A regression test is included.
CVE: CVE-2026-58010
Upstream patches:
- https://gitlab.gnome.org/GNOME/glib/-/merge_requests/5129.patch
Resolves: RHEL-212164
This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.
Assisted-by: Ymir
Backport upstream fix for CVE-2026-58011 to mingw-glib2 2.70.1.
Two upstream commits were cherry-picked and combined into a
single patch (Patch3):
- Factor out MIN_DAYS/MAX_DAYS magic constants in gdatetime.c
- Add missing range validation to g_date_time_add_full() to
prevent creation of invalid GDateTime objects, along with
corresponding test cases.
CVE: CVE-2026-58011
Upstream patches:
- 7f0f7d0870.patch
- ededb77ea0.patch
Resolves: RHEL-212184
This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.
Assisted-by: Ymir
Backport upstream fix (commit 9f557746c52a) for CVE-2026-58013
to mingw-glib2 on c8s. The patch adds a bounds check before the
memcmp() call in glib/giochannel.c to prevent a buffer over-read
when using line terminators longer than 1 byte. A unit test for
the fix is also included.
CVE: CVE-2026-58013
Upstream patches:
- 9f557746c5.patch
Resolves: RHEL-212234
This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.
Assisted-by: Ymir
Backport upstream fix for CVE-2026-58012, a buffer overflow in
GRegex case changing substitutions when using G_REGEX_RAW mode.
The upstream patch was adapted for glib 2.70.1 by adjusting
the struct member name from orig_compile_opts to compile_opts.
CVE: CVE-2026-58012
Upstream patches:
- https://gitlab.gnome.org/GNOME/glib/-/merge_requests/5132.patch
Resolves: RHEL-212200
This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.
Assisted-by: Ymir
Backport upstream commit 31f82e22 to fix CVE-2025-14087 in
mingw-glib2. The patch changes loop counter types from `int` to
`size_t` in glib/gvariant-parser.c to prevent potential integer
overflow when parsing string and bytestring literals longer than
INT_MAX in GVariant text format input.
CVE: CVE-2025-14087
Upstream patches:
- 31f82e22e2.patch
Resolves: RHEL-154707
This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.
Assisted-by: Ymir
Backport upstream commit c9da977c178f to fix CVE-2026-58016.
The patch corrects a broken nesting check for `<node>` elements
in the D-Bus introspection XML parser (gio/gdbusintrospection.c)
and adds unit tests for invalid XML parsing
(gio/tests/gdbus-introspection.c).
CVE: CVE-2026-58016
Upstream patches:
- https://github.com/GNOME/glib/commit/c9da977c178f.patch
Resolves: RHEL-190617
This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.
Assisted-by: Ymir
Backport upstream fix for CVE-2026-58014 from GitLab MR !5171
(commit 5f6d86b5) to mingw-glib2 2.70.1. The patch fixes a
one-byte heap under-read in g_key_file_get_locale_string_list()
when called on a key with an empty value (len == 0). The fix
adds a `len > 0` guard in glib/gkeyfile.c. The patch also
includes a fuzzing test extension and a unit test.
CVE: CVE-2026-58014
Upstream patches:
- https://gitlab.gnome.org/GNOME/glib/-/merge_requests/5171.patch
Resolves: RHEL-190609
This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.
Assisted-by: Ymir
Backport upstream fix for CVE-2026-58015 which validates
D-Bus SHA-1 authentication cookie contexts to prevent
path traversal attacks. The patch includes five upstream
commits that add cookie context validation, cookie ID range
checks, and hardening of the keyring file parser, with
C99 types adapted to GLib equivalents for compatibility
with the older GLib 2.70.1 codebase.
CVE: CVE-2026-58015
Upstream patches:
- https://gitlab.gnome.org/GNOME/glib/-/merge_requests/5172.patch
Resolves: RHEL-212246
This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.
Assisted-by: Ymir
