rpms/mingw-glib2
7
0
Fork 0
Code Issues Pull Requests Releases Activity
MinGW Windows GLib2 library
11 Commits 7 Branches 26 Tags 449 KiB
Diff 100%
16e08b276e
Go to file
RHEL Packaging Agent 16e08b276e Fix CVE-2026-58011 in mingw-glib2: g_date_time_add_full() range validation 
Backport upstream fix for CVE-2026-58011 to mingw-glib2 2.70.1.
Two upstream commits were cherry-picked and combined into a
single patch (Patch3):

- Factor out MIN_DAYS/MAX_DAYS magic constants in gdatetime.c
- Add missing range validation to g_date_time_add_full() to
  prevent creation of invalid GDateTime objects, along with
  corresponding test cases.

CVE: CVE-2026-58011
Upstream patches:
 - 7f0f7d0870.patch
 - ededb77ea0.patch
Resolves: RHEL-212184

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-07-22 16:23:02 +00:00
.gitignore Import rpm: c8s 2023-02-27 14:24:00 -05:00
0001-Use-CreateFile-on-Win32-to-make-sure-g_unlink-always.patch Auto sync2gitlab import of mingw-glib2-2.70.1-1.el8_5.src.rpm 2022-05-26 11:33:06 -04:00
gating.yaml Bring gating.yaml over from Brew dist-git 2023-03-10 11:04:29 -08:00
glib-prefer-constructors-over-DllMain.patch Auto sync2gitlab import of mingw-glib2-2.70.1-1.el8_5.src.rpm 2022-05-26 11:33:06 -04:00
mingw-glib2-2.70.1-CVE-2025-14087.patch Fix CVE-2025-14087: integer overflow in GVariant parser 2026-07-22 16:17:37 +00:00
mingw-glib2-2.70.1-CVE-2026-58011.patch Fix CVE-2026-58011 in mingw-glib2: g_date_time_add_full() range validation 2026-07-22 16:23:02 +00:00
mingw-glib2-2.70.1-CVE-2026-58012.patch Fix CVE-2026-58012: buffer overflow in gregex substitutions 2026-07-22 16:20:18 +00:00
mingw-glib2-2.70.1-CVE-2026-58013.patch Fix CVE-2026-58013: memcmp buffer over-read in giochannel 2026-07-22 16:21:43 +00:00
mingw-glib2-2.70.1-CVE-2026-58014.patch Fix CVE-2026-58014: one-byte heap under-read in mingw-glib2 2026-07-22 16:17:37 +00:00
mingw-glib2-2.70.1-CVE-2026-58015.patch Fix CVE-2026-58015: D-Bus cookie context path traversal 2026-07-22 16:17:37 +00:00
mingw-glib2-2.70.1-CVE-2026-58016.patch Fix CVE-2026-58016: D-Bus introspection XML node nesting check 2026-07-22 16:17:37 +00:00
mingw-glib2.spec Fix CVE-2026-58011 in mingw-glib2: g_date_time_add_full() range validation 2026-07-22 16:23:02 +00:00
sources Auto sync2gitlab import of mingw-glib2-2.70.1-1.el8_5.src.rpm 2022-05-26 11:33:06 -04:00