MinGW Windows GLib2 library
Backport upstream fix (commit 9f557746c52a) for CVE-2026-58013
to mingw-glib2 on c8s. The patch adds a bounds check before the
memcmp() call in glib/giochannel.c to prevent a buffer over-read
when using line terminators longer than 1 byte. A unit test for
the fix is also included.
CVE: CVE-2026-58013
Upstream patches:
-
|
||
|---|---|---|
| .gitignore | ||
| 0001-Use-CreateFile-on-Win32-to-make-sure-g_unlink-always.patch | ||
| gating.yaml | ||
| glib-prefer-constructors-over-DllMain.patch | ||
| mingw-glib2-2.70.1-CVE-2025-14087.patch | ||
| mingw-glib2-2.70.1-CVE-2026-58012.patch | ||
| mingw-glib2-2.70.1-CVE-2026-58013.patch | ||
| mingw-glib2-2.70.1-CVE-2026-58014.patch | ||
| mingw-glib2-2.70.1-CVE-2026-58015.patch | ||
| mingw-glib2-2.70.1-CVE-2026-58016.patch | ||
| mingw-glib2.spec | ||
| sources | ||