MinGW Windows GLib2 library
8e46bdc457
Backport upstream fix for CVE-2026-58015 which validates D-Bus SHA-1 authentication cookie contexts to prevent path traversal attacks. The patch includes five upstream commits that add cookie context validation, cookie ID range checks, and hardening of the keyring file parser, with C99 types adapted to GLib equivalents for compatibility with the older GLib 2.70.1 codebase. CVE: CVE-2026-58015 Upstream patches: - https://gitlab.gnome.org/GNOME/glib/-/merge_requests/5172.patch Resolves: RHEL-212246 This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent. Assisted-by: Ymir |
||
|---|---|---|
| .gitignore | ||
| 0001-Use-CreateFile-on-Win32-to-make-sure-g_unlink-always.patch | ||
| gating.yaml | ||
| glib-prefer-constructors-over-DllMain.patch | ||
| mingw-glib2-2.70.1-CVE-2026-58015.patch | ||
| mingw-glib2.spec | ||
| sources | ||