MinGW Windows GLib2 library
Go to file
RHEL Packaging Agent d9b6761028 Fix CVE-2025-14087: integer overflow in GVariant parser
Backport upstream commit 31f82e22 to fix CVE-2025-14087 in
mingw-glib2. The patch changes loop counter types from `int` to
`size_t` in glib/gvariant-parser.c to prevent potential integer
overflow when parsing string and bytestring literals longer than
INT_MAX in GVariant text format input.

CVE: CVE-2025-14087
Upstream patches:
 - 31f82e22e2.patch
Resolves: RHEL-154707

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-07-22 16:17:37 +00:00
.gitignore Import rpm: c8s 2023-02-27 14:24:00 -05:00
0001-Use-CreateFile-on-Win32-to-make-sure-g_unlink-always.patch Auto sync2gitlab import of mingw-glib2-2.70.1-1.el8_5.src.rpm 2022-05-26 11:33:06 -04:00
gating.yaml Bring gating.yaml over from Brew dist-git 2023-03-10 11:04:29 -08:00
glib-prefer-constructors-over-DllMain.patch Auto sync2gitlab import of mingw-glib2-2.70.1-1.el8_5.src.rpm 2022-05-26 11:33:06 -04:00
mingw-glib2-2.70.1-CVE-2025-14087.patch Fix CVE-2025-14087: integer overflow in GVariant parser 2026-07-22 16:17:37 +00:00
mingw-glib2-2.70.1-CVE-2026-58014.patch Fix CVE-2026-58014: one-byte heap under-read in mingw-glib2 2026-07-22 16:17:37 +00:00
mingw-glib2-2.70.1-CVE-2026-58015.patch Fix CVE-2026-58015: D-Bus cookie context path traversal 2026-07-22 16:17:37 +00:00
mingw-glib2-2.70.1-CVE-2026-58016.patch Fix CVE-2026-58016: D-Bus introspection XML node nesting check 2026-07-22 16:17:37 +00:00
mingw-glib2.spec Fix CVE-2025-14087: integer overflow in GVariant parser 2026-07-22 16:17:37 +00:00
sources Auto sync2gitlab import of mingw-glib2-2.70.1-1.el8_5.src.rpm 2022-05-26 11:33:06 -04:00