> -----Original Message----- > From: [email protected] <openembedded- > [email protected]> On Behalf Of Yoann Congal via > lists.openembedded.org > Sent: Friday, July 17, 2026 5:46 PM > To: [email protected]; [email protected] > Subject: Re: [OE-core][wrynose][PATCH 1/6] glib-2.0: Fix CVE-2026-58010 > > On Wed Jul 15, 2026 at 7:21 PM CEST, Deepak Rathore via lists.openembedded.org > wrote: > > From: Deepak Rathore <[email protected]> > > > > This patch applies the upstream 2.88.1 backport for > > CVE-2026-58010. The upstream fix commit is referenced in [1], > > and the public CVE advisory is referenced in [2]. > > > > [1] https://gitlab.gnome.org/GNOME/glib/- > /commit/be85f9429bb66412a9775440a88cb115803ba897 > > [2] https://nvd.nist.gov/vuln/detail/CVE-2026-58010 > > > > Signed-off-by: Deepak Rathore <[email protected]> > > Hello Deepak and Adarsh, > > You both sent backport patches for this CVE. > > This CVE (and I bet others of this series) can be fixed by upgrading > along the 2.88.x branch of glib. There are precedent for glib upgrade on > stable branches. > > Can you look into the glib changelog and see if there are changes > incompatible with our policy?
Hello Yoann, I have sent an upgrade patch. Peter > > If upgrading is compatible, please tell me and I will cherry pick the > upgrades from master: > glib-2.0: Upgrade 2.88.0 -> 2.88.1 > https://git.openembedded.org/openembedded- > core/commit/?id=e2063c252d1ab3188e74e9eced91bc17463d6551 > glib-2.0: upgrade 2.88.1 -> 2.88.2 > https://git.openembedded.org/openembedded- > core/commit/?id=c22a7bd7ecb463da212c25a5aa81a19992e17e1c > > If not, ping me as well, I will then resume reviewing this series. > > Regards, > -- > Yoann Congal > Smile ECS
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#241307): https://lists.openembedded.org/g/openembedded-core/message/241307 Mute This Topic: https://lists.openembedded.org/mt/120285725/21656 Group Owner: [email protected] Unsubscribe: https://lists.openembedded.org/g/openembedded-core/unsub [[email protected]] -=-=-=-=-=-=-=-=-=-=-=-
