From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Jitka Plesnikova To: git-commits@fedoraproject.org Subject: [rpms/perl-Archive-Tar] f43: Fix CVE-2026-42496 (rhbz#2484320) Date: Wed, 03 Jun 2026 11:31:43 GMT Message-ID: <178048630364.1.16890612272693616307.rpms-perl-Archive-Tar-bc874cebf099@fedoraproject.org> List-ID: X-Git-Repo: rpms/perl-Archive-Tar X-Git-Branch: f43 X-Git-Rev: bc874cebf0991711bfb425c57adb0e96a6d3665b QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvcGVybC1BcmNoaXZl LVRhcgpCcmFuY2ggOiBmNDMKQ29tbWl0IDogYmM4NzRjZWJmMDk5MTcxMWJmYjQyNWM1N2FkYjBl OTZhNmQzNjY1YgpBdXRob3IgOiBKaXRrYSBQbGVzbmlrb3ZhIDxqcGxlc25pa0ByZWRoYXQuY29t PgpEYXRlICAgOiAyMDI2LTA2LTAzVDEzOjMxOjMyKzAyOjAwClN0YXRzICA6ICs3Ny8tMSBpbiAy IGZpbGUocykKVVJMICAgIDogaHR0cHM6Ly9zcmMuZmVkb3JhcHJvamVjdC5vcmcvcnBtcy9wZXJs LUFyY2hpdmUtVGFyL2MvYmM4NzRjZWJmMDk5MTcxMWJmYjQyNWM1N2FkYjBlOTZhNmQzNjY1Yj9i cmFuY2g9ZjQzCgpMb2c6CkZpeCBDVkUtMjAyNi00MjQ5NiAocmhieiMyNDg0MzIwKQoKLS0tCmRp ZmYgLS1naXQgYS9BcmNoaXZlLVRhci0zLjA0LVZhbGlkYXRlLXN5bWxpbmstYW5kLWhhcmRsaW5r LWxpbmtuYW1lLWluLVNFQ1VSRS1NT0QucGF0Y2ggYi9BcmNoaXZlLVRhci0zLjA0LVZhbGlkYXRl LXN5bWxpbmstYW5kLWhhcmRsaW5rLWxpbmtuYW1lLWluLVNFQ1VSRS1NT0QucGF0Y2gKbmV3IGZp bGUgbW9kZSAxMDA2NDQKaW5kZXggMDAwMDAwMC4uY2M2NzE3OQotLS0gL2Rldi9udWxsCisrKyBi L0FyY2hpdmUtVGFyLTMuMDQtVmFsaWRhdGUtc3ltbGluay1hbmQtaGFyZGxpbmstbGlua25hbWUt aW4tU0VDVVJFLU1PRC5wYXRjaApAQCAtMCwwICsxLDcwIEBACitTdWJqZWN0OiBbUEFUQ0hdIFZh bGlkYXRlIHN5bWxpbmsgYW5kIGhhcmRsaW5rIGxpbmtuYW1lIGluIFNFQ1VSRSBNT0RFCisKK0Jh Y2twb3J0ZWQgZnJvbSB2ZXJzaW9uIDMuMDggKGNvbW1pdDogMTdjODczNCkKKworZGlmZiAtdXAg QXJjaGl2ZS1UYXItMy4wNC9saWIvQXJjaGl2ZS9UYXIucG0ub3JpZyBBcmNoaXZlLVRhci0zLjA0 L2xpYi9BcmNoaXZlL1Rhci5wbQorLS0tIEFyY2hpdmUtVGFyLTMuMDQvbGliL0FyY2hpdmUvVGFy LnBtLm9yaWcJMjAyNS0wMi0yNSAyMToxOTozNC4wMDAwMDAwMDAgKzAxMDAKKysrKyBBcmNoaXZl LVRhci0zLjA0L2xpYi9BcmNoaXZlL1Rhci5wbQkyMDI2LTA2LTAzIDEzOjA2OjUxLjU5NjYyNzEy MSArMDIwMAorQEAgLTk1NCw2ICs5NTQsMTkgQEAgc3ViIF9tYWtlX3NwZWNpYWxfZmlsZSB7Cisg ICAgIG15ICRlcnI7CisgCisgICAgIGlmKCAkZW50cnktPmlzX3N5bWxpbmsgKSB7CisrICAgICAg ICBpZiggISRJTlNFQ1VSRV9FWFRSQUNUX01PREUgKSB7CisrICAgICAgICAgICAgbXkgJGxpbmtu YW1lID0gJGVudHJ5LT5saW5rbmFtZTsKKysgICAgICAgICAgICBpZiggRmlsZTo6U3BlYy0+Zmls ZV9uYW1lX2lzX2Fic29sdXRlKCRsaW5rbmFtZSkgKSB7CisrICAgICAgICAgICAgICAgICRzZWxm LT5fZXJyb3IoIHFxW1N5bWxpbmsgJ10gLiAkZW50cnktPmZ1bGxfcGF0aCAuCisrICAgICAgICAg ICAgICAgICAgICBxcVsnIGhhcyBhYnNvbHV0ZSB0YXJnZXQuIE5vdCBleHRyYWN0aW5nIHVuZGVy IFNFQ1VSRSBFWFRSQUNUIE1PREVdICk7CisrICAgICAgICAgICAgICAgIHJldHVybjsKKysgICAg ICAgICAgICB9CisrICAgICAgICAgICAgaWYoIGdyZXAgeyAkXyBlcSAnLi4nIH0gRmlsZTo6U3Bl Yy0+c3BsaXRkaXIoJGxpbmtuYW1lKSApIHsKKysgICAgICAgICAgICAgICAgJHNlbGYtPl9lcnJv ciggcXFbU3ltbGluayAnXSAuICRlbnRyeS0+ZnVsbF9wYXRoIC4KKysgICAgICAgICAgICAgICAg ICAgIHFxWycgdGFyZ2V0IGF0dGVtcHRzIHRyYXZlcnNhbC4gTm90IGV4dHJhY3RpbmcgdW5kZXIg U0VDVVJFIEVYVFJBQ1QgTU9ERV0gKTsKKysgICAgICAgICAgICAgICAgcmV0dXJuOworKyAgICAg ICAgICAgIH0KKysgICAgICAgIH0KKyAgICAgICAgIG15ICRmYWlsOworICAgICAgICAgaWYoIE9O X1VOSVggKSB7CisgICAgICAgICAgICAgc3ltbGluayggJGVudHJ5LT5saW5rbmFtZSwgJGZpbGUg KSBvciAkZmFpbCsrOworQEAgLTk2Nyw2ICs5ODAsMjMgQEAgc3ViIF9tYWtlX3NwZWNpYWxfZmls ZSB7CisgICAgICAgICAgICAgICAgICRlbnRyeS0+bGlua25hbWUgLnFbJyBmYWlsZWRdIGlmICRm YWlsOworIAorICAgICB9IGVsc2lmICggJGVudHJ5LT5pc19oYXJkbGluayApIHsKKysgICAgICAg IGlmKCAhJElOU0VDVVJFX0VYVFJBQ1RfTU9ERSApIHsKKysgICAgICAgICAgICBteSAkbGlua25h bWUgPSAkZW50cnktPmxpbmtuYW1lOworKyAgICAgICAgICAgIGlmKCBGaWxlOjpTcGVjLT5maWxl X25hbWVfaXNfYWJzb2x1dGUoJGxpbmtuYW1lKSApIHsKKysgICAgICAgICAgICAgICAgJHNlbGYt Pl9lcnJvciggcXFbSGFyZGxpbmsgJ10gLiAkZW50cnktPmZ1bGxfcGF0aCAuCisrICAgICAgICAg ICAgICAgICAgICBxcVsnIGhhcyBhYnNvbHV0ZSB0YXJnZXQgJyRsaW5rbmFtZScuIE5vdCBleHRy YWN0aW5nIF0gLgorKyAgICAgICAgICAgICAgICAgICAgcXFbdW5kZXIgU0VDVVJFIEVYVFJBQ1Qg TU9ERTogZXh0cmFjdGlvbiBpdHNlbGYgY2htb2RzIF0gLgorKyAgICAgICAgICAgICAgICAgICAg cXFbdGhlIHNoYXJlZCBpbm9kZS5dICk7CisrICAgICAgICAgICAgICAgIHJldHVybjsKKysgICAg ICAgICAgICB9CisrICAgICAgICAgICAgaWYoIGdyZXAgeyAkXyBlcSAnLi4nIH0gRmlsZTo6U3Bl Yy0+c3BsaXRkaXIoJGxpbmtuYW1lKSApIHsKKysgICAgICAgICAgICAgICAgJHNlbGYtPl9lcnJv ciggcXFbSGFyZGxpbmsgJ10gLiAkZW50cnktPmZ1bGxfcGF0aCAuCisrICAgICAgICAgICAgICAg ICAgICBxcVsnIHRhcmdldCAnJGxpbmtuYW1lJyBhdHRlbXB0cyB0cmF2ZXJzYWwuIE5vdCBdIC4K KysgICAgICAgICAgICAgICAgICAgIHFxW2V4dHJhY3RpbmcgdW5kZXIgU0VDVVJFIEVYVFJBQ1Qg TU9ERTogZXh0cmFjdGlvbiBdIC4KKysgICAgICAgICAgICAgICAgICAgIHFxW2l0c2VsZiBjaG1v ZHMgdGhlIHNoYXJlZCBpbm9kZS5dICk7CisrICAgICAgICAgICAgICAgIHJldHVybjsKKysgICAg ICAgICAgICB9CisrICAgICAgICB9CisgICAgICAgICBteSAkZmFpbDsKKyAgICAgICAgIGlmKCBP Tl9VTklYICkgeworICAgICAgICAgICAgIGxpbmsoICRlbnRyeS0+bGlua25hbWUsICRmaWxlICkg b3IgJGZhaWwrKzsKK2RpZmYgLXVwIEFyY2hpdmUtVGFyLTMuMDQvdC8wNF9yZXNvbHZlZF9pc3N1 ZXMudC5vcmlnIEFyY2hpdmUtVGFyLTMuMDQvdC8wNF9yZXNvbHZlZF9pc3N1ZXMudAorLS0tIEFy Y2hpdmUtVGFyLTMuMDQvdC8wNF9yZXNvbHZlZF9pc3N1ZXMudC5vcmlnCTIwMjUtMDItMjUgMjE6 MTM6MzcuMDAwMDAwMDAwICswMTAwCisrKysgQXJjaGl2ZS1UYXItMy4wNC90LzA0X3Jlc29sdmVk X2lzc3Vlcy50CTIwMjYtMDYtMDMgMTM6MDQ6MjIuNDg2ODM3MjA2ICswMjAwCitAQCAtMjIwLDYg KzIyMCw3IEBAIGlmICgkXk8gbmUgJ21zeXMnKSAjIHN5bWxpbmsgdGVzdHMgZmFpbAorIAkJfQor IAorICAgICB7ICN1c2UgY2FzZSAxIC0gaW4gbWVtb3J5IGV4dHJhY3Rpb24KKysgICAgICBsb2Nh bCAkQXJjaGl2ZTo6VGFyOjpJTlNFQ1VSRV9FWFRSQUNUX01PREU9MTsKKyAJCQlteSAkdD1BcmNo aXZlOjpUYXItPm5ldzsKKyAJCQkkdC0+cmVhZCggJGFyY2huYW1lICk7CisgCQkJbXkgJHIgPSBl dmFseyAkdC0+ZXh0cmFjdCB9OworQEAgLTIzMSw2ICsyMzIsNyBAQCBpZiAoJF5PIG5lICdtc3lz JykgIyBzeW1saW5rIHRlc3RzIGZhaWwKKyAKKyAJCXsgI3VzZSBjYXNlIDIgLSBpdGVyIGV4dHJh Y3Rpb24KKyAJCSAgIyREQjo6c2luZ2xlID0gMjsKKysgICAgICBsb2NhbCAkQXJjaGl2ZTo6VGFy OjpJTlNFQ1VSRV9FWFRSQUNUX01PREU9MTsKKyAJCQlteSAkbmV4dD1BcmNoaXZlOjpUYXItPml0 ZXIoICRhcmNobmFtZSwgMSApOworIAkJCW15ICRmYWlsZWQgPSAwOworIAkJCSN1c2UgRGF0YTo6 RHVtcGVyOwoKZGlmZiAtLWdpdCBhL3BlcmwtQXJjaGl2ZS1UYXIuc3BlYyBiL3BlcmwtQXJjaGl2 ZS1UYXIuc3BlYwppbmRleCBiMjkwYTg4Li42MjJjNzY1IDEwMDY0NAotLS0gYS9wZXJsLUFyY2hp dmUtVGFyLnNwZWMKKysrIGIvcGVybC1BcmNoaXZlLVRhci5zcGVjCkBAIC03LDEzICs3LDE1IEBA CiAKIE5hbWU6ICAgICAgICAgICBwZXJsLUFyY2hpdmUtVGFyCiBWZXJzaW9uOiAgICAgICAgMy4w NAotUmVsZWFzZTogICAgICAgIDUyMSV7P2Rpc3R9CitSZWxlYXNlOiAgICAgICAgNTIyJXs/ZGlz dH0KIFN1bW1hcnk6ICAgICAgICBBIG1vZHVsZSBmb3IgUGVybCBtYW5pcHVsYXRpb24gb2YgLnRh ciBmaWxlcwogTGljZW5zZTogICAgICAgIEdQTC0xLjAtb3ItbGF0ZXIgT1IgQXJ0aXN0aWMtMS4w LVBlcmwKIFVSTDogICAgICAgICAgICBodHRwczovL21ldGFjcGFuLm9yZy9yZWxlYXNlL0FyY2hp dmUtVGFyCiBTb3VyY2UwOiAgICAgICAgaHR0cHM6Ly9jcGFuLm1ldGFjcGFuLm9yZy9hdXRob3Jz L2lkL0IvQkkvQklOR09TL0FyY2hpdmUtVGFyLSV7dmVyc2lvbn0udGFyLmd6CiAjIFJlbW92ZSBh bm5veWluZyBzbGVlcCBhZnRlciB3YXJuaW5ncyBpbiB0aGUgYnVpbGQgc2NyaXB0CiBQYXRjaDA6 ICAgICAgICAgQXJjaGl2ZS1UYXItMi4wMi1Eby1ub3Qtc2xlZXAtaW4tTWFrZWZpbGUuUEwucGF0 Y2gKKyMgRml4IENWRS0yMDI2LTQyNDk2CitQYXRjaDE6ICAgICAgICAgQXJjaGl2ZS1UYXItMy4w NC1WYWxpZGF0ZS1zeW1saW5rLWFuZC1oYXJkbGluay1saW5rbmFtZS1pbi1TRUNVUkUtTU9ELnBh dGNoCiBCdWlsZEFyY2g6ICAgICAgbm9hcmNoCiAjIE1vc3Qgb2YgdGhlIEJSUyBhcmUgbmVlZGVk IG9ubHkgZm9yIHRlc3RzLCBjb21wcmVzc2lvbiBzdXBwb3J0IGF0IHJ1bi10aW1lCiAjIGlzIG9w dGlvbmFsIHNvZnQgZGVwZW5kZW5jeS4KQEAgLTEwNyw2ICsxMDksNyBAQCB3aXRoICIle19saWJl eGVjZGlyfS8le25hbWV9L3Rlc3QiLgogJXByZXAKICVzZXR1cCAtcSAtbiBBcmNoaXZlLVRhci0l e3ZlcnNpb259CiAlcGF0Y2ggLVAwIC1wMQorJXBhdGNoIC1QMSAtcDEKIAogIyBIZWxwIGdlbmVy YXRvcnMgdG8gcmVjb2duaXplIFBlcmwgc2NyaXB0cwogZm9yIEYgaW4gdC8qLnQ7IGRvCkBAIC0x NTgsNiArMTYxLDkgQEAgbWFrZSB0ZXN0CiAle19saWJleGVjZGlyfS8le25hbWV9CiAKICVjaGFu Z2Vsb2cKKyogV2VkIEp1biAwMyAyMDI2IEppdGthIFBsZXNuaWtvdmEgPGpwbGVzbmlrQHJlZGhh dC5jb20+IC0gMy4wNC01MjIKKy0gRml4IENWRS0yMDI2LTQyNDk2IChyaGJ6IzI0ODQzMjApCisK ICogRnJpIEp1bCAyNSAyMDI1IEZlZG9yYSBSZWxlYXNlIEVuZ2luZWVyaW5nIDxyZWxlbmdAZmVk b3JhcHJvamVjdC5vcmc+IC0gMy4wNC01MjEKIC0gUmVidWlsdCBmb3IgaHR0cHM6Ly9mZWRvcmFw cm9qZWN0Lm9yZy93aWtpL0ZlZG9yYV80M19NYXNzX1JlYnVpbGQKIAo=