From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Dominik 'Rathann' Mierzejewski To: git-commits@fedoraproject.org Subject: [rpms/nasm] rawhide: fix CVE-2026-6067 (resolves rhbz#2458087, rhbz#2458089) Date: Thu, 04 Jun 2026 23:20:54 GMT Message-ID: <178061525461.1.1089724783270025460.rpms-nasm-2d38ec314f6f@fedoraproject.org> List-ID: X-Git-Repo: rpms/nasm X-Git-Branch: rawhide X-Git-Rev: 2d38ec314f6fbe0096fbdae8b356c7af11f12acb ICAgICAgICAgICAgQSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KCiAgICAgICAgICAgIFJl cG8gICA6IHJwbXMvbmFzbQogICAgICAgICAgICBCcmFuY2ggOiByYXdoaWRlCiAgICAgICAgICAg IENvbW1pdCA6IDJkMzhlYzMxNGY2ZmJlMDA5NmZiZGFlOGIzNTZjN2FmMTFmMTJhY2IKICAgICAg ICAgICAgQXV0aG9yIDogRG9taW5payAnUmF0aGFubicgTWllcnplamV3c2tpIDxkb21pbmlrQGdy ZXlzZWN0b3IubmV0PgogICAgICAgICAgICBEYXRlICAgOiAyMDI2LTA0LTIyVDIzOjA1OjAyKzAy OjAwCiAgICAgICAgICAgIFN0YXRzICA6ICsyMy8tMSBpbiAyIGZpbGUocykKICAgICAgICAgICAg VVJMICAgIDogaHR0cHM6Ly9zcmMuZmVkb3JhcHJvamVjdC5vcmcvcnBtcy9uYXNtL2MvMmQzOGVj MzE0ZjZmYmUwMDk2ZmJkYWU4YjM1NmM3YWYxMWYxMmFjYj9icmFuY2g9cmF3aGlkZQoKICAgICAg ICAgICAgTG9nOgogICAgICAgICAgICBmaXggQ1ZFLTIwMjYtNjA2NyAocmVzb2x2ZXMgcmhieiMy NDU4MDg3LCByaGJ6IzI0NTgwODkpCgotIHBhdGNoIGJ5IE5pY2sgQ2xpZnRvbgoKLS0tCmRpZmYg LS1naXQgYS9uYXNtLUNWRS0yMDI2LTYwNjcucGF0Y2ggYi9uYXNtLUNWRS0yMDI2LTYwNjcucGF0 Y2gKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXggMDAwMDAwMC4uZjg2YjY3YQotLS0gL2Rldi9u dWxsCisrKyBiL25hc20tQ1ZFLTIwMjYtNjA2Ny5wYXRjaApAQCAtMCwwICsxLDE2IEBACitkaWZm IC11cCBuYXNtLTMuMDEvb3V0cHV0L291dG9iai5jLm9yaWcgbmFzbS0zLjAxL291dHB1dC9vdXRv YmouYworLS0tIG5hc20tMy4wMS9vdXRwdXQvb3V0b2JqLmMub3JpZwkyMDI1LTEwLTExIDA4OjQ0 OjA1LjAwMDAwMDAwMCArMDIwMAorKysrIG5hc20tMy4wMS9vdXRwdXQvb3V0b2JqLmMJMjAyNi0w NC0yMiAyMjo0OTozNC4wMTM0ODM2MzIgKzAyMDAKK0BAIC0xNzM2LDYgKzE3MzYsMTIgQEAgb2Jq X2RpcmVjdGl2ZShlbnVtIGRpcmVjdGl2ZSBkaXJlY3RpdmUsCisgICAgICAgICAgICAgICAgICAg ICAgKi8KKyAgICAgICAgICAgICAgICAgICAgIGNvbnRpbnVlOworICAgICAgICAgICAgICAgICB9 CisrICAgICAgICAgICAgICAgIGlmIChncnAtPm5lbnRyaWVzID49IEdST1VQX01BWCkKKysgICAg ICAgICAgICAgICAgeworKyAgICAgICAgICAgICAgICAgICAgLyogSXNzdWUgMjAzIGFrYSBDVkUt MjAyNi02MDY3LiAqLworKyAgICAgICAgICAgICAgICAgICAgbmFzbV9ub25mYXRhbCgidG9vIG1h bnkgc2VnbWVudHMgaW4gYSBncm91cCIpOworKyAgICAgICAgICAgICAgICAgICAgcmV0dXJuIERJ UlJfRVJST1I7CisrICAgICAgICAgICAgICAgIH0KKyAgICAgICAgICAgICAgICAgZm9yIChzZWcg PSBzZWdoZWFkOyBzZWc7IHNlZyA9IHNlZy0+bmV4dCkKKyAgICAgICAgICAgICAgICAgICAgIGlm ICghc3RyY21wKHNlZy0+bmFtZSwgcCkpCisgICAgICAgICAgICAgICAgICAgICAgICAgYnJlYWs7 CgpkaWZmIC0tZ2l0IGEvbmFzbS5zcGVjIGIvbmFzbS5zcGVjCmluZGV4IGU5NmI3ZGYuLmZhOWQz M2EgMTAwNjQ0Ci0tLSBhL25hc20uc3BlYworKysgYi9uYXNtLnNwZWMKQEAgLTksMTEgKzksMTMg QEAKIFN1bW1hcnk6IEEgcG9ydGFibGUgeDg2IGFzc2VtYmxlciB3aGljaCB1c2VzIEludGVsLWxp a2Ugc3ludGF4CiBOYW1lOiBuYXNtCiBWZXJzaW9uOiAzLjAxCi1SZWxlYXNlOiAyJXs/ZGlzdH0K K1JlbGVhc2U6IDMlez9kaXN0fQogTGljZW5zZTogQlNELTItQ2xhdXNlCiBVUkw6IGh0dHA6Ly93 d3cubmFzbS51cwogU291cmNlMDogaHR0cHM6Ly93d3cubmFzbS51cy9wdWIvbmFzbS9yZWxlYXNl YnVpbGRzLyV7dmVyc2lvbn0vJXtuYW1lfS0le3ZlcnNpb259LnRhci54egogU291cmNlMTogaHR0 cHM6Ly93d3cubmFzbS51cy9wdWIvbmFzbS9yZWxlYXNlYnVpbGRzLyV7dmVyc2lvbn0vJXtuYW1l fS0le3ZlcnNpb259LXhkb2MudGFyLnh6CisjIGh0dHBzOi8vZ2l0aHViLmNvbS9uZXR3aWRlLWFz c2VtYmxlci9uYXNtL2lzc3Vlcy8yMDMKK1BhdGNoMDogbmFzbS1DVkUtMjAyNi02MDY3LnBhdGNo CiAKIEJ1aWxkUmVxdWlyZXM6IHBlcmwoRW52KQogQnVpbGRSZXF1aXJlczogYXV0b2NvbmYKQEAg LTg0LDYgKzg2LDEwIEBAIG1ha2UgLUMgdGVzdCBnb2xkZW4gdGVzdCBkaWZmCiAlZW5kaWYKIAog JWNoYW5nZWxvZworKiBXZWQgQXByIDIyIDIwMjYgRG9taW5payBNaWVyemVqZXdza2kgPHJwbUBn cmV5c2VjdG9yLm5ldD4gLSAzLjAxLTMKKy0gZml4IENWRS0yMDI2LTYwNjcgKHJlc29sdmVzIHJo YnojMjQ1ODA4NywgcmhieiMyNDU4MDg5KQorICBwYXRjaCBieSBOaWNrIENsaWZ0b24KKwogKiBG cmkgSmFuIDE2IDIwMjYgRmVkb3JhIFJlbGVhc2UgRW5naW5lZXJpbmcgPHJlbGVuZ0BmZWRvcmFw cm9qZWN0Lm9yZz4gLSAzLjAxLTIKIC0gUmVidWlsdCBmb3IgaHR0cHM6Ly9mZWRvcmFwcm9qZWN0 Lm9yZy93aWtpL0ZlZG9yYV80NF9NYXNzX1JlYnVpbGQKIAo=