From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Alejandro Alvarez Ayllon To: git-commits@fedoraproject.org Subject: [rpms/onnx] test-1.21.0: Backport of fix for CVE-2024-5187 Date: Mon, 08 Jun 2026 15:18:22 GMT Message-ID: <178093190229.1.12970833761617478671.rpms-onnx-2f10ec013d88@fedoraproject.org> List-ID: X-Git-Repo: rpms/onnx X-Git-Branch: test-1.21.0 X-Git-Rev: 2f10ec013d888d4bf63a78706ac69e595b9af408 QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvb25ueApCcmFuY2gg OiB0ZXN0LTEuMjEuMApDb21taXQgOiAyZjEwZWMwMTNkODg4ZDRiZjYzYTc4NzA2YWM2OWU1OTVi OWFmNDA4CkF1dGhvciA6IEFsZWphbmRybyBBbHZhcmV6IEF5bGxvbiA8YS5hbHZhcmV6YXlsbG9u QGdtYWlsLmNvbT4KRGF0ZSAgIDogMjAyNC0wNy0wMlQwOTo1OToxNyswMDowMApTdGF0cyAgOiAr OTIvLTEgaW4gMiBmaWxlKHMpClVSTCAgICA6IGh0dHBzOi8vc3JjLmZlZG9yYXByb2plY3Qub3Jn L3JwbXMvb25ueC9jLzJmMTBlYzAxM2Q4ODhkNGJmNjNhNzg3MDZhYzY5ZTU5NWI5YWY0MDg/YnJh bmNoPXRlc3QtMS4yMS4wCgpMb2c6CkJhY2twb3J0IG9mIGZpeCBmb3IgQ1ZFLTIwMjQtNTE4NwoK LS0tCmRpZmYgLS1naXQgYS8wMDA3LU1pdGlnYXRlLXRhcmJhbGwtZGlyZWN0b3J5LXRyYXZlcnNh bC1yaXNrcy02MTY0LnBhdGNoIGIvMDAwNy1NaXRpZ2F0ZS10YXJiYWxsLWRpcmVjdG9yeS10cmF2 ZXJzYWwtcmlza3MtNjE2NC5wYXRjaApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAw Li5iNjQwODZiCi0tLSAvZGV2L251bGwKKysrIGIvMDAwNy1NaXRpZ2F0ZS10YXJiYWxsLWRpcmVj dG9yeS10cmF2ZXJzYWwtcmlza3MtNjE2NC5wYXRjaApAQCAtMCwwICsxLDg2IEBACitGcm9tIGRk MGE1YjhiNGVkZTZiMjdhNTFmNTcxYmI1NTg3ZTA3NWI4YjFjMjAgTW9uIFNlcCAxNyAwMDowMDow MCAyMDAxCitGcm9tOiBzdW5mbG93ZXJzeHUgPDE2NjcyODUzOCtzdW5mbG93ZXJzeHVAdXNlcnMu bm9yZXBseS5naXRodWIuY29tPgorRGF0ZTogVGh1LCAxMyBKdW4gMjAyNCAwMTo0NzoxNCArMDgw MAorU3ViamVjdDogW1BBVENIIDcvN10gTWl0aWdhdGUgdGFyYmFsbCBkaXJlY3RvcnkgdHJhdmVy c2FsIHJpc2tzICgjNjE2NCkKKworSGksIHRoaXMgcHIgaXMgY2xlYW5lciB2ZXJzaW9uIHRoYW4g IzYxNDUKKworU2lnbmVkLW9mZi1ieTogc3VucmlzZVh1IDwxNTkyNzE3NjY5N0AxNjMuY29tPgor Q28tYXV0aG9yZWQtYnk6IHN1bnJpc2VYdSA8MTU5MjcxNzY2OTdAMTYzLmNvbT4KK0NvLWF1dGhv cmVkLWJ5OiBKdXN0aW4gQ2h1IDxqdXN0aW5jaHVieUB1c2Vycy5ub3JlcGx5LmdpdGh1Yi5jb20+ CisoY2hlcnJ5IHBpY2tlZCBmcm9tIGNvbW1pdCAzZmMzODQ1ZWRiMDQ4ZGY1NTlhYTJhODM5ZTM5 ZTk1NTAzYTBlZTM0KQorLS0tCisgb25ueC9odWIucHkgfCA0MyArKysrKysrKysrKysrKysrKysr KysrKysrKysrKysrKysrKysrKysrKystCisgMSBmaWxlIGNoYW5nZWQsIDQyIGluc2VydGlvbnMo KyksIDEgZGVsZXRpb24oLSkKKworZGlmZiAtLWdpdCBhL29ubngvaHViLnB5IGIvb25ueC9odWIu cHkKK2luZGV4IGU1Y2E5ZTJjLi5kMjdiYmM3OCAxMDA2NDQKKy0tLSBhL29ubngvaHViLnB5Cisr KysgYi9vbm54L2h1Yi5weQorQEAgLTI3MSw2ICsyNzEsMzUgQEAgZGVmIGxvYWQoCisgICAgIHJl dHVybiBvbm54LmxvYWQoY2FzdChJT1tieXRlc10sIEJ5dGVzSU8obW9kZWxfYnl0ZXMpKSkKKyAK KyAKKytkZWYgX3Rhcl9tZW1iZXJzX2ZpbHRlcih0YXI6IHRhcmZpbGUuVGFyRmlsZSwgYmFzZTog c3RyKSAtPiBsaXN0W3RhcmZpbGUuVGFySW5mb106CisrICAgICIiIkNoZWNrIHRoYXQgdGhlIGNv bnRlbnQgb2YgYGB0YXJgYCB3aWxsIGJlIGV4dHJhY3RlZCBzYWZlbHkKKysKKysgICAgQXJnczoK KysgICAgICAgIHRhcjogVGhlIHRhcmJhbGwgZmlsZQorKyAgICAgICAgYmFzZTogVGhlIGRpcmVj dG9yeSB3aGVyZSB0aGUgdGFyYmFsbCB3aWxsIGJlIGV4dHJhY3RlZAorKworKyAgICBSZXR1cm5z OgorKyAgICAgICAgbGlzdCBvZiB0YXJiYWxsIG1lbWJlcnMKKysgICAgIiIiCisrICAgIHJlc3Vs dCA9IFtdCisrICAgIGZvciBtZW1iZXIgaW4gdGFyOgorKyAgICAgICAgbWVtYmVyX3BhdGggPSBv cy5wYXRoLmpvaW4oYmFzZSwgbWVtYmVyLm5hbWUpCisrICAgICAgICBhYnNfYmFzZSA9IG9zLnBh dGguYWJzcGF0aChiYXNlKQorKyAgICAgICAgYWJzX21lbWJlciA9IG9zLnBhdGguYWJzcGF0aCht ZW1iZXJfcGF0aCkKKysgICAgICAgIGlmIG5vdCBhYnNfbWVtYmVyLnN0YXJ0c3dpdGgoYWJzX2Jh c2UpOgorKyAgICAgICAgICAgIHJhaXNlIFJ1bnRpbWVFcnJvcigKKysgICAgICAgICAgICAgICAg ZiJUaGUgdGFyYmFsbCBtZW1iZXIge21lbWJlcl9wYXRofSBpbiBkb3dubG9hZGluZyBtb2RlbCBj b250YWlucyAiCisrICAgICAgICAgICAgICAgIGYiZGlyZWN0b3J5IHRyYXZlcnNhbCBzZXF1ZW5j ZSB3aGljaCBtYXkgY29udGFpbiBoYXJtZnVsIHBheWxvYWQuIgorKyAgICAgICAgICAgICkKKysg ICAgICAgIGVsaWYgbWVtYmVyLmlzc3ltKCkgb3IgbWVtYmVyLmlzbG5rKCk6CisrICAgICAgICAg ICAgcmFpc2UgUnVudGltZUVycm9yKAorKyAgICAgICAgICAgICAgICBmIlRoZSB0YXJiYWxsIG1l bWJlciB7bWVtYmVyX3BhdGh9IGluIGRvd25sb2FkaW5nIG1vZGVsIGNvbnRhaW5zICIKKysgICAg ICAgICAgICAgICAgZiJzeW1ib2xpYyBsaW5rcyB3aGljaCBtYXkgY29udGFpbiBoYXJtZnVsIHBh eWxvYWQuIgorKyAgICAgICAgICAgICkKKysgICAgICAgIHJlc3VsdC5hcHBlbmQobWVtYmVyKQor KyAgICByZXR1cm4gcmVzdWx0CisrCisrCisgZGVmIGRvd25sb2FkX21vZGVsX3dpdGhfdGVzdF9k YXRhKAorICAgICBtb2RlbDogc3RyLAorICAgICByZXBvOiBzdHIgPSAib25ueC9tb2RlbHM6bWFp biIsCitAQCAtMjgwLDYgKzMwOSw3IEBAIGRlZiBkb3dubG9hZF9tb2RlbF93aXRoX3Rlc3RfZGF0 YSgKKyApIC0+IE9wdGlvbmFsW3N0cl06CisgICAgICIiIgorICAgICBEb3dubG9hZHMgYSBtb2Rl bCBhbG9uZyB3aXRoIHRlc3QgZGF0YSBieSBuYW1lIGZyb20gdGhlIG9ubnggbW9kZWwgaHViIGFu ZCByZXR1cm5zIHRoZSBkaXJlY3RvcnkgdG8gd2hpY2ggdGhlIGZpbGVzIGhhdmUgYmVlbiBleHRy YWN0ZWQuCisrICAgIFVzZXJzIGFyZSByZXNwb25zaWJsZSBmb3IgbWFraW5nIHN1cmUgdGhlIG1v ZGVsIGNvbWVzIGZyb20gYSB0cnVzdGVkIHNvdXJjZSwgYW5kIHRoZSBkYXRhIGlzIHNhZmUgdG8g YmUgZXh0cmFjdGVkLgorIAorICAgICA6cGFyYW0gbW9kZWw6IFRoZSBuYW1lIG9mIHRoZSBvbm54 IG1vZGVsIGluIHRoZSBtYW5pZmVzdC4gVGhpcyBmaWVsZCBpcyBjYXNlLXNlbnNpdGl2ZQorICAg ICA6cGFyYW0gcmVwbzogVGhlIGxvY2F0aW9uIG9mIHRoZSBtb2RlbCByZXBvIGluIGZvcm1hdCAi dXNlci9yZXBvWzpicmFuY2hdIi4KK0BAIC0zNDIsNyArMzcyLDE4IEBAIGRlZiBkb3dubG9hZF9t b2RlbF93aXRoX3Rlc3RfZGF0YSgKKyAgICAgICAgIGxvY2FsX21vZGVsX3dpdGhfZGF0YV9kaXJf cGF0aCA9IGxvY2FsX21vZGVsX3dpdGhfZGF0YV9wYXRoWworICAgICAgICAgICAgIDAgOiBsZW4o bG9jYWxfbW9kZWxfd2l0aF9kYXRhX3BhdGgpIC0gNworICAgICAgICAgXQorLSAgICAgICAgbW9k ZWxfd2l0aF9kYXRhX3ppcHBlZC5leHRyYWN0YWxsKGxvY2FsX21vZGVsX3dpdGhfZGF0YV9kaXJf cGF0aCkKKysgICAgICAgICMgTWl0aWdhdGUgdGFyYmFsbCBkaXJlY3RvcnkgdHJhdmVyc2FsIHJp c2tzCisrICAgICAgICBpZiBoYXNhdHRyKHRhcmZpbGUsICJkYXRhX2ZpbHRlciIpOgorKyAgICAg ICAgICAgIG1vZGVsX3dpdGhfZGF0YV96aXBwZWQuZXh0cmFjdGFsbCgKKysgICAgICAgICAgICAg ICAgcGF0aD1sb2NhbF9tb2RlbF93aXRoX2RhdGFfZGlyX3BhdGgsIGZpbHRlcj0iZGF0YSIKKysg ICAgICAgICAgICApCisrICAgICAgICBlbHNlOgorKyAgICAgICAgICAgIG1vZGVsX3dpdGhfZGF0 YV96aXBwZWQuZXh0cmFjdGFsbCgKKysgICAgICAgICAgICAgICAgcGF0aD1sb2NhbF9tb2RlbF93 aXRoX2RhdGFfZGlyX3BhdGgsCisrICAgICAgICAgICAgICAgIG1lbWJlcnM9X3Rhcl9tZW1iZXJz X2ZpbHRlcigKKysgICAgICAgICAgICAgICAgICAgIG1vZGVsX3dpdGhfZGF0YV96aXBwZWQsIGxv Y2FsX21vZGVsX3dpdGhfZGF0YV9kaXJfcGF0aAorKyAgICAgICAgICAgICAgICApLAorKyAgICAg ICAgICAgICkKKyAgICAgbW9kZWxfd2l0aF9kYXRhX3BhdGggPSAoCisgICAgICAgICBsb2NhbF9t b2RlbF93aXRoX2RhdGFfZGlyX3BhdGgKKyAgICAgICAgICsgIi8iCistLSAKKzIuNDUuMgorCgpk aWZmIC0tZ2l0IGEvb25ueC5zcGVjIGIvb25ueC5zcGVjCmluZGV4IDk4YWI0ZGYuLjRiOWRhMzQg MTAwNjQ0Ci0tLSBhL29ubnguc3BlYworKysgYi9vbm54LnNwZWMKQEAgLTEsNiArMSw2IEBACiBO YW1lOiAgICAgICBvbm54CiBWZXJzaW9uOiAgICAxLjE1LjAKLVJlbGVhc2U6ICAgIDIlez9kaXN0 fQorUmVsZWFzZTogICAgMyV7P2Rpc3R9CiBTdW1tYXJ5OiAgICBPcGVuIHN0YW5kYXJkIGZvciBt YWNoaW5lIGxlYXJuaW5nIGludGVyb3BlcmFiaWxpdHkKIExpY2Vuc2U6ICAgIEFwYWNoZS0yLjAK IApAQCAtMjAsNiArMjAsOCBAQCBQYXRjaDQ6ICAgICAwMDA0LUFkZC1maXhlcy1mb3ItdXNlLXdp dGgtb25ueHJ1bnRpbWUucGF0Y2gKIFBhdGNoNTogICAgIDAwMDUtRml4LXBhdGgtc2FuaXRpemF0 aW9uLWJ5cGFzcy1sZWFkaW5nLXRvLWFyYml0cmFyeS1yZS5wYXRjaAogIyBCYWNrcG9ydCBvZiBm aXggZm9yIENWRS0yMDI0LTI3MzE5CiBQYXRjaDY6ICAgICAwMDA2LUZpeC1PdXQtb2YtYm91bmRz LXJlYWQtZHVlLXRvLWxhY2stb2Ytc3RyaW5nLXRlcm1pbmEucGF0Y2gKKyMgQmFja3BvcnQgb2Yg Zml4IGZvciBDVkUtMjAyNC01MTg3CitQYXRjaDc6ICAgICAwMDA3LU1pdGlnYXRlLXRhcmJhbGwt ZGlyZWN0b3J5LXRyYXZlcnNhbC1yaXNrcy02MTY0LnBhdGNoCiAKICMgaHR0cHM6Ly9idWd6aWxs YS5yZWRoYXQuY29tL3Nob3dfYnVnLmNnaT9pZD0yMjEyMDk2CiBFeGNsdWRlQXJjaDogICAgczM5 MHgKQEAgLTExNCw2ICsxMTYsOSBAQCBleHBvcnQgTERfTElCUkFSWV9QQVRIPSV7YnVpbGRyb290 fS8le19saWJkaXJ9CiAle19iaW5kaXJ9L2NoZWNrLW5vZGUKIAogJWNoYW5nZWxvZworKiBUdWUg SnVsIDAyIDIwMjQgQWxlamFuZHJvIEFsdmFyZXogQXlsbG9uIDxhLmFsdmFyZXpheWxsb25AZ21h aWwuY29tPiAtIDEuMTUuMC0zCistIEJhY2twb3J0IG9mIGZpeCBmb3IgQ1ZFLTIwMjQtNTE4Nwor CiAqIFNhdCBKdW4gMDggMjAyNCBQeXRob24gTWFpbnQgPHB5dGhvbi1tYWludEByZWRoYXQuY29t PiAtIDEuMTUuMC0yCiAtIFJlYnVpbHQgZm9yIFB5dGhvbiAzLjEzCiAK