From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Dennis Gilmore To: git-commits@fedoraproject.org Subject: [rpms/openssl] rebase_40beta: pull in upstream patch for CVE-2014-0160 Date: Tue, 09 Jun 2026 12:43:17 GMT Message-ID: <178100899758.1.15208032326302483618.rpms-openssl-e55cd2c0e4f7@fedoraproject.org> List-ID: X-Git-Repo: rpms/openssl X-Git-Branch: rebase_40beta X-Git-Rev: e55cd2c0e4f76ecc25d452b657e131c42ee78b70 ICAgICAgICAgICAgQSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KCiAgICAgICAgICAgIFJl cG8gICA6IHJwbXMvb3BlbnNzbAogICAgICAgICAgICBCcmFuY2ggOiByZWJhc2VfNDBiZXRhCiAg ICAgICAgICAgIENvbW1pdCA6IGU1NWNkMmMwZTRmNzZlY2MyNWQ0NTJiNjU3ZTEzMWM0MmVlNzhi NzAKICAgICAgICAgICAgQXV0aG9yIDogRGVubmlzIEdpbG1vcmUgPGRlbm5pc0BhdXNpbC51cz4K ICAgICAgICAgICAgRGF0ZSAgIDogMjAxNC0wNC0wN1QxOToyMDozMS0wNTowMAogICAgICAgICAg ICBTdGF0cyAgOiArMTE2Ly0xIGluIDIgZmlsZShzKQogICAgICAgICAgICBVUkwgICAgOiBodHRw czovL3NyYy5mZWRvcmFwcm9qZWN0Lm9yZy9ycG1zL29wZW5zc2wvYy9lNTVjZDJjMGU0Zjc2ZWNj MjVkNDUyYjY1N2UxMzFjNDJlZTc4YjcwP2JyYW5jaD1yZWJhc2VfNDBiZXRhCgogICAgICAgICAg ICBMb2c6CiAgICAgICAgICAgIHB1bGwgaW4gdXBzdHJlYW0gcGF0Y2ggZm9yIENWRS0yMDE0LTAx NjAKCi0gcmVtb3ZlZCBDSEFOR0VTIGZpbGUgcG9ydGlvbiBmcm9tIHBhdGNoIGZvciBleHBlZGll bmN5CgotLS0KZGlmZiAtLWdpdCBhL29wZW5zc2wuZ2l0LTk2ZGI5MDIucGF0Y2ggYi9vcGVuc3Ns LmdpdC05NmRiOTAyLnBhdGNoCm5ldyBmaWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAwMDAwMDAuLjZm ZWQzMmEKLS0tIC9kZXYvbnVsbAorKysgYi9vcGVuc3NsLmdpdC05NmRiOTAyLnBhdGNoCkBAIC0w LDAgKzEsMTA4IEBACitGcm9tOiBEci4gU3RlcGhlbiBIZW5zb24gPHN0ZXZlQG9wZW5zc2wub3Jn PgorRGF0ZTogU2F0LCA1IEFwciAyMDE0IDIzOjUxOjA2ICswMDAwICgrMDEwMCkKK1N1YmplY3Q6 IEFkZCBoZWFydGJlYXQgZXh0ZW5zaW9uIGJvdW5kcyBjaGVjay4KK1gtR2l0LVRhZzogT3BlblNT TF8xXzBfMWd+MworWC1HaXQtVXJsOiBodHRwOi8vZ2l0Lm9wZW5zc2wub3JnL2dpdHdlYi8/cD1v cGVuc3NsLmdpdDthPWNvbW1pdGRpZmZfcGxhaW47aD05NmRiOTAyCisKK0FkZCBoZWFydGJlYXQg ZXh0ZW5zaW9uIGJvdW5kcyBjaGVjay4KKworQSBtaXNzaW5nIGJvdW5kcyBjaGVjayBpbiB0aGUg aGFuZGxpbmcgb2YgdGhlIFRMUyBoZWFydGJlYXQgZXh0ZW5zaW9uCitjYW4gYmUgdXNlZCB0byBy ZXZlYWwgdXAgdG8gNjRrIG9mIG1lbW9yeSB0byBhIGNvbm5lY3RlZCBjbGllbnQgb3IKK3NlcnZl ci4KKworVGhhbmtzIGZvciBOZWVsIE1laHRhIG9mIEdvb2dsZSBTZWN1cml0eSBmb3IgZGlzY292 ZXJpbmcgdGhpcyBidWcgYW5kIHRvCitBZGFtIExhbmdsZXkgPGFnbEBjaHJvbWl1bS5vcmc+IGFu ZCBCb2RvIE1vZWxsZXIgPGJtb2VsbGVyQGFjbS5vcmc+IGZvcgorcHJlcGFyaW5nIHRoZSBmaXgg KENWRS0yMDE0LTAxNjApCistLS0KKworZGlmZiAtLWdpdCBhL3NzbC9kMV9ib3RoLmMgYi9zc2wv ZDFfYm90aC5jCitpbmRleCA3YTU1OTZhLi4yZThjZjY4IDEwMDY0NAorLS0tIGEvc3NsL2QxX2Jv dGguYworKysrIGIvc3NsL2QxX2JvdGguYworQEAgLTE0NTksMjYgKzE0NTksMzYgQEAgZHRsczFf cHJvY2Vzc19oZWFydGJlYXQoU1NMICpzKQorIAl1bnNpZ25lZCBpbnQgcGF5bG9hZDsKKyAJdW5z aWduZWQgaW50IHBhZGRpbmcgPSAxNjsgLyogVXNlIG1pbmltdW0gcGFkZGluZyAqLworIAorLQkv KiBSZWFkIHR5cGUgYW5kIHBheWxvYWQgbGVuZ3RoIGZpcnN0ICovCistCWhidHlwZSA9ICpwKys7 CistCW4ycyhwLCBwYXlsb2FkKTsKKy0JcGwgPSBwOworLQorIAlpZiAocy0+bXNnX2NhbGxiYWNr KQorIAkJcy0+bXNnX2NhbGxiYWNrKDAsIHMtPnZlcnNpb24sIFRMUzFfUlRfSEVBUlRCRUFULAor IAkJCSZzLT5zMy0+cnJlYy5kYXRhWzBdLCBzLT5zMy0+cnJlYy5sZW5ndGgsCisgCQkJcywgcy0+ bXNnX2NhbGxiYWNrX2FyZyk7CisgCisrCS8qIFJlYWQgdHlwZSBhbmQgcGF5bG9hZCBsZW5ndGgg Zmlyc3QgKi8KKysJaWYgKDEgKyAyICsgMTYgPiBzLT5zMy0+cnJlYy5sZW5ndGgpCisrCQlyZXR1 cm4gMDsgLyogc2lsZW50bHkgZGlzY2FyZCAqLworKwloYnR5cGUgPSAqcCsrOworKwluMnMocCwg cGF5bG9hZCk7CisrCWlmICgxICsgMiArIHBheWxvYWQgKyAxNiA+IHMtPnMzLT5ycmVjLmxlbmd0 aCkKKysJCXJldHVybiAwOyAvKiBzaWxlbnRseSBkaXNjYXJkIHBlciBSRkMgNjUyMCBzZWMuIDQg Ki8KKysJcGwgPSBwOworKworIAlpZiAoaGJ0eXBlID09IFRMUzFfSEJfUkVRVUVTVCkKKyAJCXsK KyAJCXVuc2lnbmVkIGNoYXIgKmJ1ZmZlciwgKmJwOworKwkJdW5zaWduZWQgaW50IHdyaXRlX2xl bmd0aCA9IDEgLyogaGVhcnRiZWF0IHR5cGUgKi8gKworKwkJCQkJICAgIDIgLyogaGVhcnRiZWF0 IGxlbmd0aCAqLyArCisrCQkJCQkgICAgcGF5bG9hZCArIHBhZGRpbmc7CisgCQlpbnQgcjsKKyAK KysJCWlmICh3cml0ZV9sZW5ndGggPiBTU0wzX1JUX01BWF9QTEFJTl9MRU5HVEgpCisrCQkJcmV0 dXJuIDA7CisrCisgCQkvKiBBbGxvY2F0ZSBtZW1vcnkgZm9yIHRoZSByZXNwb25zZSwgc2l6ZSBp cyAxIGJ5dGUKKyAJCSAqIG1lc3NhZ2UgdHlwZSwgcGx1cyAyIGJ5dGVzIHBheWxvYWQgbGVuZ3Ro LCBwbHVzCisgCQkgKiBwYXlsb2FkLCBwbHVzIHBhZGRpbmcKKyAJCSAqLworLQkJYnVmZmVyID0g T1BFTlNTTF9tYWxsb2MoMSArIDIgKyBwYXlsb2FkICsgcGFkZGluZyk7CisrCQlidWZmZXIgPSBP UEVOU1NMX21hbGxvYyh3cml0ZV9sZW5ndGgpOworIAkJYnAgPSBidWZmZXI7CisgCisgCQkvKiBF bnRlciByZXNwb25zZSB0eXBlLCBsZW5ndGggYW5kIGNvcHkgcGF5bG9hZCAqLworQEAgLTE0ODks MTEgKzE0OTksMTEgQEAgZHRsczFfcHJvY2Vzc19oZWFydGJlYXQoU1NMICpzKQorIAkJLyogUmFu ZG9tIHBhZGRpbmcgKi8KKyAJCVJBTkRfcHNldWRvX2J5dGVzKGJwLCBwYWRkaW5nKTsKKyAKKy0J CXIgPSBkdGxzMV93cml0ZV9ieXRlcyhzLCBUTFMxX1JUX0hFQVJUQkVBVCwgYnVmZmVyLCAzICsg cGF5bG9hZCArIHBhZGRpbmcpOworKwkJciA9IGR0bHMxX3dyaXRlX2J5dGVzKHMsIFRMUzFfUlRf SEVBUlRCRUFULCBidWZmZXIsIHdyaXRlX2xlbmd0aCk7CisgCisgCQlpZiAociA+PSAwICYmIHMt Pm1zZ19jYWxsYmFjaykKKyAJCQlzLT5tc2dfY2FsbGJhY2soMSwgcy0+dmVyc2lvbiwgVExTMV9S VF9IRUFSVEJFQVQsCistCQkJCWJ1ZmZlciwgMyArIHBheWxvYWQgKyBwYWRkaW5nLAorKwkJCQli dWZmZXIsIHdyaXRlX2xlbmd0aCwKKyAJCQkJcywgcy0+bXNnX2NhbGxiYWNrX2FyZyk7CisgCisg CQlPUEVOU1NMX2ZyZWUoYnVmZmVyKTsKK2RpZmYgLS1naXQgYS9zc2wvdDFfbGliLmMgYi9zc2wv dDFfbGliLmMKK2luZGV4IGI4MmZhZGEuLmJkZGZmZDkgMTAwNjQ0CistLS0gYS9zc2wvdDFfbGli LmMKKysrKyBiL3NzbC90MV9saWIuYworQEAgLTI1ODgsMTYgKzI1ODgsMjAgQEAgdGxzMV9wcm9j ZXNzX2hlYXJ0YmVhdChTU0wgKnMpCisgCXVuc2lnbmVkIGludCBwYXlsb2FkOworIAl1bnNpZ25l ZCBpbnQgcGFkZGluZyA9IDE2OyAvKiBVc2UgbWluaW11bSBwYWRkaW5nICovCisgCistCS8qIFJl YWQgdHlwZSBhbmQgcGF5bG9hZCBsZW5ndGggZmlyc3QgKi8KKy0JaGJ0eXBlID0gKnArKzsKKy0J bjJzKHAsIHBheWxvYWQpOworLQlwbCA9IHA7CistCisgCWlmIChzLT5tc2dfY2FsbGJhY2spCisg CQlzLT5tc2dfY2FsbGJhY2soMCwgcy0+dmVyc2lvbiwgVExTMV9SVF9IRUFSVEJFQVQsCisgCQkJ JnMtPnMzLT5ycmVjLmRhdGFbMF0sIHMtPnMzLT5ycmVjLmxlbmd0aCwKKyAJCQlzLCBzLT5tc2df Y2FsbGJhY2tfYXJnKTsKKyAKKysJLyogUmVhZCB0eXBlIGFuZCBwYXlsb2FkIGxlbmd0aCBmaXJz dCAqLworKwlpZiAoMSArIDIgKyAxNiA+IHMtPnMzLT5ycmVjLmxlbmd0aCkKKysJCXJldHVybiAw OyAvKiBzaWxlbnRseSBkaXNjYXJkICovCisrCWhidHlwZSA9ICpwKys7CisrCW4ycyhwLCBwYXls b2FkKTsKKysJaWYgKDEgKyAyICsgcGF5bG9hZCArIDE2ID4gcy0+czMtPnJyZWMubGVuZ3RoKQor KwkJcmV0dXJuIDA7IC8qIHNpbGVudGx5IGRpc2NhcmQgcGVyIFJGQyA2NTIwIHNlYy4gNCAqLwor KwlwbCA9IHA7CisrCisgCWlmIChoYnR5cGUgPT0gVExTMV9IQl9SRVFVRVNUKQorIAkJeworIAkJ dW5zaWduZWQgY2hhciAqYnVmZmVyLCAqYnA7CgpkaWZmIC0tZ2l0IGEvb3BlbnNzbC5zcGVjIGIv b3BlbnNzbC5zcGVjCmluZGV4IDY5ZjA1OGMuLmU4MDdlNTAgMTAwNjQ0Ci0tLSBhL29wZW5zc2wu c3BlYworKysgYi9vcGVuc3NsLnNwZWMKQEAgLTIzLDcgKzIzLDcgQEAKIFN1bW1hcnk6IFV0aWxp dGllcyBmcm9tIHRoZSBnZW5lcmFsIHB1cnBvc2UgY3J5cHRvZ3JhcGh5IGxpYnJhcnkgd2l0aCBU TFMgaW1wbGVtZW50YXRpb24KIE5hbWU6IG9wZW5zc2wKIFZlcnNpb246IDEuMC4xZQotUmVsZWFz ZTogNDMlez9kaXN0fQorUmVsZWFzZTogNDQlez9kaXN0fQogRXBvY2g6IDEKICMgV2UgaGF2ZSB0 byByZW1vdmUgY2VydGFpbiBwYXRlbnRlZCBhbGdvcml0aG1zIGZyb20gdGhlIG9wZW5zc2wgc291 cmNlCiAjIHRhcmJhbGwgd2l0aCB0aGUgaG9iYmxlLW9wZW5zc2wgc2NyaXB0IHdoaWNoIGlzIGlu Y2x1ZGVkIGJlbG93LgpAQCAtOTQsNiArOTQsOCBAQCBQYXRjaDg2OiBvcGVuc3NsLTEuMC4xZS1j dmUtMjAxMy02NDQ5LnBhdGNoCiBQYXRjaDg3OiBvcGVuc3NsLTEuMC4xZS1jdmUtMjAxMy02NDUw LnBhdGNoCiBQYXRjaDg4OiBvcGVuc3NsLTEuMC4xZS1jdmUtMjAxMy00MzUzLnBhdGNoCiBQYXRj aDg5OiBvcGVuc3NsLTEuMC4xZS1lcGhlbWVyYWwta2V5LXNpemUucGF0Y2gKKyMgdXBzdHJlYW0g cGF0Y2ggZm9yIENWRS0yMDE0LTAxNjAKK1BhdGNoMTAwOiBvcGVuc3NsLmdpdC05NmRiOTAyLnBh dGNoCiAKIExpY2Vuc2U6IE9wZW5TU0wKIEdyb3VwOiBTeXN0ZW0gRW52aXJvbm1lbnQvTGlicmFy aWVzCkBAIC0yMjEsNiArMjIzLDcgQEAgY3AgJXtTT1VSQ0UxMn0gJXtTT1VSQ0UxM30gY3J5cHRv L2VjLwogJXBhdGNoODcgLXAxIC1iIC5kdGxzMS1taXRtCiAlcGF0Y2g4OCAtcDEgLWIgLmhhbmRz aGFrZS1jcmFzaAogJXBhdGNoODkgLXAxIC1iIC5lcGhlbWVyYWwKKyVwYXRjaDEwMCAtcDEgLWIg LkNWRS0yMDE0LTAxNjAKIAogc2VkIC1pICdzL1NITElCX1ZFUlNJT05fTlVNQkVSICIxLjAuMCIv U0hMSUJfVkVSU0lPTl9OVU1CRVIgIiV7dmVyc2lvbn0iLycgY3J5cHRvL29wZW5zc2x2LmgKIApA QCAtNDg3LDYgKzQ5MCwxMCBAQCBybSAtcmYgJFJQTV9CVUlMRF9ST09ULyV7X2xpYmRpcn0vZmlw c2NhbmlzdGVyLioKICVwb3N0dW4gbGlicyAtcCAvc2Jpbi9sZGNvbmZpZwogCiAlY2hhbmdlbG9n CisqIE1vbiBBcHIgMDcgMjAxNCBEZW5uaXMgR2lsbW9yZSA8ZGVubmlzQGF1c2lsLnVzPiAtIDEu MC4xZS00NAorLSBwdWxsIGluIHVwc3RyZWFtIHBhdGNoIGZvciBDVkUtMjAxNC0wMTYwCistIHJl bW92ZWQgQ0hBTkdFUyBmaWxlIHBvcnRpb24gZnJvbSBwYXRjaCBmb3IgZXhwZWRpZW5jeQorCiAq IFRodSBBcHIgIDMgMjAxNCBUb23DocWhIE1yw6F6IDx0bXJhekByZWRoYXQuY29tPiAxLjAuMWUt NDMKIC0gYWRkIHN1cHBvcnQgZm9yIHBwYzY0bGUgYXJjaGl0ZWN0dXJlICgjMTA3MjYzMykKIAo=