From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Zdenek Dohnal To: git-commits@fedoraproject.org Subject: [rpms/hplip] rawhide: Fix more leaks after CVE-2026-8632 fix Date: Mon, 15 Jun 2026 11:00:25 GMT Message-ID: <178152122552.1.5353405017462317640.rpms-hplip-0a47faa5bb68@fedoraproject.org> List-ID: X-Git-Repo: rpms/hplip X-Git-Branch: rawhide X-Git-Rev: 0a47faa5bb680e205590af0f06f4e598124ee304 QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvaHBsaXAKQnJhbmNo IDogcmF3aGlkZQpDb21taXQgOiAwYTQ3ZmFhNWJiNjgwZTIwNTU5MGFmMGYwNmY0ZTU5ODEyNGVl MzA0CkF1dGhvciA6IFpkZW5layBEb2huYWwgPHpkb2huYWxAcmVkaGF0LmNvbT4KRGF0ZSAgIDog MjAyNi0wNi0xNVQxMzowMDoyMCswMjowMApTdGF0cyAgOiArNjUvLTIgaW4gMiBmaWxlKHMpClVS TCAgICA6IGh0dHBzOi8vc3JjLmZlZG9yYXByb2plY3Qub3JnL3JwbXMvaHBsaXAvYy8wYTQ3ZmFh NWJiNjgwZTIwNTU5MGFmMGYwNmY0ZTU5ODEyNGVlMzA0P2JyYW5jaD1yYXdoaWRlCgpMb2c6CkZp eCBtb3JlIGxlYWtzIGFmdGVyIENWRS0yMDI2LTg2MzIgZml4CgotLS0KZGlmZiAtLWdpdCBhL2hw bGlwLUNWRS0yMDI2LTg2MzEtb3NoLnBhdGNoIGIvaHBsaXAtQ1ZFLTIwMjYtODYzMS1vc2gucGF0 Y2gKaW5kZXggMmU5MDZkOS4uOTFiYWFhNyAxMDA2NDQKLS0tIGEvaHBsaXAtQ1ZFLTIwMjYtODYz MS1vc2gucGF0Y2gKKysrIGIvaHBsaXAtQ1ZFLTIwMjYtODYzMS1vc2gucGF0Y2gKQEAgLTEsNSAr MSw1IEBACiBkaWZmIC0tZ2l0IGEvcHJudC9ocGN1cHMvZ2VuUENMbS5jcHAgYi9wcm50L2hwY3Vw cy9nZW5QQ0xtLmNwcAotaW5kZXggMGUxNjUwYy4uZTBjNTI0OCAxMDA2NDQKK2luZGV4IDBlMTY1 MGMuLjVmODNjYmEgMTAwNjQ0CiAtLS0gYS9wcm50L2hwY3Vwcy9nZW5QQ0xtLmNwcAogKysrIGIv cHJudC9ocGN1cHMvZ2VuUENMbS5jcHAKIEBAIC0xOTE3LDggKzE5MTcsMTEgQEAgaW50ICBQQ0xt R2VuZXJhdG9yOjpFbmNhcHN1bGF0ZSh2b2lkICpwSW5CdWZmZXIsIGludCBpbkJ1ZmZlclNpemUs IGludCB0aGlzSGVpZ2gKQEAgLTMzLDMgKzMzLDYzIEBAIGluZGV4IDBlMTY1MGMuLmUwYzUyNDgg MTAwNjQ0CiAgCQkJbWVtc2V0KHRtcFN0cmlwLHdoaXRlUHQsdG1wU3RyaXBTaXplKTsKICAKICAK K0BAIC0yMDEyLDcgKzIwMjEsMTAgQEAgaW50ICBQQ0xtR2VuZXJhdG9yOjpFbmNhcHN1bGF0ZSh2 b2lkICpwSW5CdWZmZXIsIGludCBpbkJ1ZmZlclNpemUsIGludCB0aGlzSGVpZ2gKKyAJeworIAkJ aW50IHNvdXJjZUxlbj0wOworIAkJaWYoIXNhZmVfbXVsX2ludF9wb3NpdGl2ZShudW1MaW5lc1Ro aXNDYWxsLCBzY2FubGluZVdpZHRoLCAmc291cmNlTGVuKSkKKysJCXsKKysJCQlmcmVlKG5ld1N0 cmlwUHRyKTsKKyAJCQlyZXR1cm4oZXJyb3JPdXRBbmRDbGVhblVwKCkpOworKwkJfQorIAkJdWlu dDMyIGxlbj0odWludDMyKXNvdXJjZUxlbjsKKyAJCXVMb25nZiBkZXN0U2l6ZT1sZW47CisgCitA QCAtMjAyMSwxMiArMjAzMywxOCBAQCBpbnQgIFBDTG1HZW5lcmF0b3I6OkVuY2Fwc3VsYXRlKHZv aWQgKnBJbkJ1ZmZlciwgaW50IGluQnVmZmVyU2l6ZSwgaW50IHRoaXNIZWlnaAorIAkJCXVieXRl IHdoaXRlUHQ9MHhmZjsKKyAJCQlzaXplX3QgdG1wU3RyaXBTaXplPTA7CisgCQkJaWYoIXNhZmVf bXVsX3NpemVfdCgoc2l6ZV90KXNjYW5saW5lV2lkdGgsIChzaXplX3QpdG9wTWFyZ2luSW5QaXgs ICZ0bXBTdHJpcFNpemUpKQorKwkJCXsKKysJCQkJZnJlZShuZXdTdHJpcFB0cik7CisgCQkJCXJl dHVybihlcnJvck91dEFuZENsZWFuVXAoKSk7CisrCQkJfQorIAorIAkJCS8vIFdlIG5lZWQgdG8g aW5qZWN0IGEgYmxhbmsgaW1hZ2Utc3RyaXAgd2l0aCBhIGhlaWdodD09dG9wTWFyZ2luSW5QaXgK KyAJCQl1Ynl0ZSAqdG1wU3RyaXA9KHVieXRlKiltYWxsb2ModG1wU3RyaXBTaXplKTsKKyAJCQlp ZighdG1wU3RyaXApCisrCQkJeworKwkJCQlmcmVlKG5ld1N0cmlwUHRyKTsKKyAJCQkJcmV0dXJu KGVycm9yT3V0QW5kQ2xlYW5VcCgpKTsKKysJCQl9CisgCQkJdUxvbmdmIHRtcERlc3RTaXplPWRl c3RTaXplOworIAkJCW1lbXNldCh0bXBTdHJpcCx3aGl0ZVB0LHRtcFN0cmlwU2l6ZSk7CisgCitA QCAtMjA3NSwyMCArMjA5MywyOSBAQCBpbnQgIFBDTG1HZW5lcmF0b3I6OkVuY2Fwc3VsYXRlKHZv aWQgKnBJbkJ1ZmZlciwgaW50IGluQnVmZmVyU2l6ZSwgaW50IHRoaXNIZWlnaAorIAl7CisgCQlp bnQgc291cmNlTGVuPTA7CisgCQlpZighc2FmZV9tdWxfaW50X3Bvc2l0aXZlKG51bUxpbmVzVGhp c0NhbGwsIHNjYW5saW5lV2lkdGgsICZzb3VyY2VMZW4pKQorKwkJeworKwkJCWZyZWUobmV3U3Ry aXBQdHIpOworIAkJCXJldHVybihlcnJvck91dEFuZENsZWFuVXAoKSk7CisrCQl9CisgCisgCQlp ZihmaXJzdFN0cmlwICYmIHRvcE1hcmdpbkluUGl4KQorIAkJeworIAkJCXVieXRlIHdoaXRlUHQ9 MHhmZjsKKyAJCQlzaXplX3QgdG1wU3RyaXBTaXplPTA7CisgCQkJaWYoIXNhZmVfbXVsX3NpemVf dCgoc2l6ZV90KXNjYW5saW5lV2lkdGgsIChzaXplX3QpdG9wTWFyZ2luSW5QaXgsICZ0bXBTdHJp cFNpemUpKQorKwkJCXsKKysJCQkJZnJlZShuZXdTdHJpcFB0cik7CisgCQkJCXJldHVybihlcnJv ck91dEFuZENsZWFuVXAoKSk7CisrCQkJfQorIAorIAkJCS8vIFdlIG5lZWQgdG8gaW5qZWN0IGEg YmxhbmsgaW1hZ2Utc3RyaXAgd2l0aCBhIGhlaWdodD09dG9wTWFyZ2luSW5QaXgKKyAKKyAJCQl1 Ynl0ZSAqdG1wU3RyaXA9KHVieXRlKiltYWxsb2ModG1wU3RyaXBTaXplKTsKKyAJCQlpZighdG1w U3RyaXApCisrCQkJeworKwkJCQlmcmVlKG5ld1N0cmlwUHRyKTsKKyAJCQkJcmV0dXJuKGVycm9y T3V0QW5kQ2xlYW5VcCgpKTsKKysJCQl9CisgCQkJbWVtc2V0KHRtcFN0cmlwLHdoaXRlUHQsdG1w U3RyaXBTaXplKTsKKyAKKyAJCQlmb3Ioc2ludDMyIHN0cmlwQ250cj0wOyBzdHJpcENudHI8bnVt RnVsbEluamVjdGVkU3RyaXBzO3N0cmlwQ250cisrKQoKZGlmZiAtLWdpdCBhL2hwbGlwLnNwZWMg Yi9ocGxpcC5zcGVjCmluZGV4IDNmMmYyY2IuLmJmYzUyODYgMTAwNjQ0Ci0tLSBhL2hwbGlwLnNw ZWMKKysrIGIvaHBsaXAuc3BlYwpAQCAtNyw3ICs3LDcgQEAKIFN1bW1hcnk6IEhQIExpbnV4IElt YWdpbmcgYW5kIFByaW50aW5nIFByb2plY3QKIE5hbWU6IGhwbGlwCiBWZXJzaW9uOiAzLjI2LjQK LVJlbGVhc2U6IDUlez9kaXN0fQorUmVsZWFzZTogNiV7P2Rpc3R9CiAjIG1vc3QgZmlsZXMgKGJh c2UvKiwgKiwgdWkqLy4uLikgLSBHUEwyKwogIyBwcm50L2hwaWpzLyBqcGVnIHJlbGF0ZWQgZmls ZXMgLSBJSkcKICMgcHJudC8qIC0gQlNELTMtQ2xhdXNlLUhQIC0gaXQgaXMgbW9kaWZpZWQgYSBs aXR0bGUsIGFza2VkIGhlcmUgaHR0cHM6Ly9naXRsYWIuY29tL2ZlZG9yYS9sZWdhbC9mZWRvcmEt bGljZW5zZS1kYXRhLy0vaXNzdWVzLzI2NwpAQCAtMTAwMSw2ICsxMDAxLDkgQEAgZmluZCBkb2Mv aW1hZ2VzIC10eXBlIGYgLWV4ZWMgY2htb2QgNjQ0IHt9IFw7CiAlY29uZmlnKG5vcmVwbGFjZSkg JXtfc3lzY29uZmRpcn0vc2FuZS5kL2RsbC5kL2hwYWlvCiAKICVjaGFuZ2Vsb2cKKyogTW9uIEp1 biAxNSAyMDI2IFpkZW5layBEb2huYWwgPHpkb2huYWxAcmVkaGF0LmNvbT4gLSAzLjI2LjQtNgor LSBGaXggbW9yZSBsZWFrcyBhZnRlciBDVkUtMjAyNi04NjMyIGZpeAorCiAqIEZyaSBKdW4gMTIg MjAyNiBZYWFrb3YgU2Vsa293aXR6IDx5c2Vsa293aUByZWRoYXQuY29tPiAtIDMuMjYuNC01CiAt IFJlYnVpbHQgZm9yIG9wZW5zc2wgNC4wCiAK