public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
From: Michel Lind <salimma@fedoraproject.org>
To: git-commits@fedoraproject.org
Subject: [rpms/7zip] epel10.2: Update to 26.01; Resolves: rhbz#2440915
Date: Mon, 15 Jun 2026 18:26:41 GMT	[thread overview]
Message-ID: <178154800144.1.14616507738712498177.rpms-7zip-0557591d53bb@fedoraproject.org> (raw)

            A new commit has been pushed.

            Repo   : rpms/7zip
            Branch : epel10.2
            Commit : 0557591d53bbfa4ec3c73728b31f101158afc3c7
            Author : Michel Lind <salimma@fedoraproject.org>
            Date   : 2026-06-15T16:57:57+01:00
            Stats  : +11/-6 in 4 file(s)
            URL    : https://src.fedoraproject.org/rpms/7zip/c/0557591d53bbfa4ec3c73728b31f101158afc3c7?branch=epel10.2

            Log:
            Update to 26.01; Resolves: rhbz#2440915

- Fixes CVE-2026-48092: Information disclosure in 32-bit builds
- Fixes CVE-2026-48095: Arbitrary code execution in NTFS handler
- Fixes CVE-2026-48101: Information disclosure in UEFI capsule parser
- Fixes CVE-2026-48102: Information disclosure and DOS via crafted UDF
  image
- Fixes CVE-2026-48103: Off-by-one buffer over-read in WIM archive
  handler
- Fixes CVE-2026-48104: Uninitialized heap read in SquashFS archive
  handler
- Fixes CVE-2026-48111: Off-by-one OOB read in UEFI firmware image
  parser
- Fixes CVE-2026-48112: Heap-based buffer over-read in Ar handler BSD
  SYMDEF parser

Signed-off-by: Michel Lind <salimma@fedoraproject.org>

---
diff --git a/.gitignore b/.gitignore
index 33e4a32..489b5c2 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,2 +1,4 @@
+/7zip-*.tar.gz
 /7zip-24.09.tar.zst
 /7zip-25.01.tar.zst
+/7zip-26.01.tar.zst

diff --git a/7zip-find-so-in-libexec.diff b/7zip-find-so-in-libexec.diff
index 1e8fd71..a569f97 100644
--- a/7zip-find-so-in-libexec.diff
+++ b/7zip-find-so-in-libexec.diff
@@ -1,8 +1,6 @@
-diff --git a/CPP/7zip/UI/Common/ArchiveCommandLine.cpp b/CPP/7zip/UI/Common/ArchiveCommandLine.cpp
-index 7fe18fb..4b79e2d 100644
 --- a/CPP/7zip/UI/Common/ArchiveCommandLine.cpp
 +++ b/CPP/7zip/UI/Common/ArchiveCommandLine.cpp
-@@ -1780,8 +1780,10 @@ FString GetModuleDirPrefix()
+@@ -1894,8 +1894,10 @@ FString GetModuleDirPrefix()
    FString s;
  
    s = fas2fs(g_ModuleDirPrefix);

diff --git a/7zip.spec b/7zip.spec
index 873a7dc..7adb71e 100644
--- a/7zip.spec
+++ b/7zip.spec
@@ -1,9 +1,12 @@
+# spectool -gf -d "with_github_source 1" to download original source
+%bcond github_source 0
+
 %global make_opts DEBUG_BUILD=1 DISABLE_RAR=1 LOCAL_FLAGS="%{optflags}" -f makefile.gcc
 # the last build right now is 16.02-32
 %global obs_ver 16.03
  
 Name:           7zip
-Version:        25.01
+Version:        26.01
 Release:        %autorelease
 Summary:        A file archiver
 
@@ -19,7 +22,9 @@ Summary:        A file archiver
 License:        LGPL-2.1-or-later AND BSD-3-Clause AND BSD-2-Clause AND LicenseRef-Fedora-Public-Domain
 URL:            https://7-zip.org
 # strip the source with strip-rar-support.sh
-# Source:         https://github.com/ip7z/7zip/archive/%%{version}/%%{name}-%%{version}.tar.gz
+%if %{with github_source}
+Source:         https://github.com/ip7z/7zip/archive/%{version}/%{name}-%{version}.tar.gz
+%endif
 Source:         %{name}-%{version}.tar.zst
 Source:         strip-rar-support.sh
 Patch:          https://github.com/ip7z/7zip/pull/33.patch#/7z-dont-echo-password.diff

diff --git a/sources b/sources
index a341e08..9fefd8a 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (7zip-25.01.tar.zst) = 3bd5ddddcfb120e83c101a42e41b1e3a37837bb2c117d1563199cb70524b1426e6dfcec761d956c40a931153587ecd3500d2f3a0f917323859ad5da86946013e
+SHA512 (7zip-26.01.tar.zst) = e5955319e7e1fdcd988d550fb2792a2d1d793cc524abcfad128276461c8b55f9ded8f9d612b2738d43316e2c3df9ceb1fd8ea2953b891c963b12140644a460c2

                 reply	other threads:[~2026-06-15 18:26 UTC|newest]

Thread overview: [no followups] expand[flat|nested]  mbox.gz  Atom feed

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=178154800144.1.14616507738712498177.rpms-7zip-0557591d53bb@fedoraproject.org \
    --to=salimma@fedoraproject.org \
    --cc=git-commits@fedoraproject.org \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox