From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Carl George To: git-commits@fedoraproject.org Subject: [rpms/tinyproxy] rawhide: Backport upstream CVE fixes Date: Thu, 18 Jun 2026 21:32:24 GMT Message-ID: <178181834413.1.14857620099189119669.rpms-tinyproxy-c672b8adfa1d@fedoraproject.org> List-ID: X-Git-Repo: rpms/tinyproxy X-Git-Branch: rawhide X-Git-Rev: c672b8adfa1d7cfb04d14056c6f738ae28287c8a ICAgICAgICAgICAgQSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KCiAgICAgICAgICAgIFJl cG8gICA6IHJwbXMvdGlueXByb3h5CiAgICAgICAgICAgIEJyYW5jaCA6IHJhd2hpZGUKICAgICAg ICAgICAgQ29tbWl0IDogYzY3MmI4YWRmYTFkN2NmYjA0ZDE0MDU2YzZmNzM4YWUyODI4N2M4YQog ICAgICAgICAgICBBdXRob3IgOiBDYXJsIEdlb3JnZSA8Y2FybHdnZW9yZ2VAZ21haWwuY29tPgog ICAgICAgICAgICBEYXRlICAgOiAyMDI2LTA2LTE4VDE1OjQ5OjQ0LTA1OjAwCiAgICAgICAgICAg IFN0YXRzICA6ICs2OC8tMCBpbiAzIGZpbGUocykKICAgICAgICAgICAgVVJMICAgIDogaHR0cHM6 Ly9zcmMuZmVkb3JhcHJvamVjdC5vcmcvcnBtcy90aW55cHJveHkvYy9jNjcyYjhhZGZhMWQ3Y2Zi MDRkMTQwNTZjNmY3MzhhZTI4Mjg3YzhhP2JyYW5jaD1yYXdoaWRlCgogICAgICAgICAgICBMb2c6 CiAgICAgICAgICAgIEJhY2twb3J0IHVwc3RyZWFtIENWRSBmaXhlcwoKLSBGaXhlcyBDVkUtMjAy Ni01NDM4NwotIEZpeGVzIENWRS0yMDI2LTU0Mzg4CgotLS0KZGlmZiAtLWdpdCBhLzAwMDMtcmVx cy1wcmV2ZW50LXJlcXVlc3Qtc211Z2dsaW5nLXZpYS1ib3RoLWNvbnRlbnQtbGVuZ3RoLWFuZC1j aHVua2VkLnBhdGNoIGIvMDAwMy1yZXFzLXByZXZlbnQtcmVxdWVzdC1zbXVnZ2xpbmctdmlhLWJv dGgtY29udGVudC1sZW5ndGgtYW5kLWNodW5rZWQucGF0Y2gKbmV3IGZpbGUgbW9kZSAxMDA2NDQK aW5kZXggMDAwMDAwMC4uZWU1MmUxOAotLS0gL2Rldi9udWxsCisrKyBiLzAwMDMtcmVxcy1wcmV2 ZW50LXJlcXVlc3Qtc211Z2dsaW5nLXZpYS1ib3RoLWNvbnRlbnQtbGVuZ3RoLWFuZC1jaHVua2Vk LnBhdGNoCkBAIC0wLDAgKzEsMzMgQEAKK0Zyb20gMTFhMTYxMWM2YjI5NDAwYzFkZGNjN2M3ZTk2 NzY3YzdlZDBhNDkyMSBNb24gU2VwIDE3IDAwOjAwOjAwIDIwMDEKK0Zyb206IHJvZmwwciA8cm9m bDByQHVzZXJzLm5vcmVwbHkuZ2l0aHViLmNvbT4KK0RhdGU6IFRodSwgNyBNYXkgMjAyNiAxNjoz MzoxMSArMDAwMAorU3ViamVjdDogW1BBVENIXSByZXFzOiBwcmV2ZW50IHJlcXVlc3Qgc211Z2ds aW5nIHZpYSBib3RoIGNvbnRlbnQtbGVuZ3RoIGFuZAorIGNodW5rZWQKKworYWRkcmVzc2luZyBw b2ludCAxIG9mICM2MDkKK2ZpeGVzIENWRS0yMDI2LTU0Mzg3CisKKyhjaGVycnkgcGlja2VkIGZy b20gY29tbWl0IDYyM2JmYzA5M2RmMDA5Mjk2ZjBiODVkNDBiYzY3N2VmOWQ1YzA5YmIpCistLS0K KyBzcmMvcmVxcy5jIHwgNyArKysrKystCisgMSBmaWxlIGNoYW5nZWQsIDYgaW5zZXJ0aW9ucygr KSwgMSBkZWxldGlvbigtKQorCitkaWZmIC0tZ2l0IGEvc3JjL3JlcXMuYyBiL3NyYy9yZXFzLmMK K2luZGV4IDhiNjg1MzguLmUzY2ZlNzYgMTAwNjQ0CistLS0gYS9zcmMvcmVxcy5jCisrKysgYi9z cmMvcmVxcy5jCitAQCAtOTQyLDggKzk0MiwxMyBAQCBwcm9jZXNzX2NsaWVudF9oZWFkZXJzIChz dHJ1Y3QgY29ubl9zICpjb25ucHRyLCBwc2V1ZG9tYXAgKmhhc2hvZmhlYWRlcnMpCisgICAgICAg ICBjb25ucHRyLT5jb250ZW50X2xlbmd0aC5jbGllbnQgPSBnZXRfY29udGVudF9sZW5ndGggKGhh c2hvZmhlYWRlcnMpOworIAorICAgICAgICAgLyogQ2hlY2sgd2hldGhlciBjbGllbnQgc2VuZHMg Y2h1bmtlZCBkYXRhLiAqLworLSAgICAgICAgaWYgKGNvbm5wdHItPmNvbnRlbnRfbGVuZ3RoLmNs aWVudCA9PSAtMSAmJiBpc19jaHVua2VkX3RyYW5zZmVyIChoYXNob2ZoZWFkZXJzKSkKKysgICAg ICAgIGlmIChpc19jaHVua2VkX3RyYW5zZmVyIChoYXNob2ZoZWFkZXJzKSkgeworKyAgICAgICAg ICAgICAgICBpZiAoY29ubnB0ci0+Y29udGVudF9sZW5ndGguY2xpZW50ICE9IC0xKQorKyAgICAg ICAgICAgICAgICAgICAgICAgIC8qIHJlcXVlc3Qgc211Z2dsaW5nLCBzZWUgR0ggaXNzdWUgIzYw OSAqLworKyAgICAgICAgICAgICAgICAgICAgICAgIHBzZXVkb21hcF9yZW1vdmUgKGhhc2hvZmhl YWRlcnMsICJjb250ZW50LWxlbmd0aCIpOworKworICAgICAgICAgICAgICAgICBjb25ucHRyLT5j b250ZW50X2xlbmd0aC5jbGllbnQgPSAtMjsKKysgICAgICAgIH0KKyAKKyAgICAgICAgIC8qCisg ICAgICAgICAgKiBTZWUgaWYgdGhlcmUgaXMgYSAiQ29ubmVjdGlvbiIgaGVhZGVyLiAgSWYgc28s IHdlIG5lZWQgdG8gZG8gYSBiaXQKCmRpZmYgLS1naXQgYS8wMDA0LXJlcXMtcHJldmVudC1tdWx0 aXBsZS1jb250ZW50LWxlbmd0aHMtZ2V0dGluZy1lbWl0dGVkLnBhdGNoIGIvMDAwNC1yZXFzLXBy ZXZlbnQtbXVsdGlwbGUtY29udGVudC1sZW5ndGhzLWdldHRpbmctZW1pdHRlZC5wYXRjaApuZXcg ZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwLi5jY2E5YTJhCi0tLSAvZGV2L251bGwKKysr IGIvMDAwNC1yZXFzLXByZXZlbnQtbXVsdGlwbGUtY29udGVudC1sZW5ndGhzLWdldHRpbmctZW1p dHRlZC5wYXRjaApAQCAtMCwwICsxLDI5IEBACitGcm9tIDk1NGFiMmE4YmM3OTYxZjNjMzAzMDE1 NWQ3MDY4YTExZWFjZDlkOGQgTW9uIFNlcCAxNyAwMDowMDowMCAyMDAxCitGcm9tOiByb2ZsMHIg PHJvZmwwckB1c2Vycy5ub3JlcGx5LmdpdGh1Yi5jb20+CitEYXRlOiBUaHUsIDcgTWF5IDIwMjYg MTY6Mzk6NDggKzAwMDAKK1N1YmplY3Q6IFtQQVRDSF0gcmVxczogcHJldmVudCBtdWx0aXBsZSBj b250ZW50LWxlbmd0aHMgZ2V0dGluZyBlbWl0dGVkCisKK2FkZHJlc3NpbmcgcG9pbnQgMiBvZiAj NjA5CitmaXhlcyBDVkUtMjAyNi01NDM4OAorCisoY2hlcnJ5IHBpY2tlZCBmcm9tIGNvbW1pdCAz NjRjZGI2N2UwZWEwMGE4ZTRhNzAzN2UyNjkzZTA3MTFlODE2YWRiKQorLS0tCisgc3JjL3JlcXMu YyB8IDUgKysrKysKKyAxIGZpbGUgY2hhbmdlZCwgNSBpbnNlcnRpb25zKCspCisKK2RpZmYgLS1n aXQgYS9zcmMvcmVxcy5jIGIvc3JjL3JlcXMuYworaW5kZXggZTNjZmU3Ni4uMGM0ZDc5MSAxMDA2 NDQKKy0tLSBhL3NyYy9yZXFzLmMKKysrKyBiL3NyYy9yZXFzLmMKK0BAIC02NjgsNiArNjY4LDEx IEBAIGFkZF9oZWFkZXJfdG9fY29ubmVjdGlvbiAocHNldWRvbWFwICpoYXNob2ZoZWFkZXJzLCBj aGFyICpoZWFkZXIsIHNpemVfdCBsZW4pCisgICAgICAgICAvKiBDYWxjdWxhdGUgdGhlIG5ldyBs ZW5ndGggb2YganVzdCB0aGUgZGF0YSAqLworICAgICAgICAgbGVuIC09IHNlcCAtIGhlYWRlciAt IDE7CisgCisrICAgICAgICAvKiBwcmV2ZW50IG11bHRpcGxlIGNvbnRlbnQtbGVuZ3RoIGhlYWRl cnMgZnJvbSBiZWluZyBpbnNlcnRlZCAqLworKyAgICAgICAgaWYgKCFzdHJjYXNlY21wKGhlYWRl ciwgImNvbnRlbnQtbGVuZ3RoIikgJiYKKysgICAgICAgICAgICBwc2V1ZG9tYXBfZmluZCAoaGFz aG9maGVhZGVycywgImNvbnRlbnQtbGVuZ3RoIikpCisrICAgICAgICAgICAgICAgIHJldHVybiAw OworKworICAgICAgICAgcmV0dXJuIHBzZXVkb21hcF9hcHBlbmQgKGhhc2hvZmhlYWRlcnMsIGhl YWRlciwgc2VwKTsKKyB9CisgCgpkaWZmIC0tZ2l0IGEvdGlueXByb3h5LnNwZWMgYi90aW55cHJv eHkuc3BlYwppbmRleCBkZTYxNmNlLi5iYWJhMDc2IDEwMDY0NAotLS0gYS90aW55cHJveHkuc3Bl YworKysgYi90aW55cHJveHkuc3BlYwpAQCAtMTUsNiArMTUsMTIgQEAgUGF0Y2g6ICAgICAgICAg IDAwMDEtcmVxcy1jaGVjay1uZWdhdGl2ZS1sZW5ndGgtdmFsdWVzLWFuZC1wcmV2ZW50LXBvdGVu dGlhbC1pbnQKICMgQ1ZFLTIwMjYtMzE4NDIKICMgaHR0cHM6Ly9naXRodWIuY29tL3Rpbnlwcm94 eS90aW55cHJveHkvY29tbWl0Lzg3OWJmODQ0YWJmZmEwYmY1ZmFlNmFmZjBjNzMxNzkwMjRkZDlm OTgKIFBhdGNoOiAgICAgICAgICAwMDAyLXJlcXMtZml4LWNhc2Utc2Vuc2l0aXZlLW1hdGNoaW5n LW9mLWNodW5rZWQtNjA1LnBhdGNoCisjIENWRS0yMDI2LTU0Mzg3CisjIGh0dHBzOi8vZ2l0aHVi LmNvbS90aW55cHJveHkvdGlueXByb3h5L2NvbW1pdC82MjNiZmMwOTNkZjAwOTI5NmYwYjg1ZDQw YmM2NzdlZjlkNWMwOWJiCitQYXRjaDogICAgICAgICAgMDAwMy1yZXFzLXByZXZlbnQtcmVxdWVz dC1zbXVnZ2xpbmctdmlhLWJvdGgtY29udGVudC1sZW5ndGgtYW5kLWNodW5rZWQucGF0Y2gKKyMg Q1ZFLTIwMjYtNTQzODgKKyMgaHR0cHM6Ly9naXRodWIuY29tL3Rpbnlwcm94eS90aW55cHJveHkv Y29tbWl0LzM2NGNkYjY3ZTBlYTAwYThlNGE3MDM3ZTI2OTNlMDcxMWU4MTZhZGIKK1BhdGNoOiAg ICAgICAgICAwMDA0LXJlcXMtcHJldmVudC1tdWx0aXBsZS1jb250ZW50LWxlbmd0aHMtZ2V0dGlu Zy1lbWl0dGVkLnBhdGNoCiAKIEJ1aWxkUmVxdWlyZXM6ICBtYWtlCiBCdWlsZFJlcXVpcmVzOiAg Z2NjCg==