From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Carl George To: git-commits@fedoraproject.org Subject: [rpms/tinyproxy] f44: Backport upstream CVE fixes Date: Thu, 18 Jun 2026 21:32:32 GMT Message-ID: <178181835295.1.1358145075402426626.rpms-tinyproxy-13ff057cb3f8@fedoraproject.org> List-ID: X-Git-Repo: rpms/tinyproxy X-Git-Branch: f44 X-Git-Rev: 13ff057cb3f8e5c72b415e42ef1350ff48baaf8d ICAgICAgICAgICAgQSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KCiAgICAgICAgICAgIFJl cG8gICA6IHJwbXMvdGlueXByb3h5CiAgICAgICAgICAgIEJyYW5jaCA6IGY0NAogICAgICAgICAg ICBDb21taXQgOiAxM2ZmMDU3Y2IzZjhlNWM3MmI0MTVlNDJlZjEzNTBmZjQ4YmFhZjhkCiAgICAg ICAgICAgIEF1dGhvciA6IENhcmwgR2VvcmdlIDxjYXJsd2dlb3JnZUBnbWFpbC5jb20+CiAgICAg ICAgICAgIERhdGUgICA6IDIwMjYtMDYtMThUMTU6NTE6MTItMDU6MDAKICAgICAgICAgICAgU3Rh dHMgIDogKzc0Ly0xIGluIDMgZmlsZShzKQogICAgICAgICAgICBVUkwgICAgOiBodHRwczovL3Ny Yy5mZWRvcmFwcm9qZWN0Lm9yZy9ycG1zL3Rpbnlwcm94eS9jLzEzZmYwNTdjYjNmOGU1YzcyYjQx NWU0MmVmMTM1MGZmNDhiYWFmOGQ/YnJhbmNoPWY0NAoKICAgICAgICAgICAgTG9nOgogICAgICAg ICAgICBCYWNrcG9ydCB1cHN0cmVhbSBDVkUgZml4ZXMKCi0gRml4ZXMgQ1ZFLTIwMjYtNTQzODcK LSBGaXhlcyBDVkUtMjAyNi01NDM4OAoKLS0tCmRpZmYgLS1naXQgYS8wMDA0LXJlcXMtcHJldmVu dC1yZXF1ZXN0LXNtdWdnbGluZy12aWEtYm90aC1jb250ZW50LWxlbmd0aC1hbmQtY2h1bmtlZC5w YXRjaCBiLzAwMDQtcmVxcy1wcmV2ZW50LXJlcXVlc3Qtc211Z2dsaW5nLXZpYS1ib3RoLWNvbnRl bnQtbGVuZ3RoLWFuZC1jaHVua2VkLnBhdGNoCm5ldyBmaWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAw MDAwMDAuLmYzOWNjNTQKLS0tIC9kZXYvbnVsbAorKysgYi8wMDA0LXJlcXMtcHJldmVudC1yZXF1 ZXN0LXNtdWdnbGluZy12aWEtYm90aC1jb250ZW50LWxlbmd0aC1hbmQtY2h1bmtlZC5wYXRjaApA QCAtMCwwICsxLDMzIEBACitGcm9tIDBiNTY2NjM0NjExODE5MzdlZGQwOWMyYTI2ZGM1YzZhODNh NWMyZjEgTW9uIFNlcCAxNyAwMDowMDowMCAyMDAxCitGcm9tOiByb2ZsMHIgPHJvZmwwckB1c2Vy cy5ub3JlcGx5LmdpdGh1Yi5jb20+CitEYXRlOiBUaHUsIDcgTWF5IDIwMjYgMTY6MzM6MTEgKzAw MDAKK1N1YmplY3Q6IFtQQVRDSF0gcmVxczogcHJldmVudCByZXF1ZXN0IHNtdWdnbGluZyB2aWEg Ym90aCBjb250ZW50LWxlbmd0aCBhbmQKKyBjaHVua2VkCisKK2FkZHJlc3NpbmcgcG9pbnQgMSBv ZiAjNjA5CitmaXhlcyBDVkUtMjAyNi01NDM4NworCisoY2hlcnJ5IHBpY2tlZCBmcm9tIGNvbW1p dCA2MjNiZmMwOTNkZjAwOTI5NmYwYjg1ZDQwYmM2NzdlZjlkNWMwOWJiKQorLS0tCisgc3JjL3Jl cXMuYyB8IDcgKysrKysrLQorIDEgZmlsZSBjaGFuZ2VkLCA2IGluc2VydGlvbnMoKyksIDEgZGVs ZXRpb24oLSkKKworZGlmZiAtLWdpdCBhL3NyYy9yZXFzLmMgYi9zcmMvcmVxcy5jCitpbmRleCA2 ZDJlOTRkLi4yNzA0MDQyIDEwMDY0NAorLS0tIGEvc3JjL3JlcXMuYworKysrIGIvc3JjL3JlcXMu YworQEAgLTk0OCw4ICs5NDgsMTMgQEAgcHJvY2Vzc19jbGllbnRfaGVhZGVycyAoc3RydWN0IGNv bm5fcyAqY29ubnB0ciwgb3JkZXJlZG1hcCBoYXNob2ZoZWFkZXJzKQorICAgICAgICAgY29ubnB0 ci0+Y29udGVudF9sZW5ndGguY2xpZW50ID0gZ2V0X2NvbnRlbnRfbGVuZ3RoIChoYXNob2ZoZWFk ZXJzKTsKKyAKKyAgICAgICAgIC8qIENoZWNrIHdoZXRoZXIgY2xpZW50IHNlbmRzIGNodW5rZWQg ZGF0YS4gKi8KKy0gICAgICAgIGlmIChjb25ucHRyLT5jb250ZW50X2xlbmd0aC5jbGllbnQgPT0g LTEgJiYgaXNfY2h1bmtlZF90cmFuc2ZlciAoaGFzaG9maGVhZGVycykpCisrICAgICAgICBpZiAo aXNfY2h1bmtlZF90cmFuc2ZlciAoaGFzaG9maGVhZGVycykpIHsKKysgICAgICAgICAgICAgICAg aWYgKGNvbm5wdHItPmNvbnRlbnRfbGVuZ3RoLmNsaWVudCAhPSAtMSkKKysgICAgICAgICAgICAg ICAgICAgICAgICAvKiByZXF1ZXN0IHNtdWdnbGluZywgc2VlIEdIIGlzc3VlICM2MDkgKi8KKysg ICAgICAgICAgICAgICAgICAgICAgICBvcmRlcmVkbWFwX3JlbW92ZSAoaGFzaG9maGVhZGVycywg ImNvbnRlbnQtbGVuZ3RoIik7CisrCisgICAgICAgICAgICAgICAgIGNvbm5wdHItPmNvbnRlbnRf bGVuZ3RoLmNsaWVudCA9IC0yOworKyAgICAgICAgfQorIAorICAgICAgICAgLyoKKyAgICAgICAg ICAqIFNlZSBpZiB0aGVyZSBpcyBhICJDb25uZWN0aW9uIiBoZWFkZXIuICBJZiBzbywgd2UgbmVl ZCB0byBkbyBhIGJpdAoKZGlmZiAtLWdpdCBhLzAwMDUtcmVxcy1wcmV2ZW50LW11bHRpcGxlLWNv bnRlbnQtbGVuZ3Rocy1nZXR0aW5nLWVtaXR0ZWQucGF0Y2ggYi8wMDA1LXJlcXMtcHJldmVudC1t dWx0aXBsZS1jb250ZW50LWxlbmd0aHMtZ2V0dGluZy1lbWl0dGVkLnBhdGNoCm5ldyBmaWxlIG1v ZGUgMTAwNjQ0CmluZGV4IDAwMDAwMDAuLmZiMDdiMWIKLS0tIC9kZXYvbnVsbAorKysgYi8wMDA1 LXJlcXMtcHJldmVudC1tdWx0aXBsZS1jb250ZW50LWxlbmd0aHMtZ2V0dGluZy1lbWl0dGVkLnBh dGNoCkBAIC0wLDAgKzEsMjkgQEAKK0Zyb20gNmY0ZmFlZWFmODhjNmQ1Y2QxZjk5OWYxZGRiMDA5 MzIyZWMxMThiMyBNb24gU2VwIDE3IDAwOjAwOjAwIDIwMDEKK0Zyb206IHJvZmwwciA8cm9mbDBy QHVzZXJzLm5vcmVwbHkuZ2l0aHViLmNvbT4KK0RhdGU6IFRodSwgNyBNYXkgMjAyNiAxNjozOTo0 OCArMDAwMAorU3ViamVjdDogW1BBVENIXSByZXFzOiBwcmV2ZW50IG11bHRpcGxlIGNvbnRlbnQt bGVuZ3RocyBnZXR0aW5nIGVtaXR0ZWQKKworYWRkcmVzc2luZyBwb2ludCAyIG9mICM2MDkKK2Zp eGVzIENWRS0yMDI2LTU0Mzg4CisKKyhjaGVycnkgcGlja2VkIGZyb20gY29tbWl0IDM2NGNkYjY3 ZTBlYTAwYThlNGE3MDM3ZTI2OTNlMDcxMWU4MTZhZGIpCistLS0KKyBzcmMvcmVxcy5jIHwgNSAr KysrKworIDEgZmlsZSBjaGFuZ2VkLCA1IGluc2VydGlvbnMoKykKKworZGlmZiAtLWdpdCBhL3Ny Yy9yZXFzLmMgYi9zcmMvcmVxcy5jCitpbmRleCAyNzA0MDQyLi45YzU3ODk1IDEwMDY0NAorLS0t IGEvc3JjL3JlcXMuYworKysrIGIvc3JjL3JlcXMuYworQEAgLTY2OCw2ICs2NjgsMTEgQEAgYWRk X2hlYWRlcl90b19jb25uZWN0aW9uIChvcmRlcmVkbWFwIGhhc2hvZmhlYWRlcnMsIGNoYXIgKmhl YWRlciwgc2l6ZV90IGxlbikKKyAgICAgICAgIC8qIENhbGN1bGF0ZSB0aGUgbmV3IGxlbmd0aCBv ZiBqdXN0IHRoZSBkYXRhICovCisgICAgICAgICBsZW4gLT0gc2VwIC0gaGVhZGVyIC0gMTsKKyAK KysgICAgICAgIC8qIHByZXZlbnQgbXVsdGlwbGUgY29udGVudC1sZW5ndGggaGVhZGVycyBmcm9t IGJlaW5nIGluc2VydGVkICovCisrICAgICAgICBpZiAoIXN0cmNhc2VjbXAoaGVhZGVyLCAiY29u dGVudC1sZW5ndGgiKSAmJgorKyAgICAgICAgICAgIG9yZGVyZWRtYXBfZmluZCAoaGFzaG9maGVh ZGVycywgImNvbnRlbnQtbGVuZ3RoIikpCisrICAgICAgICAgICAgICAgIHJldHVybiAwOworKwor ICAgICAgICAgcmV0dXJuIG9yZGVyZWRtYXBfYXBwZW5kIChoYXNob2ZoZWFkZXJzLCBoZWFkZXIs IHNlcCk7CisgfQorIAoKZGlmZiAtLWdpdCBhL3Rpbnlwcm94eS5zcGVjIGIvdGlueXByb3h5LnNw ZWMKaW5kZXggOWNmYWM5NS4uZjM4ZDEwNyAxMDA2NDQKLS0tIGEvdGlueXByb3h5LnNwZWMKKysr IGIvdGlueXByb3h5LnNwZWMKQEAgLTYsNyArNiw3IEBACiAKIE5hbWU6ICAgICAgICAgICB0aW55 cHJveHkKIFZlcnNpb246ICAgICAgICAxLjExLjIKLVJlbGVhc2U6ICAgICAgICA3JXs/ZGlzdH0K K1JlbGVhc2U6ICAgICAgICA4JXs/ZGlzdH0KIFN1bW1hcnk6ICAgICAgICBBIHNtYWxsLCBlZmZp Y2llbnQgSFRUUC9TU0wgcHJveHkgZGFlbW9uCiBMaWNlbnNlOiAgICAgICAgR1BMLTIuMC1vci1s YXRlcgogVVJMOiAgICAgICAgICAgIGh0dHBzOi8vdGlueXByb3h5LmdpdGh1Yi5pby8KQEAgLTIy LDYgKzIyLDEyIEBAIFBhdGNoMTogICAgICAgICAwMDAyLXJlcXMtY2hlY2stbmVnYXRpdmUtbGVu Z3RoLXZhbHVlcy1hbmQtcHJldmVudC1wb3RlbnRpYWwtaW50CiAjIENWRS0yMDI2LTMxODQyCiAj IGh0dHBzOi8vZ2l0aHViLmNvbS90aW55cHJveHkvdGlueXByb3h5L2NvbW1pdC84NzliZjg0NGFi ZmZhMGJmNWZhZTZhZmYwYzczMTc5MDI0ZGQ5Zjk4CiBQYXRjaDI6ICAgICAgICAgMDAwMy1yZXFz LWZpeC1jYXNlLXNlbnNpdGl2ZS1tYXRjaGluZy1vZi1jaHVua2VkLTYwNS5wYXRjaAorIyBDVkUt MjAyNi01NDM4NworIyBodHRwczovL2dpdGh1Yi5jb20vdGlueXByb3h5L3Rpbnlwcm94eS9jb21t aXQvNjIzYmZjMDkzZGYwMDkyOTZmMGI4NWQ0MGJjNjc3ZWY5ZDVjMDliYgorUGF0Y2gzOiAgICAg ICAgIDAwMDQtcmVxcy1wcmV2ZW50LXJlcXVlc3Qtc211Z2dsaW5nLXZpYS1ib3RoLWNvbnRlbnQt bGVuZ3RoLWFuZC1jaHVua2VkLnBhdGNoCisjIENWRS0yMDI2LTU0Mzg4CisjIGh0dHBzOi8vZ2l0 aHViLmNvbS90aW55cHJveHkvdGlueXByb3h5L2NvbW1pdC8zNjRjZGI2N2UwZWEwMGE4ZTRhNzAz N2UyNjkzZTA3MTFlODE2YWRiCitQYXRjaDQ6ICAgICAgICAgMDAwNS1yZXFzLXByZXZlbnQtbXVs dGlwbGUtY29udGVudC1sZW5ndGhzLWdldHRpbmctZW1pdHRlZC5wYXRjaAogCiBCdWlsZFJlcXVp cmVzOiAgbWFrZQogQnVpbGRSZXF1aXJlczogIGdjYwpAQCAtOTMsNiArOTksMTEgQEAgZXhpdCAw CiAKIAogJWNoYW5nZWxvZworKiBUaHUgSnVuIDE4IDIwMjYgQ2FybCBHZW9yZ2UgPGNhcmx3Z2Vv cmdlQGdtYWlsLmNvbT4gLSAxLjExLjItOAorLSBCYWNrcG9ydCB1cHN0cmVhbSBDVkUgZml4ZXMK Ky0gRml4ZXMgQ1ZFLTIwMjYtNTQzODcKKy0gRml4ZXMgQ1ZFLTIwMjYtNTQzODgKKwogKiBTYXQg QXByIDExIDIwMjYgQ2FybCBHZW9yZ2UgPGNhcmx3Z2VvcmdlQGZlZG9yYXByb2plY3Qub3JnPiAt IDEuMTEuMi03CiAtIEJhY2twb3J0IHVwc3RyZWFtIENWRSBmaXhlcwogLSBGaXhlcyBDVkUtMjAy Ni0zOTQ1Cg==