From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Carl George To: git-commits@fedoraproject.org Subject: [rpms/tinyproxy] epel10.2: Backport upstream CVE fixes Date: Thu, 18 Jun 2026 21:53:50 GMT Message-ID: <178181963069.1.12613920362433639787.rpms-tinyproxy-13ff057cb3f8@fedoraproject.org> List-ID: X-Git-Repo: rpms/tinyproxy X-Git-Branch: epel10.2 X-Git-Rev: 13ff057cb3f8e5c72b415e42ef1350ff48baaf8d ICAgICAgICAgICAgQSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KCiAgICAgICAgICAgIFJl cG8gICA6IHJwbXMvdGlueXByb3h5CiAgICAgICAgICAgIEJyYW5jaCA6IGVwZWwxMC4yCiAgICAg ICAgICAgIENvbW1pdCA6IDEzZmYwNTdjYjNmOGU1YzcyYjQxNWU0MmVmMTM1MGZmNDhiYWFmOGQK ICAgICAgICAgICAgQXV0aG9yIDogQ2FybCBHZW9yZ2UgPGNhcmx3Z2VvcmdlQGdtYWlsLmNvbT4K ICAgICAgICAgICAgRGF0ZSAgIDogMjAyNi0wNi0xOFQxNTo1MToxMi0wNTowMAogICAgICAgICAg ICBTdGF0cyAgOiArNzQvLTEgaW4gMyBmaWxlKHMpCiAgICAgICAgICAgIFVSTCAgICA6IGh0dHBz Oi8vc3JjLmZlZG9yYXByb2plY3Qub3JnL3JwbXMvdGlueXByb3h5L2MvMTNmZjA1N2NiM2Y4ZTVj NzJiNDE1ZTQyZWYxMzUwZmY0OGJhYWY4ZD9icmFuY2g9ZXBlbDEwLjIKCiAgICAgICAgICAgIExv ZzoKICAgICAgICAgICAgQmFja3BvcnQgdXBzdHJlYW0gQ1ZFIGZpeGVzCgotIEZpeGVzIENWRS0y MDI2LTU0Mzg3Ci0gRml4ZXMgQ1ZFLTIwMjYtNTQzODgKCi0tLQpkaWZmIC0tZ2l0IGEvMDAwNC1y ZXFzLXByZXZlbnQtcmVxdWVzdC1zbXVnZ2xpbmctdmlhLWJvdGgtY29udGVudC1sZW5ndGgtYW5k LWNodW5rZWQucGF0Y2ggYi8wMDA0LXJlcXMtcHJldmVudC1yZXF1ZXN0LXNtdWdnbGluZy12aWEt Ym90aC1jb250ZW50LWxlbmd0aC1hbmQtY2h1bmtlZC5wYXRjaApuZXcgZmlsZSBtb2RlIDEwMDY0 NAppbmRleCAwMDAwMDAwLi5mMzljYzU0Ci0tLSAvZGV2L251bGwKKysrIGIvMDAwNC1yZXFzLXBy ZXZlbnQtcmVxdWVzdC1zbXVnZ2xpbmctdmlhLWJvdGgtY29udGVudC1sZW5ndGgtYW5kLWNodW5r ZWQucGF0Y2gKQEAgLTAsMCArMSwzMyBAQAorRnJvbSAwYjU2NjYzNDYxMTgxOTM3ZWRkMDljMmEy NmRjNWM2YTgzYTVjMmYxIE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQorRnJvbTogcm9mbDByIDxy b2ZsMHJAdXNlcnMubm9yZXBseS5naXRodWIuY29tPgorRGF0ZTogVGh1LCA3IE1heSAyMDI2IDE2 OjMzOjExICswMDAwCitTdWJqZWN0OiBbUEFUQ0hdIHJlcXM6IHByZXZlbnQgcmVxdWVzdCBzbXVn Z2xpbmcgdmlhIGJvdGggY29udGVudC1sZW5ndGggYW5kCisgY2h1bmtlZAorCithZGRyZXNzaW5n IHBvaW50IDEgb2YgIzYwOQorZml4ZXMgQ1ZFLTIwMjYtNTQzODcKKworKGNoZXJyeSBwaWNrZWQg ZnJvbSBjb21taXQgNjIzYmZjMDkzZGYwMDkyOTZmMGI4NWQ0MGJjNjc3ZWY5ZDVjMDliYikKKy0t LQorIHNyYy9yZXFzLmMgfCA3ICsrKysrKy0KKyAxIGZpbGUgY2hhbmdlZCwgNiBpbnNlcnRpb25z KCspLCAxIGRlbGV0aW9uKC0pCisKK2RpZmYgLS1naXQgYS9zcmMvcmVxcy5jIGIvc3JjL3JlcXMu YworaW5kZXggNmQyZTk0ZC4uMjcwNDA0MiAxMDA2NDQKKy0tLSBhL3NyYy9yZXFzLmMKKysrKyBi L3NyYy9yZXFzLmMKK0BAIC05NDgsOCArOTQ4LDEzIEBAIHByb2Nlc3NfY2xpZW50X2hlYWRlcnMg KHN0cnVjdCBjb25uX3MgKmNvbm5wdHIsIG9yZGVyZWRtYXAgaGFzaG9maGVhZGVycykKKyAgICAg ICAgIGNvbm5wdHItPmNvbnRlbnRfbGVuZ3RoLmNsaWVudCA9IGdldF9jb250ZW50X2xlbmd0aCAo aGFzaG9maGVhZGVycyk7CisgCisgICAgICAgICAvKiBDaGVjayB3aGV0aGVyIGNsaWVudCBzZW5k cyBjaHVua2VkIGRhdGEuICovCistICAgICAgICBpZiAoY29ubnB0ci0+Y29udGVudF9sZW5ndGgu Y2xpZW50ID09IC0xICYmIGlzX2NodW5rZWRfdHJhbnNmZXIgKGhhc2hvZmhlYWRlcnMpKQorKyAg ICAgICAgaWYgKGlzX2NodW5rZWRfdHJhbnNmZXIgKGhhc2hvZmhlYWRlcnMpKSB7CisrICAgICAg ICAgICAgICAgIGlmIChjb25ucHRyLT5jb250ZW50X2xlbmd0aC5jbGllbnQgIT0gLTEpCisrICAg ICAgICAgICAgICAgICAgICAgICAgLyogcmVxdWVzdCBzbXVnZ2xpbmcsIHNlZSBHSCBpc3N1ZSAj NjA5ICovCisrICAgICAgICAgICAgICAgICAgICAgICAgb3JkZXJlZG1hcF9yZW1vdmUgKGhhc2hv ZmhlYWRlcnMsICJjb250ZW50LWxlbmd0aCIpOworKworICAgICAgICAgICAgICAgICBjb25ucHRy LT5jb250ZW50X2xlbmd0aC5jbGllbnQgPSAtMjsKKysgICAgICAgIH0KKyAKKyAgICAgICAgIC8q CisgICAgICAgICAgKiBTZWUgaWYgdGhlcmUgaXMgYSAiQ29ubmVjdGlvbiIgaGVhZGVyLiAgSWYg c28sIHdlIG5lZWQgdG8gZG8gYSBiaXQKCmRpZmYgLS1naXQgYS8wMDA1LXJlcXMtcHJldmVudC1t dWx0aXBsZS1jb250ZW50LWxlbmd0aHMtZ2V0dGluZy1lbWl0dGVkLnBhdGNoIGIvMDAwNS1yZXFz LXByZXZlbnQtbXVsdGlwbGUtY29udGVudC1sZW5ndGhzLWdldHRpbmctZW1pdHRlZC5wYXRjaApu ZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwLi5mYjA3YjFiCi0tLSAvZGV2L251bGwK KysrIGIvMDAwNS1yZXFzLXByZXZlbnQtbXVsdGlwbGUtY29udGVudC1sZW5ndGhzLWdldHRpbmct ZW1pdHRlZC5wYXRjaApAQCAtMCwwICsxLDI5IEBACitGcm9tIDZmNGZhZWVhZjg4YzZkNWNkMWY5 OTlmMWRkYjAwOTMyMmVjMTE4YjMgTW9uIFNlcCAxNyAwMDowMDowMCAyMDAxCitGcm9tOiByb2Zs MHIgPHJvZmwwckB1c2Vycy5ub3JlcGx5LmdpdGh1Yi5jb20+CitEYXRlOiBUaHUsIDcgTWF5IDIw MjYgMTY6Mzk6NDggKzAwMDAKK1N1YmplY3Q6IFtQQVRDSF0gcmVxczogcHJldmVudCBtdWx0aXBs ZSBjb250ZW50LWxlbmd0aHMgZ2V0dGluZyBlbWl0dGVkCisKK2FkZHJlc3NpbmcgcG9pbnQgMiBv ZiAjNjA5CitmaXhlcyBDVkUtMjAyNi01NDM4OAorCisoY2hlcnJ5IHBpY2tlZCBmcm9tIGNvbW1p dCAzNjRjZGI2N2UwZWEwMGE4ZTRhNzAzN2UyNjkzZTA3MTFlODE2YWRiKQorLS0tCisgc3JjL3Jl cXMuYyB8IDUgKysrKysKKyAxIGZpbGUgY2hhbmdlZCwgNSBpbnNlcnRpb25zKCspCisKK2RpZmYg LS1naXQgYS9zcmMvcmVxcy5jIGIvc3JjL3JlcXMuYworaW5kZXggMjcwNDA0Mi4uOWM1Nzg5NSAx MDA2NDQKKy0tLSBhL3NyYy9yZXFzLmMKKysrKyBiL3NyYy9yZXFzLmMKK0BAIC02NjgsNiArNjY4 LDExIEBAIGFkZF9oZWFkZXJfdG9fY29ubmVjdGlvbiAob3JkZXJlZG1hcCBoYXNob2ZoZWFkZXJz LCBjaGFyICpoZWFkZXIsIHNpemVfdCBsZW4pCisgICAgICAgICAvKiBDYWxjdWxhdGUgdGhlIG5l dyBsZW5ndGggb2YganVzdCB0aGUgZGF0YSAqLworICAgICAgICAgbGVuIC09IHNlcCAtIGhlYWRl ciAtIDE7CisgCisrICAgICAgICAvKiBwcmV2ZW50IG11bHRpcGxlIGNvbnRlbnQtbGVuZ3RoIGhl YWRlcnMgZnJvbSBiZWluZyBpbnNlcnRlZCAqLworKyAgICAgICAgaWYgKCFzdHJjYXNlY21wKGhl YWRlciwgImNvbnRlbnQtbGVuZ3RoIikgJiYKKysgICAgICAgICAgICBvcmRlcmVkbWFwX2ZpbmQg KGhhc2hvZmhlYWRlcnMsICJjb250ZW50LWxlbmd0aCIpKQorKyAgICAgICAgICAgICAgICByZXR1 cm4gMDsKKysKKyAgICAgICAgIHJldHVybiBvcmRlcmVkbWFwX2FwcGVuZCAoaGFzaG9maGVhZGVy cywgaGVhZGVyLCBzZXApOworIH0KKyAKCmRpZmYgLS1naXQgYS90aW55cHJveHkuc3BlYyBiL3Rp bnlwcm94eS5zcGVjCmluZGV4IDljZmFjOTUuLmYzOGQxMDcgMTAwNjQ0Ci0tLSBhL3Rpbnlwcm94 eS5zcGVjCisrKyBiL3Rpbnlwcm94eS5zcGVjCkBAIC02LDcgKzYsNyBAQAogCiBOYW1lOiAgICAg ICAgICAgdGlueXByb3h5CiBWZXJzaW9uOiAgICAgICAgMS4xMS4yCi1SZWxlYXNlOiAgICAgICAg NyV7P2Rpc3R9CitSZWxlYXNlOiAgICAgICAgOCV7P2Rpc3R9CiBTdW1tYXJ5OiAgICAgICAgQSBz bWFsbCwgZWZmaWNpZW50IEhUVFAvU1NMIHByb3h5IGRhZW1vbgogTGljZW5zZTogICAgICAgIEdQ TC0yLjAtb3ItbGF0ZXIKIFVSTDogICAgICAgICAgICBodHRwczovL3Rpbnlwcm94eS5naXRodWIu aW8vCkBAIC0yMiw2ICsyMiwxMiBAQCBQYXRjaDE6ICAgICAgICAgMDAwMi1yZXFzLWNoZWNrLW5l Z2F0aXZlLWxlbmd0aC12YWx1ZXMtYW5kLXByZXZlbnQtcG90ZW50aWFsLWludAogIyBDVkUtMjAy Ni0zMTg0MgogIyBodHRwczovL2dpdGh1Yi5jb20vdGlueXByb3h5L3Rpbnlwcm94eS9jb21taXQv ODc5YmY4NDRhYmZmYTBiZjVmYWU2YWZmMGM3MzE3OTAyNGRkOWY5OAogUGF0Y2gyOiAgICAgICAg IDAwMDMtcmVxcy1maXgtY2FzZS1zZW5zaXRpdmUtbWF0Y2hpbmctb2YtY2h1bmtlZC02MDUucGF0 Y2gKKyMgQ1ZFLTIwMjYtNTQzODcKKyMgaHR0cHM6Ly9naXRodWIuY29tL3Rpbnlwcm94eS90aW55 cHJveHkvY29tbWl0LzYyM2JmYzA5M2RmMDA5Mjk2ZjBiODVkNDBiYzY3N2VmOWQ1YzA5YmIKK1Bh dGNoMzogICAgICAgICAwMDA0LXJlcXMtcHJldmVudC1yZXF1ZXN0LXNtdWdnbGluZy12aWEtYm90 aC1jb250ZW50LWxlbmd0aC1hbmQtY2h1bmtlZC5wYXRjaAorIyBDVkUtMjAyNi01NDM4OAorIyBo dHRwczovL2dpdGh1Yi5jb20vdGlueXByb3h5L3Rpbnlwcm94eS9jb21taXQvMzY0Y2RiNjdlMGVh MDBhOGU0YTcwMzdlMjY5M2UwNzExZTgxNmFkYgorUGF0Y2g0OiAgICAgICAgIDAwMDUtcmVxcy1w cmV2ZW50LW11bHRpcGxlLWNvbnRlbnQtbGVuZ3Rocy1nZXR0aW5nLWVtaXR0ZWQucGF0Y2gKIAog QnVpbGRSZXF1aXJlczogIG1ha2UKIEJ1aWxkUmVxdWlyZXM6ICBnY2MKQEAgLTkzLDYgKzk5LDEx IEBAIGV4aXQgMAogCiAKICVjaGFuZ2Vsb2cKKyogVGh1IEp1biAxOCAyMDI2IENhcmwgR2Vvcmdl IDxjYXJsd2dlb3JnZUBnbWFpbC5jb20+IC0gMS4xMS4yLTgKKy0gQmFja3BvcnQgdXBzdHJlYW0g Q1ZFIGZpeGVzCistIEZpeGVzIENWRS0yMDI2LTU0Mzg3CistIEZpeGVzIENWRS0yMDI2LTU0Mzg4 CisKICogU2F0IEFwciAxMSAyMDI2IENhcmwgR2VvcmdlIDxjYXJsd2dlb3JnZUBmZWRvcmFwcm9q ZWN0Lm9yZz4gLSAxLjExLjItNwogLSBCYWNrcG9ydCB1cHN0cmVhbSBDVkUgZml4ZXMKIC0gRml4 ZXMgQ1ZFLTIwMjYtMzk0NQo=