From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Carl George To: git-commits@fedoraproject.org Subject: [rpms/tinyproxy] epel9: Backport upstream CVE fixes Date: Thu, 18 Jun 2026 21:54:12 GMT Message-ID: <178181965249.1.6640080004857282355.rpms-tinyproxy-13ff057cb3f8@fedoraproject.org> List-ID: X-Git-Repo: rpms/tinyproxy X-Git-Branch: epel9 X-Git-Rev: 13ff057cb3f8e5c72b415e42ef1350ff48baaf8d ICAgICAgICAgICAgQSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KCiAgICAgICAgICAgIFJl cG8gICA6IHJwbXMvdGlueXByb3h5CiAgICAgICAgICAgIEJyYW5jaCA6IGVwZWw5CiAgICAgICAg ICAgIENvbW1pdCA6IDEzZmYwNTdjYjNmOGU1YzcyYjQxNWU0MmVmMTM1MGZmNDhiYWFmOGQKICAg ICAgICAgICAgQXV0aG9yIDogQ2FybCBHZW9yZ2UgPGNhcmx3Z2VvcmdlQGdtYWlsLmNvbT4KICAg ICAgICAgICAgRGF0ZSAgIDogMjAyNi0wNi0xOFQxNTo1MToxMi0wNTowMAogICAgICAgICAgICBT dGF0cyAgOiArNzQvLTEgaW4gMyBmaWxlKHMpCiAgICAgICAgICAgIFVSTCAgICA6IGh0dHBzOi8v c3JjLmZlZG9yYXByb2plY3Qub3JnL3JwbXMvdGlueXByb3h5L2MvMTNmZjA1N2NiM2Y4ZTVjNzJi NDE1ZTQyZWYxMzUwZmY0OGJhYWY4ZD9icmFuY2g9ZXBlbDkKCiAgICAgICAgICAgIExvZzoKICAg ICAgICAgICAgQmFja3BvcnQgdXBzdHJlYW0gQ1ZFIGZpeGVzCgotIEZpeGVzIENWRS0yMDI2LTU0 Mzg3Ci0gRml4ZXMgQ1ZFLTIwMjYtNTQzODgKCi0tLQpkaWZmIC0tZ2l0IGEvMDAwNC1yZXFzLXBy ZXZlbnQtcmVxdWVzdC1zbXVnZ2xpbmctdmlhLWJvdGgtY29udGVudC1sZW5ndGgtYW5kLWNodW5r ZWQucGF0Y2ggYi8wMDA0LXJlcXMtcHJldmVudC1yZXF1ZXN0LXNtdWdnbGluZy12aWEtYm90aC1j b250ZW50LWxlbmd0aC1hbmQtY2h1bmtlZC5wYXRjaApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRl eCAwMDAwMDAwLi5mMzljYzU0Ci0tLSAvZGV2L251bGwKKysrIGIvMDAwNC1yZXFzLXByZXZlbnQt cmVxdWVzdC1zbXVnZ2xpbmctdmlhLWJvdGgtY29udGVudC1sZW5ndGgtYW5kLWNodW5rZWQucGF0 Y2gKQEAgLTAsMCArMSwzMyBAQAorRnJvbSAwYjU2NjYzNDYxMTgxOTM3ZWRkMDljMmEyNmRjNWM2 YTgzYTVjMmYxIE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQorRnJvbTogcm9mbDByIDxyb2ZsMHJA dXNlcnMubm9yZXBseS5naXRodWIuY29tPgorRGF0ZTogVGh1LCA3IE1heSAyMDI2IDE2OjMzOjEx ICswMDAwCitTdWJqZWN0OiBbUEFUQ0hdIHJlcXM6IHByZXZlbnQgcmVxdWVzdCBzbXVnZ2xpbmcg dmlhIGJvdGggY29udGVudC1sZW5ndGggYW5kCisgY2h1bmtlZAorCithZGRyZXNzaW5nIHBvaW50 IDEgb2YgIzYwOQorZml4ZXMgQ1ZFLTIwMjYtNTQzODcKKworKGNoZXJyeSBwaWNrZWQgZnJvbSBj b21taXQgNjIzYmZjMDkzZGYwMDkyOTZmMGI4NWQ0MGJjNjc3ZWY5ZDVjMDliYikKKy0tLQorIHNy Yy9yZXFzLmMgfCA3ICsrKysrKy0KKyAxIGZpbGUgY2hhbmdlZCwgNiBpbnNlcnRpb25zKCspLCAx IGRlbGV0aW9uKC0pCisKK2RpZmYgLS1naXQgYS9zcmMvcmVxcy5jIGIvc3JjL3JlcXMuYworaW5k ZXggNmQyZTk0ZC4uMjcwNDA0MiAxMDA2NDQKKy0tLSBhL3NyYy9yZXFzLmMKKysrKyBiL3NyYy9y ZXFzLmMKK0BAIC05NDgsOCArOTQ4LDEzIEBAIHByb2Nlc3NfY2xpZW50X2hlYWRlcnMgKHN0cnVj dCBjb25uX3MgKmNvbm5wdHIsIG9yZGVyZWRtYXAgaGFzaG9maGVhZGVycykKKyAgICAgICAgIGNv bm5wdHItPmNvbnRlbnRfbGVuZ3RoLmNsaWVudCA9IGdldF9jb250ZW50X2xlbmd0aCAoaGFzaG9m aGVhZGVycyk7CisgCisgICAgICAgICAvKiBDaGVjayB3aGV0aGVyIGNsaWVudCBzZW5kcyBjaHVu a2VkIGRhdGEuICovCistICAgICAgICBpZiAoY29ubnB0ci0+Y29udGVudF9sZW5ndGguY2xpZW50 ID09IC0xICYmIGlzX2NodW5rZWRfdHJhbnNmZXIgKGhhc2hvZmhlYWRlcnMpKQorKyAgICAgICAg aWYgKGlzX2NodW5rZWRfdHJhbnNmZXIgKGhhc2hvZmhlYWRlcnMpKSB7CisrICAgICAgICAgICAg ICAgIGlmIChjb25ucHRyLT5jb250ZW50X2xlbmd0aC5jbGllbnQgIT0gLTEpCisrICAgICAgICAg ICAgICAgICAgICAgICAgLyogcmVxdWVzdCBzbXVnZ2xpbmcsIHNlZSBHSCBpc3N1ZSAjNjA5ICov CisrICAgICAgICAgICAgICAgICAgICAgICAgb3JkZXJlZG1hcF9yZW1vdmUgKGhhc2hvZmhlYWRl cnMsICJjb250ZW50LWxlbmd0aCIpOworKworICAgICAgICAgICAgICAgICBjb25ucHRyLT5jb250 ZW50X2xlbmd0aC5jbGllbnQgPSAtMjsKKysgICAgICAgIH0KKyAKKyAgICAgICAgIC8qCisgICAg ICAgICAgKiBTZWUgaWYgdGhlcmUgaXMgYSAiQ29ubmVjdGlvbiIgaGVhZGVyLiAgSWYgc28sIHdl IG5lZWQgdG8gZG8gYSBiaXQKCmRpZmYgLS1naXQgYS8wMDA1LXJlcXMtcHJldmVudC1tdWx0aXBs ZS1jb250ZW50LWxlbmd0aHMtZ2V0dGluZy1lbWl0dGVkLnBhdGNoIGIvMDAwNS1yZXFzLXByZXZl bnQtbXVsdGlwbGUtY29udGVudC1sZW5ndGhzLWdldHRpbmctZW1pdHRlZC5wYXRjaApuZXcgZmls ZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwLi5mYjA3YjFiCi0tLSAvZGV2L251bGwKKysrIGIv MDAwNS1yZXFzLXByZXZlbnQtbXVsdGlwbGUtY29udGVudC1sZW5ndGhzLWdldHRpbmctZW1pdHRl ZC5wYXRjaApAQCAtMCwwICsxLDI5IEBACitGcm9tIDZmNGZhZWVhZjg4YzZkNWNkMWY5OTlmMWRk YjAwOTMyMmVjMTE4YjMgTW9uIFNlcCAxNyAwMDowMDowMCAyMDAxCitGcm9tOiByb2ZsMHIgPHJv ZmwwckB1c2Vycy5ub3JlcGx5LmdpdGh1Yi5jb20+CitEYXRlOiBUaHUsIDcgTWF5IDIwMjYgMTY6 Mzk6NDggKzAwMDAKK1N1YmplY3Q6IFtQQVRDSF0gcmVxczogcHJldmVudCBtdWx0aXBsZSBjb250 ZW50LWxlbmd0aHMgZ2V0dGluZyBlbWl0dGVkCisKK2FkZHJlc3NpbmcgcG9pbnQgMiBvZiAjNjA5 CitmaXhlcyBDVkUtMjAyNi01NDM4OAorCisoY2hlcnJ5IHBpY2tlZCBmcm9tIGNvbW1pdCAzNjRj ZGI2N2UwZWEwMGE4ZTRhNzAzN2UyNjkzZTA3MTFlODE2YWRiKQorLS0tCisgc3JjL3JlcXMuYyB8 IDUgKysrKysKKyAxIGZpbGUgY2hhbmdlZCwgNSBpbnNlcnRpb25zKCspCisKK2RpZmYgLS1naXQg YS9zcmMvcmVxcy5jIGIvc3JjL3JlcXMuYworaW5kZXggMjcwNDA0Mi4uOWM1Nzg5NSAxMDA2NDQK Ky0tLSBhL3NyYy9yZXFzLmMKKysrKyBiL3NyYy9yZXFzLmMKK0BAIC02NjgsNiArNjY4LDExIEBA IGFkZF9oZWFkZXJfdG9fY29ubmVjdGlvbiAob3JkZXJlZG1hcCBoYXNob2ZoZWFkZXJzLCBjaGFy ICpoZWFkZXIsIHNpemVfdCBsZW4pCisgICAgICAgICAvKiBDYWxjdWxhdGUgdGhlIG5ldyBsZW5n dGggb2YganVzdCB0aGUgZGF0YSAqLworICAgICAgICAgbGVuIC09IHNlcCAtIGhlYWRlciAtIDE7 CisgCisrICAgICAgICAvKiBwcmV2ZW50IG11bHRpcGxlIGNvbnRlbnQtbGVuZ3RoIGhlYWRlcnMg ZnJvbSBiZWluZyBpbnNlcnRlZCAqLworKyAgICAgICAgaWYgKCFzdHJjYXNlY21wKGhlYWRlciwg ImNvbnRlbnQtbGVuZ3RoIikgJiYKKysgICAgICAgICAgICBvcmRlcmVkbWFwX2ZpbmQgKGhhc2hv ZmhlYWRlcnMsICJjb250ZW50LWxlbmd0aCIpKQorKyAgICAgICAgICAgICAgICByZXR1cm4gMDsK KysKKyAgICAgICAgIHJldHVybiBvcmRlcmVkbWFwX2FwcGVuZCAoaGFzaG9maGVhZGVycywgaGVh ZGVyLCBzZXApOworIH0KKyAKCmRpZmYgLS1naXQgYS90aW55cHJveHkuc3BlYyBiL3Rpbnlwcm94 eS5zcGVjCmluZGV4IDljZmFjOTUuLmYzOGQxMDcgMTAwNjQ0Ci0tLSBhL3Rpbnlwcm94eS5zcGVj CisrKyBiL3Rpbnlwcm94eS5zcGVjCkBAIC02LDcgKzYsNyBAQAogCiBOYW1lOiAgICAgICAgICAg dGlueXByb3h5CiBWZXJzaW9uOiAgICAgICAgMS4xMS4yCi1SZWxlYXNlOiAgICAgICAgNyV7P2Rp c3R9CitSZWxlYXNlOiAgICAgICAgOCV7P2Rpc3R9CiBTdW1tYXJ5OiAgICAgICAgQSBzbWFsbCwg ZWZmaWNpZW50IEhUVFAvU1NMIHByb3h5IGRhZW1vbgogTGljZW5zZTogICAgICAgIEdQTC0yLjAt b3ItbGF0ZXIKIFVSTDogICAgICAgICAgICBodHRwczovL3Rpbnlwcm94eS5naXRodWIuaW8vCkBA IC0yMiw2ICsyMiwxMiBAQCBQYXRjaDE6ICAgICAgICAgMDAwMi1yZXFzLWNoZWNrLW5lZ2F0aXZl LWxlbmd0aC12YWx1ZXMtYW5kLXByZXZlbnQtcG90ZW50aWFsLWludAogIyBDVkUtMjAyNi0zMTg0 MgogIyBodHRwczovL2dpdGh1Yi5jb20vdGlueXByb3h5L3Rpbnlwcm94eS9jb21taXQvODc5YmY4 NDRhYmZmYTBiZjVmYWU2YWZmMGM3MzE3OTAyNGRkOWY5OAogUGF0Y2gyOiAgICAgICAgIDAwMDMt cmVxcy1maXgtY2FzZS1zZW5zaXRpdmUtbWF0Y2hpbmctb2YtY2h1bmtlZC02MDUucGF0Y2gKKyMg Q1ZFLTIwMjYtNTQzODcKKyMgaHR0cHM6Ly9naXRodWIuY29tL3Rpbnlwcm94eS90aW55cHJveHkv Y29tbWl0LzYyM2JmYzA5M2RmMDA5Mjk2ZjBiODVkNDBiYzY3N2VmOWQ1YzA5YmIKK1BhdGNoMzog ICAgICAgICAwMDA0LXJlcXMtcHJldmVudC1yZXF1ZXN0LXNtdWdnbGluZy12aWEtYm90aC1jb250 ZW50LWxlbmd0aC1hbmQtY2h1bmtlZC5wYXRjaAorIyBDVkUtMjAyNi01NDM4OAorIyBodHRwczov L2dpdGh1Yi5jb20vdGlueXByb3h5L3Rpbnlwcm94eS9jb21taXQvMzY0Y2RiNjdlMGVhMDBhOGU0 YTcwMzdlMjY5M2UwNzExZTgxNmFkYgorUGF0Y2g0OiAgICAgICAgIDAwMDUtcmVxcy1wcmV2ZW50 LW11bHRpcGxlLWNvbnRlbnQtbGVuZ3Rocy1nZXR0aW5nLWVtaXR0ZWQucGF0Y2gKIAogQnVpbGRS ZXF1aXJlczogIG1ha2UKIEJ1aWxkUmVxdWlyZXM6ICBnY2MKQEAgLTkzLDYgKzk5LDExIEBAIGV4 aXQgMAogCiAKICVjaGFuZ2Vsb2cKKyogVGh1IEp1biAxOCAyMDI2IENhcmwgR2VvcmdlIDxjYXJs d2dlb3JnZUBnbWFpbC5jb20+IC0gMS4xMS4yLTgKKy0gQmFja3BvcnQgdXBzdHJlYW0gQ1ZFIGZp eGVzCistIEZpeGVzIENWRS0yMDI2LTU0Mzg3CistIEZpeGVzIENWRS0yMDI2LTU0Mzg4CisKICog U2F0IEFwciAxMSAyMDI2IENhcmwgR2VvcmdlIDxjYXJsd2dlb3JnZUBmZWRvcmFwcm9qZWN0Lm9y Zz4gLSAxLjExLjItNwogLSBCYWNrcG9ydCB1cHN0cmVhbSBDVkUgZml4ZXMKIC0gRml4ZXMgQ1ZF LTIwMjYtMzk0NQo=