From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Mikel Olasagasti Uranga To: git-commits@fedoraproject.org Subject: [rpms/libssh2] rawhide: Fix CVE-2026-55200 & CVE-2026-55199 Date: Wed, 24 Jun 2026 16:29:57 GMT Message-ID: <178231859725.1.4593286685757877769.rpms-libssh2-f3f46cd0ce45@fedoraproject.org> List-ID: X-Git-Repo: rpms/libssh2 X-Git-Branch: rawhide X-Git-Rev: f3f46cd0ce4519b6f464431480a1764a63d12fa9 QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvbGlic3NoMgpCcmFu Y2ggOiByYXdoaWRlCkNvbW1pdCA6IGYzZjQ2Y2QwY2U0NTE5YjZmNDY0NDMxNDgwYTE3NjRhNjNk MTJmYTkKQXV0aG9yIDogTWlrZWwgT2xhc2FnYXN0aSBVcmFuZ2EgPG1pa2VsQG9sYXNhZ2FzdGku aW5mbz4KRGF0ZSAgIDogMjAyNi0wNi0yM1QxODoxMDoyOSswMjowMApTdGF0cyAgOiArODMvLTEg aW4gMyBmaWxlKHMpClVSTCAgICA6IGh0dHBzOi8vc3JjLmZlZG9yYXByb2plY3Qub3JnL3JwbXMv bGlic3NoMi9jL2YzZjQ2Y2QwY2U0NTE5YjZmNDY0NDMxNDgwYTE3NjRhNjNkMTJmYTk/YnJhbmNo PXJhd2hpZGUKCkxvZzoKRml4IENWRS0yMDI2LTU1MjAwICYgQ1ZFLTIwMjYtNTUxOTkKCi0tLQpk aWZmIC0tZ2l0IGEvMTc2MjY4NTdkMjBiM2M5YTFhZGRmYTQ1OTc5ZGFkY2VlMWNkODRhNC5wYXRj aCBiLzE3NjI2ODU3ZDIwYjNjOWExYWRkZmE0NTk3OWRhZGNlZTFjZDg0YTQucGF0Y2gKbmV3IGZp bGUgbW9kZSAxMDA2NDQKaW5kZXggMDAwMDAwMC4uMDY1MjdkOAotLS0gL2Rldi9udWxsCisrKyBi LzE3NjI2ODU3ZDIwYjNjOWExYWRkZmE0NTk3OWRhZGNlZTFjZDg0YTQucGF0Y2gKQEAgLTAsMCAr MSwzOSBAQAorRnJvbSAxNzYyNjg1N2QyMGIzYzlhMWFkZGZhNDU5NzlkYWRjZWUxY2Q4NGE0IE1v biBTZXAgMTcgMDA6MDA6MDAgMjAwMQorRnJvbTogVHJpc3RhbkluU2VjIDx0cmlzdGFuLm10bkBn bWFpbC5jb20+CitEYXRlOiBXZWQsIDE1IEFwciAyMDI2IDE0OjUxOjA4IC0wNDAwCitTdWJqZWN0 OiBbUEFUQ0hdIHBhY2tldDogY2hlY2sgYF9saWJzc2gyX2dldF9zdHJpbmcoKWAgcmV0dXJuIGlu IGBFWFRfSU5GT2AKKyBoYW5kbGVyCisKK1RoZSBgU1NIX01TR19FWFRfSU5GT2AgaGFuZGxlciBk aXNjYXJkcyB0aGUgcmV0dXJuIHZhbHVlcyBmcm9tCitgX2xpYnNzaDJfZ2V0X3N0cmluZygpYCB3 aGVuIHBhcnNpbmcgZXh0ZW5zaW9uIG5hbWUvdmFsdWUgcGFpcnMuIFdoZW4KK3RoZSBidWZmZXIg aXMgZXhoYXVzdGVkIGJlZm9yZSBhbGwgY2xhaW1lZCBleHRlbnNpb25zIGFyZSBwYXJzZWQsCit0 aGUgbG9vcCBjb250aW51ZXMgd2l0aCBuby1vcCBpdGVyYXRpb25zIHVudGlsIGBucl9leHRlbnNp b25zYCByZWFjaGVzCit6ZXJvLgorCitUaGUgYG5yX2V4dGVuc2lvbnMgPj0gMTAyNGAgY2FwIGxp bWl0cyB0aGUgd29yc3QgY2FzZSwgYnV0IHRoZSBsb29wCitzaG91bGQgc3RpbGwgYnJlYWsgb24g cGFyc2UgZmFpbHVyZSBmb3IgY29ycmVjdG5lc3MgYW5kIGNvbnNpc3RlbmN5Cit3aXRoIG90aGVy IHBhcnNlcnMgaW4gdGhpcyBmaWxlIChlLmcuIGBTU0hfTVNHX0NIQU5ORUxfT1BFTmAsCitgU1NI X01TR19LRVhJTklUYCkgdGhhdCBjaGVjayBgX2xpYnNzaDJfZ2V0X3N0cmluZygpYCByZXR1cm4g dmFsdWVzLgorCitDbG9zZXMgIzE4NjQKKy0tLQorIHNyYy9wYWNrZXQuYyB8IDYgKysrKy0tCisg MSBmaWxlIGNoYW5nZWQsIDQgaW5zZXJ0aW9ucygrKSwgMiBkZWxldGlvbnMoLSkKKworZGlmZiAt LWdpdCBhL3NyYy9wYWNrZXQuYyBiL3NyYy9wYWNrZXQuYworaW5kZXggYWU4NjM2NWQyYS4uOGE3 YTBkMjY5MCAxMDA2NDQKKy0tLSBhL3NyYy9wYWNrZXQuYworKysrIGIvc3JjL3BhY2tldC5jCitA QCAtODkwLDggKzg5MCwxMCBAQCBfbGlic3NoMl9wYWNrZXRfYWRkKExJQlNTSDJfU0VTU0lPTiAq IHNlc3Npb24sIHVuc2lnbmVkIGNoYXIgKmRhdGEsCisgCisgICAgICAgICAgICAgICAgICAgICBu cl9leHRlbnNpb25zIC09IDE7CisgCistICAgICAgICAgICAgICAgICAgICBfbGlic3NoMl9nZXRf c3RyaW5nKCZidWYsICZuYW1lLCAmbmFtZV9sZW4pOworLSAgICAgICAgICAgICAgICAgICAgX2xp YnNzaDJfZ2V0X3N0cmluZygmYnVmLCAmdmFsdWUsICZ2YWx1ZV9sZW4pOworKyAgICAgICAgICAg ICAgICAgICAgaWYoX2xpYnNzaDJfZ2V0X3N0cmluZygmYnVmLCAmbmFtZSwgJm5hbWVfbGVuKSkK KysgICAgICAgICAgICAgICAgICAgICAgICBicmVhazsKKysgICAgICAgICAgICAgICAgICAgIGlm KF9saWJzc2gyX2dldF9zdHJpbmcoJmJ1ZiwgJnZhbHVlLCAmdmFsdWVfbGVuKSkKKysgICAgICAg ICAgICAgICAgICAgICAgICBicmVhazsKKyAKKyAgICAgICAgICAgICAgICAgICAgIGlmKG5hbWUg JiYgdmFsdWUpIHsKKyAgICAgICAgICAgICAgICAgICAgICAgICBfbGlic3NoMl9kZWJ1Zygoc2Vz c2lvbiwKCmRpZmYgLS1naXQgYS85N2FjZjNkZmRhODBjOTFjM2E4YzlmMjM3MjU0NjMwMWQ0YTFh N2E4LWxpYnNzaDItMS4xMS4xLnBhdGNoIGIvOTdhY2YzZGZkYTgwYzkxYzNhOGM5ZjIzNzI1NDYz MDFkNGExYTdhOC1saWJzc2gyLTEuMTEuMS5wYXRjaApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRl eCAwMDAwMDAwLi5kZmZjMzhhCi0tLSAvZGV2L251bGwKKysrIGIvOTdhY2YzZGZkYTgwYzkxYzNh OGM5ZjIzNzI1NDYzMDFkNGExYTdhOC1saWJzc2gyLTEuMTEuMS5wYXRjaApAQCAtMCwwICsxLDMx IEBACitGcm9tIDk3YWNmM2RmZGE4MGM5MWMzYThjOWYyMzcyNTQ2MzAxZDRhMWE3YTggTW9uIFNl cCAxNyAwMDowMDowMCAyMDAxCitGcm9tOiBXaWxsIENvc2dyb3ZlIDx3aWxsQHBhbmljLmNvbT4K K0RhdGU6IEZyaSwgMTIgSnVuIDIwMjYgMTU6NTc6NDQgLTA3MDAKK1N1YmplY3Q6IFtQQVRDSF0g dHJhbnNwb3J0LmM6IEFkZGl0aW9uYWwgYm91bmRhcnkgY2hlY2tzIGZvciBwYWNrZXQgbGVuZ3Ro CisgKCMyMDUyKQorCitBZGQgYWRkaXRpb25hbCBib3VuZHMgY2hlY2tpbmcgb24gcGFja2V0IGxl bmd0aCB0byBwcmV2ZW50IE9PQiB3cml0ZS4KKworQ3JlZGl0OiBbVHJpc3RhbkluU2VjXShodHRw czovL2dpdGh1Yi5jb20vVHJpc3RhbkluU2VjKQorLS0tCisgc3JjL3RyYW5zcG9ydC5jIHwgNiAr KysrKy0KKyAxIGZpbGUgY2hhbmdlZCwgNSBpbnNlcnRpb25zKCspLCAxIGRlbGV0aW9uKC0pCisK K2RpZmYgLS1naXQgYS9zcmMvdHJhbnNwb3J0LmMgYi9zcmMvdHJhbnNwb3J0LmMKK2luZGV4IDg2 OWZjNWE0ZmEuLjc5MjVhZDMzZDEgMTAwNjQ0CistLS0gYS9zcmMvdHJhbnNwb3J0LmMKKysrKyBi L3NyYy90cmFuc3BvcnQuYworQEAgLTY0MSw4ICs2NDEsMTIgQEAgaW50IF9saWJzc2gyX3RyYW5z cG9ydF9yZWFkKExJQlNTSDJfU0VTU0lPTiAqIHNlc3Npb24pCisgCisgICAgICAgICAgICAgICAg IHAtPnBhY2tldF9sZW5ndGggPSBfbGlic3NoMl9udG9odTMyKGJsb2NrKTsKKy0gICAgICAgICAg ICAgICAgaWYocC0+cGFja2V0X2xlbmd0aCA8IDEpCisrICAgICAgICAgICAgICAgIGlmKHAtPnBh Y2tldF9sZW5ndGggPCAxKSB7CisgICAgICAgICAgICAgICAgICAgICByZXR1cm4gTElCU1NIMl9F UlJPUl9ERUNSWVBUOworKyAgICAgICAgICAgICAgICB9CisrICAgICAgICAgICAgICAgIGVsc2Ug aWYocC0+cGFja2V0X2xlbmd0aCA+IExJQlNTSDJfUEFDS0VUX01BWFBBWUxPQUQpIHsKKysgICAg ICAgICAgICAgICAgICAgIHJldHVybiBMSUJTU0gyX0VSUk9SX09VVF9PRl9CT1VOREFSWTsKKysg ICAgICAgICAgICAgICAgfQorIAorICAgICAgICAgICAgICAgICAvKiB0b3RhbF9udW0gbWF5IGlu Y2x1ZGUgc2l6ZSBmaWVsZCwgaG93ZXZlciBkdWUgdG8gZXhpc3RpbmcKKyAgICAgICAgICAgICAg ICAgICogbG9naWMgaXQgbmVlZHMgdG8gYmUgcmVtb3ZlZCBhZnRlciB0aGUgZW50aXJlIHBhY2tl dCBpcyByZWFkCisgICAgICAgICAgICAgICAgICAqLwoKZGlmZiAtLWdpdCBhL2xpYnNzaDIuc3Bl YyBiL2xpYnNzaDIuc3BlYwppbmRleCAyMzg4NTVjLi5kYzJmY2Y2IDEwMDY0NAotLS0gYS9saWJz c2gyLnNwZWMKKysrIGIvbGlic3NoMi5zcGVjCkBAIC02LDcgKzYsNyBAQAogCiBOYW1lOgkJbGli c3NoMgogVmVyc2lvbjoJMS4xMS4xCi1SZWxlYXNlOgk3JXs/ZGlzdH0KK1JlbGVhc2U6CTglez9k aXN0fQogU3VtbWFyeToJQSBsaWJyYXJ5IGltcGxlbWVudGluZyB0aGUgU1NIMiBwcm90b2NvbAog TGljZW5zZToJQlNELTMtQ2xhdXNlCiBVUkw6CQlodHRwczovL3d3dy5saWJzc2gyLm9yZy8KQEAg LTE1LDYgKzE1LDggQEAgU291cmNlMToJaHR0cHM6Ly9saWJzc2gyLm9yZy9kb3dubG9hZC9saWJz c2gyLSV7dmVyc2lvbn0udGFyLmd6LmFzYwogIyBEYW5pZWwgU3RlbmJlcmcncyBHUEcga2V5czsg bGlua2VkIGZyb20gaHR0cHM6Ly9kYW5pZWwuaGF4eC5zZS9hZGRyZXNzLmh0bWwKIFNvdXJjZTI6 CWh0dHBzOi8vZGFuaWVsLmhheHguc2UvbXlrZXkuYXNjCiBQYXRjaDA6CQlsaWJzc2gyLTEuMTEu MS1DVkUtMjAyNi03NTk4LnBhdGNoCitQYXRjaDE6CQk5N2FjZjNkZmRhODBjOTFjM2E4YzlmMjM3 MjU0NjMwMWQ0YTFhN2E4LWxpYnNzaDItMS4xMS4xLnBhdGNoCitQYXRjaDI6CQkxNzYyNjg1N2Qy MGIzYzlhMWFkZGZhNDU5NzlkYWRjZWUxY2Q4NGE0LnBhdGNoCiAKIEJ1aWxkUmVxdWlyZXM6CWNv cmV1dGlscwogQnVpbGRSZXF1aXJlczoJZmluZHV0aWxzCkBAIC02Niw2ICs2OCwxMyBAQCBkZXZl bG9waW5nIGFwcGxpY2F0aW9ucyB0aGF0IHVzZSBsaWJzc2gyLgogIyBDVkUtMjAyNi03NTk4IGxp YnNzaDI6IGludGVnZXIgb3ZlcmZsb3cgdmlhIGxhcmdlIHVzZXJuYW1lIG9yIHBhc3N3b3JkIGFy Z3VtZW50cwogIyBodHRwczovL2dpdGh1Yi5jb20vbGlic3NoMi9saWJzc2gyL3B1bGwvMTg1OAog JXBhdGNoIC1QMAorIyBDVkUtMjAyNi01NTIwMCB0cmFuc3BvcnQuYzogQWRkaXRpb25hbCBib3Vu ZGFyeSBjaGVja3MgZm9yIHBhY2tldCBsZW5ndGgKKyMgUGF0Y2ggbW9kaWZpZWQgZm9yIGRvd25z dHJlYW0KKyMgaHR0cHM6Ly9naXRodWIuY29tL2xpYnNzaDIvbGlic3NoMi9wdWxsLzIwNTIKKyVw YXRjaCAtcDEgLVAxCisjIENWRS0yMDI2LTU1MTk5IHBhY2tldC5jOiBjaGVjayBfbGlic3NoMl9n ZXRfc3RyaW5nKCkgcmV0dXJuIGluIEVYVF9JTkZPIGhhbmRsZXIKKyMgaHR0cHM6Ly9naXRodWIu Y29tL2xpYnNzaDIvbGlic3NoMi9wdWxsLzE4NjQKKyVwYXRjaCAtcDEgLVAyCiAKICMgUmVwbGFj ZSBoYXJkIHdpcmVkIHBvcnQgbnVtYmVyIGluIHRoZSB0ZXN0IHN1aXRlIHRvIGF2b2lkIGNvbGxp c2lvbnMKICMgYmV0d2VlbiAzMi1iaXQgYW5kIDY0LWJpdCBidWlsZHMgcnVubmluZyBvbiBhIHNp bmdsZSBidWlsZC1ob3N0CkBAIC0xMjEsNiArMTMwLDkgQEAgTENfQUxMPWVuX1VTLlVURi04IG1h a2UgLUMgdGVzdHMgY2hlY2sKICV7X2xpYmRpcn0vcGtnY29uZmlnL2xpYnNzaDIucGMKIAogJWNo YW5nZWxvZworKiBUdWUgSnVuIDIzIDIwMjYgTWlrZWwgT2xhc2FnYXN0aSBVcmFuZ2EgPG1pa2Vs QG9sYXNhZ2FzdGkuaW5mbz4gLSAxLjExLjEtOAorLSBGaXggQ1ZFLTIwMjYtNTUyMDAgJiBDVkUt MjAyNi01NTE5OQorCiAqIEZyaSBKdW4gMTIgMjAyNiBZYWFrb3YgU2Vsa293aXR6IDx5c2Vsa293 aUByZWRoYXQuY29tPiAtIDEuMTEuMS03CiAtIFJlYnVpbHQgZm9yIG9wZW5zc2wgNC4wCiAK