From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Mikel Olasagasti Uranga To: git-commits@fedoraproject.org Subject: [rpms/libssh2] f43: Fix CVE-2026-55200 & CVE-2026-55199 Date: Wed, 24 Jun 2026 16:53:23 GMT Message-ID: <178232000310.1.3493084244659627553.rpms-libssh2-f3f46cd0ce45@fedoraproject.org> List-ID: X-Git-Repo: rpms/libssh2 X-Git-Branch: f43 X-Git-Rev: f3f46cd0ce4519b6f464431480a1764a63d12fa9 QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvbGlic3NoMgpCcmFu Y2ggOiBmNDMKQ29tbWl0IDogZjNmNDZjZDBjZTQ1MTliNmY0NjQ0MzE0ODBhMTc2NGE2M2QxMmZh OQpBdXRob3IgOiBNaWtlbCBPbGFzYWdhc3RpIFVyYW5nYSA8bWlrZWxAb2xhc2FnYXN0aS5pbmZv PgpEYXRlICAgOiAyMDI2LTA2LTIzVDE4OjEwOjI5KzAyOjAwClN0YXRzICA6ICs4My8tMSBpbiAz IGZpbGUocykKVVJMICAgIDogaHR0cHM6Ly9zcmMuZmVkb3JhcHJvamVjdC5vcmcvcnBtcy9saWJz c2gyL2MvZjNmNDZjZDBjZTQ1MTliNmY0NjQ0MzE0ODBhMTc2NGE2M2QxMmZhOT9icmFuY2g9ZjQz CgpMb2c6CkZpeCBDVkUtMjAyNi01NTIwMCAmIENWRS0yMDI2LTU1MTk5CgotLS0KZGlmZiAtLWdp dCBhLzE3NjI2ODU3ZDIwYjNjOWExYWRkZmE0NTk3OWRhZGNlZTFjZDg0YTQucGF0Y2ggYi8xNzYy Njg1N2QyMGIzYzlhMWFkZGZhNDU5NzlkYWRjZWUxY2Q4NGE0LnBhdGNoCm5ldyBmaWxlIG1vZGUg MTAwNjQ0CmluZGV4IDAwMDAwMDAuLjA2NTI3ZDgKLS0tIC9kZXYvbnVsbAorKysgYi8xNzYyNjg1 N2QyMGIzYzlhMWFkZGZhNDU5NzlkYWRjZWUxY2Q4NGE0LnBhdGNoCkBAIC0wLDAgKzEsMzkgQEAK K0Zyb20gMTc2MjY4NTdkMjBiM2M5YTFhZGRmYTQ1OTc5ZGFkY2VlMWNkODRhNCBNb24gU2VwIDE3 IDAwOjAwOjAwIDIwMDEKK0Zyb206IFRyaXN0YW5JblNlYyA8dHJpc3Rhbi5tdG5AZ21haWwuY29t PgorRGF0ZTogV2VkLCAxNSBBcHIgMjAyNiAxNDo1MTowOCAtMDQwMAorU3ViamVjdDogW1BBVENI XSBwYWNrZXQ6IGNoZWNrIGBfbGlic3NoMl9nZXRfc3RyaW5nKClgIHJldHVybiBpbiBgRVhUX0lO Rk9gCisgaGFuZGxlcgorCitUaGUgYFNTSF9NU0dfRVhUX0lORk9gIGhhbmRsZXIgZGlzY2FyZHMg dGhlIHJldHVybiB2YWx1ZXMgZnJvbQorYF9saWJzc2gyX2dldF9zdHJpbmcoKWAgd2hlbiBwYXJz aW5nIGV4dGVuc2lvbiBuYW1lL3ZhbHVlIHBhaXJzLiBXaGVuCit0aGUgYnVmZmVyIGlzIGV4aGF1 c3RlZCBiZWZvcmUgYWxsIGNsYWltZWQgZXh0ZW5zaW9ucyBhcmUgcGFyc2VkLAordGhlIGxvb3Ag Y29udGludWVzIHdpdGggbm8tb3AgaXRlcmF0aW9ucyB1bnRpbCBgbnJfZXh0ZW5zaW9uc2AgcmVh Y2hlcworemVyby4KKworVGhlIGBucl9leHRlbnNpb25zID49IDEwMjRgIGNhcCBsaW1pdHMgdGhl IHdvcnN0IGNhc2UsIGJ1dCB0aGUgbG9vcAorc2hvdWxkIHN0aWxsIGJyZWFrIG9uIHBhcnNlIGZh aWx1cmUgZm9yIGNvcnJlY3RuZXNzIGFuZCBjb25zaXN0ZW5jeQord2l0aCBvdGhlciBwYXJzZXJz IGluIHRoaXMgZmlsZSAoZS5nLiBgU1NIX01TR19DSEFOTkVMX09QRU5gLAorYFNTSF9NU0dfS0VY SU5JVGApIHRoYXQgY2hlY2sgYF9saWJzc2gyX2dldF9zdHJpbmcoKWAgcmV0dXJuIHZhbHVlcy4K KworQ2xvc2VzICMxODY0CistLS0KKyBzcmMvcGFja2V0LmMgfCA2ICsrKystLQorIDEgZmlsZSBj aGFuZ2VkLCA0IGluc2VydGlvbnMoKyksIDIgZGVsZXRpb25zKC0pCisKK2RpZmYgLS1naXQgYS9z cmMvcGFja2V0LmMgYi9zcmMvcGFja2V0LmMKK2luZGV4IGFlODYzNjVkMmEuLjhhN2EwZDI2OTAg MTAwNjQ0CistLS0gYS9zcmMvcGFja2V0LmMKKysrKyBiL3NyYy9wYWNrZXQuYworQEAgLTg5MCw4 ICs4OTAsMTAgQEAgX2xpYnNzaDJfcGFja2V0X2FkZChMSUJTU0gyX1NFU1NJT04gKiBzZXNzaW9u LCB1bnNpZ25lZCBjaGFyICpkYXRhLAorIAorICAgICAgICAgICAgICAgICAgICAgbnJfZXh0ZW5z aW9ucyAtPSAxOworIAorLSAgICAgICAgICAgICAgICAgICAgX2xpYnNzaDJfZ2V0X3N0cmluZygm YnVmLCAmbmFtZSwgJm5hbWVfbGVuKTsKKy0gICAgICAgICAgICAgICAgICAgIF9saWJzc2gyX2dl dF9zdHJpbmcoJmJ1ZiwgJnZhbHVlLCAmdmFsdWVfbGVuKTsKKysgICAgICAgICAgICAgICAgICAg IGlmKF9saWJzc2gyX2dldF9zdHJpbmcoJmJ1ZiwgJm5hbWUsICZuYW1lX2xlbikpCisrICAgICAg ICAgICAgICAgICAgICAgICAgYnJlYWs7CisrICAgICAgICAgICAgICAgICAgICBpZihfbGlic3No Ml9nZXRfc3RyaW5nKCZidWYsICZ2YWx1ZSwgJnZhbHVlX2xlbikpCisrICAgICAgICAgICAgICAg ICAgICAgICAgYnJlYWs7CisgCisgICAgICAgICAgICAgICAgICAgICBpZihuYW1lICYmIHZhbHVl KSB7CisgICAgICAgICAgICAgICAgICAgICAgICAgX2xpYnNzaDJfZGVidWcoKHNlc3Npb24sCgpk aWZmIC0tZ2l0IGEvOTdhY2YzZGZkYTgwYzkxYzNhOGM5ZjIzNzI1NDYzMDFkNGExYTdhOC1saWJz c2gyLTEuMTEuMS5wYXRjaCBiLzk3YWNmM2RmZGE4MGM5MWMzYThjOWYyMzcyNTQ2MzAxZDRhMWE3 YTgtbGlic3NoMi0xLjExLjEucGF0Y2gKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXggMDAwMDAw MC4uZGZmYzM4YQotLS0gL2Rldi9udWxsCisrKyBiLzk3YWNmM2RmZGE4MGM5MWMzYThjOWYyMzcy NTQ2MzAxZDRhMWE3YTgtbGlic3NoMi0xLjExLjEucGF0Y2gKQEAgLTAsMCArMSwzMSBAQAorRnJv bSA5N2FjZjNkZmRhODBjOTFjM2E4YzlmMjM3MjU0NjMwMWQ0YTFhN2E4IE1vbiBTZXAgMTcgMDA6 MDA6MDAgMjAwMQorRnJvbTogV2lsbCBDb3Nncm92ZSA8d2lsbEBwYW5pYy5jb20+CitEYXRlOiBG cmksIDEyIEp1biAyMDI2IDE1OjU3OjQ0IC0wNzAwCitTdWJqZWN0OiBbUEFUQ0hdIHRyYW5zcG9y dC5jOiBBZGRpdGlvbmFsIGJvdW5kYXJ5IGNoZWNrcyBmb3IgcGFja2V0IGxlbmd0aAorICgjMjA1 MikKKworQWRkIGFkZGl0aW9uYWwgYm91bmRzIGNoZWNraW5nIG9uIHBhY2tldCBsZW5ndGggdG8g cHJldmVudCBPT0Igd3JpdGUuCisKK0NyZWRpdDogW1RyaXN0YW5JblNlY10oaHR0cHM6Ly9naXRo dWIuY29tL1RyaXN0YW5JblNlYykKKy0tLQorIHNyYy90cmFuc3BvcnQuYyB8IDYgKysrKystCisg MSBmaWxlIGNoYW5nZWQsIDUgaW5zZXJ0aW9ucygrKSwgMSBkZWxldGlvbigtKQorCitkaWZmIC0t Z2l0IGEvc3JjL3RyYW5zcG9ydC5jIGIvc3JjL3RyYW5zcG9ydC5jCitpbmRleCA4NjlmYzVhNGZh Li43OTI1YWQzM2QxIDEwMDY0NAorLS0tIGEvc3JjL3RyYW5zcG9ydC5jCisrKysgYi9zcmMvdHJh bnNwb3J0LmMKK0BAIC02NDEsOCArNjQxLDEyIEBAIGludCBfbGlic3NoMl90cmFuc3BvcnRfcmVh ZChMSUJTU0gyX1NFU1NJT04gKiBzZXNzaW9uKQorIAorICAgICAgICAgICAgICAgICBwLT5wYWNr ZXRfbGVuZ3RoID0gX2xpYnNzaDJfbnRvaHUzMihibG9jayk7CistICAgICAgICAgICAgICAgIGlm KHAtPnBhY2tldF9sZW5ndGggPCAxKQorKyAgICAgICAgICAgICAgICBpZihwLT5wYWNrZXRfbGVu Z3RoIDwgMSkgeworICAgICAgICAgICAgICAgICAgICAgcmV0dXJuIExJQlNTSDJfRVJST1JfREVD UllQVDsKKysgICAgICAgICAgICAgICAgfQorKyAgICAgICAgICAgICAgICBlbHNlIGlmKHAtPnBh Y2tldF9sZW5ndGggPiBMSUJTU0gyX1BBQ0tFVF9NQVhQQVlMT0FEKSB7CisrICAgICAgICAgICAg ICAgICAgICByZXR1cm4gTElCU1NIMl9FUlJPUl9PVVRfT0ZfQk9VTkRBUlk7CisrICAgICAgICAg ICAgICAgIH0KKyAKKyAgICAgICAgICAgICAgICAgLyogdG90YWxfbnVtIG1heSBpbmNsdWRlIHNp emUgZmllbGQsIGhvd2V2ZXIgZHVlIHRvIGV4aXN0aW5nCisgICAgICAgICAgICAgICAgICAqIGxv Z2ljIGl0IG5lZWRzIHRvIGJlIHJlbW92ZWQgYWZ0ZXIgdGhlIGVudGlyZSBwYWNrZXQgaXMgcmVh ZAorICAgICAgICAgICAgICAgICAgKi8KCmRpZmYgLS1naXQgYS9saWJzc2gyLnNwZWMgYi9saWJz c2gyLnNwZWMKaW5kZXggMjM4ODU1Yy4uZGMyZmNmNiAxMDA2NDQKLS0tIGEvbGlic3NoMi5zcGVj CisrKyBiL2xpYnNzaDIuc3BlYwpAQCAtNiw3ICs2LDcgQEAKIAogTmFtZToJCWxpYnNzaDIKIFZl cnNpb246CTEuMTEuMQotUmVsZWFzZToJNyV7P2Rpc3R9CitSZWxlYXNlOgk4JXs/ZGlzdH0KIFN1 bW1hcnk6CUEgbGlicmFyeSBpbXBsZW1lbnRpbmcgdGhlIFNTSDIgcHJvdG9jb2wKIExpY2Vuc2U6 CUJTRC0zLUNsYXVzZQogVVJMOgkJaHR0cHM6Ly93d3cubGlic3NoMi5vcmcvCkBAIC0xNSw2ICsx NSw4IEBAIFNvdXJjZTE6CWh0dHBzOi8vbGlic3NoMi5vcmcvZG93bmxvYWQvbGlic3NoMi0le3Zl cnNpb259LnRhci5nei5hc2MKICMgRGFuaWVsIFN0ZW5iZXJnJ3MgR1BHIGtleXM7IGxpbmtlZCBm cm9tIGh0dHBzOi8vZGFuaWVsLmhheHguc2UvYWRkcmVzcy5odG1sCiBTb3VyY2UyOglodHRwczov L2RhbmllbC5oYXh4LnNlL215a2V5LmFzYwogUGF0Y2gwOgkJbGlic3NoMi0xLjExLjEtQ1ZFLTIw MjYtNzU5OC5wYXRjaAorUGF0Y2gxOgkJOTdhY2YzZGZkYTgwYzkxYzNhOGM5ZjIzNzI1NDYzMDFk NGExYTdhOC1saWJzc2gyLTEuMTEuMS5wYXRjaAorUGF0Y2gyOgkJMTc2MjY4NTdkMjBiM2M5YTFh ZGRmYTQ1OTc5ZGFkY2VlMWNkODRhNC5wYXRjaAogCiBCdWlsZFJlcXVpcmVzOgljb3JldXRpbHMK IEJ1aWxkUmVxdWlyZXM6CWZpbmR1dGlscwpAQCAtNjYsNiArNjgsMTMgQEAgZGV2ZWxvcGluZyBh cHBsaWNhdGlvbnMgdGhhdCB1c2UgbGlic3NoMi4KICMgQ1ZFLTIwMjYtNzU5OCBsaWJzc2gyOiBp bnRlZ2VyIG92ZXJmbG93IHZpYSBsYXJnZSB1c2VybmFtZSBvciBwYXNzd29yZCBhcmd1bWVudHMK ICMgaHR0cHM6Ly9naXRodWIuY29tL2xpYnNzaDIvbGlic3NoMi9wdWxsLzE4NTgKICVwYXRjaCAt UDAKKyMgQ1ZFLTIwMjYtNTUyMDAgdHJhbnNwb3J0LmM6IEFkZGl0aW9uYWwgYm91bmRhcnkgY2hl Y2tzIGZvciBwYWNrZXQgbGVuZ3RoCisjIFBhdGNoIG1vZGlmaWVkIGZvciBkb3duc3RyZWFtCisj IGh0dHBzOi8vZ2l0aHViLmNvbS9saWJzc2gyL2xpYnNzaDIvcHVsbC8yMDUyCislcGF0Y2ggLXAx IC1QMQorIyBDVkUtMjAyNi01NTE5OSBwYWNrZXQuYzogY2hlY2sgX2xpYnNzaDJfZ2V0X3N0cmlu ZygpIHJldHVybiBpbiBFWFRfSU5GTyBoYW5kbGVyCisjIGh0dHBzOi8vZ2l0aHViLmNvbS9saWJz c2gyL2xpYnNzaDIvcHVsbC8xODY0CislcGF0Y2ggLXAxIC1QMgogCiAjIFJlcGxhY2UgaGFyZCB3 aXJlZCBwb3J0IG51bWJlciBpbiB0aGUgdGVzdCBzdWl0ZSB0byBhdm9pZCBjb2xsaXNpb25zCiAj IGJldHdlZW4gMzItYml0IGFuZCA2NC1iaXQgYnVpbGRzIHJ1bm5pbmcgb24gYSBzaW5nbGUgYnVp bGQtaG9zdApAQCAtMTIxLDYgKzEzMCw5IEBAIExDX0FMTD1lbl9VUy5VVEYtOCBtYWtlIC1DIHRl c3RzIGNoZWNrCiAle19saWJkaXJ9L3BrZ2NvbmZpZy9saWJzc2gyLnBjCiAKICVjaGFuZ2Vsb2cK KyogVHVlIEp1biAyMyAyMDI2IE1pa2VsIE9sYXNhZ2FzdGkgVXJhbmdhIDxtaWtlbEBvbGFzYWdh c3RpLmluZm8+IC0gMS4xMS4xLTgKKy0gRml4IENWRS0yMDI2LTU1MjAwICYgQ1ZFLTIwMjYtNTUx OTkKKwogKiBGcmkgSnVuIDEyIDIwMjYgWWFha292IFNlbGtvd2l0eiA8eXNlbGtvd2lAcmVkaGF0 LmNvbT4gLSAxLjExLjEtNwogLSBSZWJ1aWx0IGZvciBvcGVuc3NsIDQuMAogCg==