From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Mikel Olasagasti Uranga To: git-commits@fedoraproject.org Subject: [rpms/libssh2] epel10: Fix CVE-2026-55200 & CVE-2026-55199 Date: Wed, 24 Jun 2026 17:15:43 GMT Message-ID: <178232134339.1.14915034207808908167.rpms-libssh2-f3f46cd0ce45@fedoraproject.org> List-ID: X-Git-Repo: rpms/libssh2 X-Git-Branch: epel10 X-Git-Rev: f3f46cd0ce4519b6f464431480a1764a63d12fa9 QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvbGlic3NoMgpCcmFu Y2ggOiBlcGVsMTAKQ29tbWl0IDogZjNmNDZjZDBjZTQ1MTliNmY0NjQ0MzE0ODBhMTc2NGE2M2Qx MmZhOQpBdXRob3IgOiBNaWtlbCBPbGFzYWdhc3RpIFVyYW5nYSA8bWlrZWxAb2xhc2FnYXN0aS5p bmZvPgpEYXRlICAgOiAyMDI2LTA2LTIzVDE4OjEwOjI5KzAyOjAwClN0YXRzICA6ICs4My8tMSBp biAzIGZpbGUocykKVVJMICAgIDogaHR0cHM6Ly9zcmMuZmVkb3JhcHJvamVjdC5vcmcvcnBtcy9s aWJzc2gyL2MvZjNmNDZjZDBjZTQ1MTliNmY0NjQ0MzE0ODBhMTc2NGE2M2QxMmZhOT9icmFuY2g9 ZXBlbDEwCgpMb2c6CkZpeCBDVkUtMjAyNi01NTIwMCAmIENWRS0yMDI2LTU1MTk5CgotLS0KZGlm ZiAtLWdpdCBhLzE3NjI2ODU3ZDIwYjNjOWExYWRkZmE0NTk3OWRhZGNlZTFjZDg0YTQucGF0Y2gg Yi8xNzYyNjg1N2QyMGIzYzlhMWFkZGZhNDU5NzlkYWRjZWUxY2Q4NGE0LnBhdGNoCm5ldyBmaWxl IG1vZGUgMTAwNjQ0CmluZGV4IDAwMDAwMDAuLjA2NTI3ZDgKLS0tIC9kZXYvbnVsbAorKysgYi8x NzYyNjg1N2QyMGIzYzlhMWFkZGZhNDU5NzlkYWRjZWUxY2Q4NGE0LnBhdGNoCkBAIC0wLDAgKzEs MzkgQEAKK0Zyb20gMTc2MjY4NTdkMjBiM2M5YTFhZGRmYTQ1OTc5ZGFkY2VlMWNkODRhNCBNb24g U2VwIDE3IDAwOjAwOjAwIDIwMDEKK0Zyb206IFRyaXN0YW5JblNlYyA8dHJpc3Rhbi5tdG5AZ21h aWwuY29tPgorRGF0ZTogV2VkLCAxNSBBcHIgMjAyNiAxNDo1MTowOCAtMDQwMAorU3ViamVjdDog W1BBVENIXSBwYWNrZXQ6IGNoZWNrIGBfbGlic3NoMl9nZXRfc3RyaW5nKClgIHJldHVybiBpbiBg RVhUX0lORk9gCisgaGFuZGxlcgorCitUaGUgYFNTSF9NU0dfRVhUX0lORk9gIGhhbmRsZXIgZGlz Y2FyZHMgdGhlIHJldHVybiB2YWx1ZXMgZnJvbQorYF9saWJzc2gyX2dldF9zdHJpbmcoKWAgd2hl biBwYXJzaW5nIGV4dGVuc2lvbiBuYW1lL3ZhbHVlIHBhaXJzLiBXaGVuCit0aGUgYnVmZmVyIGlz IGV4aGF1c3RlZCBiZWZvcmUgYWxsIGNsYWltZWQgZXh0ZW5zaW9ucyBhcmUgcGFyc2VkLAordGhl IGxvb3AgY29udGludWVzIHdpdGggbm8tb3AgaXRlcmF0aW9ucyB1bnRpbCBgbnJfZXh0ZW5zaW9u c2AgcmVhY2hlcworemVyby4KKworVGhlIGBucl9leHRlbnNpb25zID49IDEwMjRgIGNhcCBsaW1p dHMgdGhlIHdvcnN0IGNhc2UsIGJ1dCB0aGUgbG9vcAorc2hvdWxkIHN0aWxsIGJyZWFrIG9uIHBh cnNlIGZhaWx1cmUgZm9yIGNvcnJlY3RuZXNzIGFuZCBjb25zaXN0ZW5jeQord2l0aCBvdGhlciBw YXJzZXJzIGluIHRoaXMgZmlsZSAoZS5nLiBgU1NIX01TR19DSEFOTkVMX09QRU5gLAorYFNTSF9N U0dfS0VYSU5JVGApIHRoYXQgY2hlY2sgYF9saWJzc2gyX2dldF9zdHJpbmcoKWAgcmV0dXJuIHZh bHVlcy4KKworQ2xvc2VzICMxODY0CistLS0KKyBzcmMvcGFja2V0LmMgfCA2ICsrKystLQorIDEg ZmlsZSBjaGFuZ2VkLCA0IGluc2VydGlvbnMoKyksIDIgZGVsZXRpb25zKC0pCisKK2RpZmYgLS1n aXQgYS9zcmMvcGFja2V0LmMgYi9zcmMvcGFja2V0LmMKK2luZGV4IGFlODYzNjVkMmEuLjhhN2Ew ZDI2OTAgMTAwNjQ0CistLS0gYS9zcmMvcGFja2V0LmMKKysrKyBiL3NyYy9wYWNrZXQuYworQEAg LTg5MCw4ICs4OTAsMTAgQEAgX2xpYnNzaDJfcGFja2V0X2FkZChMSUJTU0gyX1NFU1NJT04gKiBz ZXNzaW9uLCB1bnNpZ25lZCBjaGFyICpkYXRhLAorIAorICAgICAgICAgICAgICAgICAgICAgbnJf ZXh0ZW5zaW9ucyAtPSAxOworIAorLSAgICAgICAgICAgICAgICAgICAgX2xpYnNzaDJfZ2V0X3N0 cmluZygmYnVmLCAmbmFtZSwgJm5hbWVfbGVuKTsKKy0gICAgICAgICAgICAgICAgICAgIF9saWJz c2gyX2dldF9zdHJpbmcoJmJ1ZiwgJnZhbHVlLCAmdmFsdWVfbGVuKTsKKysgICAgICAgICAgICAg ICAgICAgIGlmKF9saWJzc2gyX2dldF9zdHJpbmcoJmJ1ZiwgJm5hbWUsICZuYW1lX2xlbikpCisr ICAgICAgICAgICAgICAgICAgICAgICAgYnJlYWs7CisrICAgICAgICAgICAgICAgICAgICBpZihf bGlic3NoMl9nZXRfc3RyaW5nKCZidWYsICZ2YWx1ZSwgJnZhbHVlX2xlbikpCisrICAgICAgICAg ICAgICAgICAgICAgICAgYnJlYWs7CisgCisgICAgICAgICAgICAgICAgICAgICBpZihuYW1lICYm IHZhbHVlKSB7CisgICAgICAgICAgICAgICAgICAgICAgICAgX2xpYnNzaDJfZGVidWcoKHNlc3Np b24sCgpkaWZmIC0tZ2l0IGEvOTdhY2YzZGZkYTgwYzkxYzNhOGM5ZjIzNzI1NDYzMDFkNGExYTdh OC1saWJzc2gyLTEuMTEuMS5wYXRjaCBiLzk3YWNmM2RmZGE4MGM5MWMzYThjOWYyMzcyNTQ2MzAx ZDRhMWE3YTgtbGlic3NoMi0xLjExLjEucGF0Y2gKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXgg MDAwMDAwMC4uZGZmYzM4YQotLS0gL2Rldi9udWxsCisrKyBiLzk3YWNmM2RmZGE4MGM5MWMzYThj OWYyMzcyNTQ2MzAxZDRhMWE3YTgtbGlic3NoMi0xLjExLjEucGF0Y2gKQEAgLTAsMCArMSwzMSBA QAorRnJvbSA5N2FjZjNkZmRhODBjOTFjM2E4YzlmMjM3MjU0NjMwMWQ0YTFhN2E4IE1vbiBTZXAg MTcgMDA6MDA6MDAgMjAwMQorRnJvbTogV2lsbCBDb3Nncm92ZSA8d2lsbEBwYW5pYy5jb20+CitE YXRlOiBGcmksIDEyIEp1biAyMDI2IDE1OjU3OjQ0IC0wNzAwCitTdWJqZWN0OiBbUEFUQ0hdIHRy YW5zcG9ydC5jOiBBZGRpdGlvbmFsIGJvdW5kYXJ5IGNoZWNrcyBmb3IgcGFja2V0IGxlbmd0aAor ICgjMjA1MikKKworQWRkIGFkZGl0aW9uYWwgYm91bmRzIGNoZWNraW5nIG9uIHBhY2tldCBsZW5n dGggdG8gcHJldmVudCBPT0Igd3JpdGUuCisKK0NyZWRpdDogW1RyaXN0YW5JblNlY10oaHR0cHM6 Ly9naXRodWIuY29tL1RyaXN0YW5JblNlYykKKy0tLQorIHNyYy90cmFuc3BvcnQuYyB8IDYgKysr KystCisgMSBmaWxlIGNoYW5nZWQsIDUgaW5zZXJ0aW9ucygrKSwgMSBkZWxldGlvbigtKQorCitk aWZmIC0tZ2l0IGEvc3JjL3RyYW5zcG9ydC5jIGIvc3JjL3RyYW5zcG9ydC5jCitpbmRleCA4Njlm YzVhNGZhLi43OTI1YWQzM2QxIDEwMDY0NAorLS0tIGEvc3JjL3RyYW5zcG9ydC5jCisrKysgYi9z cmMvdHJhbnNwb3J0LmMKK0BAIC02NDEsOCArNjQxLDEyIEBAIGludCBfbGlic3NoMl90cmFuc3Bv cnRfcmVhZChMSUJTU0gyX1NFU1NJT04gKiBzZXNzaW9uKQorIAorICAgICAgICAgICAgICAgICBw LT5wYWNrZXRfbGVuZ3RoID0gX2xpYnNzaDJfbnRvaHUzMihibG9jayk7CistICAgICAgICAgICAg ICAgIGlmKHAtPnBhY2tldF9sZW5ndGggPCAxKQorKyAgICAgICAgICAgICAgICBpZihwLT5wYWNr ZXRfbGVuZ3RoIDwgMSkgeworICAgICAgICAgICAgICAgICAgICAgcmV0dXJuIExJQlNTSDJfRVJS T1JfREVDUllQVDsKKysgICAgICAgICAgICAgICAgfQorKyAgICAgICAgICAgICAgICBlbHNlIGlm KHAtPnBhY2tldF9sZW5ndGggPiBMSUJTU0gyX1BBQ0tFVF9NQVhQQVlMT0FEKSB7CisrICAgICAg ICAgICAgICAgICAgICByZXR1cm4gTElCU1NIMl9FUlJPUl9PVVRfT0ZfQk9VTkRBUlk7CisrICAg ICAgICAgICAgICAgIH0KKyAKKyAgICAgICAgICAgICAgICAgLyogdG90YWxfbnVtIG1heSBpbmNs dWRlIHNpemUgZmllbGQsIGhvd2V2ZXIgZHVlIHRvIGV4aXN0aW5nCisgICAgICAgICAgICAgICAg ICAqIGxvZ2ljIGl0IG5lZWRzIHRvIGJlIHJlbW92ZWQgYWZ0ZXIgdGhlIGVudGlyZSBwYWNrZXQg aXMgcmVhZAorICAgICAgICAgICAgICAgICAgKi8KCmRpZmYgLS1naXQgYS9saWJzc2gyLnNwZWMg Yi9saWJzc2gyLnNwZWMKaW5kZXggMjM4ODU1Yy4uZGMyZmNmNiAxMDA2NDQKLS0tIGEvbGlic3No Mi5zcGVjCisrKyBiL2xpYnNzaDIuc3BlYwpAQCAtNiw3ICs2LDcgQEAKIAogTmFtZToJCWxpYnNz aDIKIFZlcnNpb246CTEuMTEuMQotUmVsZWFzZToJNyV7P2Rpc3R9CitSZWxlYXNlOgk4JXs/ZGlz dH0KIFN1bW1hcnk6CUEgbGlicmFyeSBpbXBsZW1lbnRpbmcgdGhlIFNTSDIgcHJvdG9jb2wKIExp Y2Vuc2U6CUJTRC0zLUNsYXVzZQogVVJMOgkJaHR0cHM6Ly93d3cubGlic3NoMi5vcmcvCkBAIC0x NSw2ICsxNSw4IEBAIFNvdXJjZTE6CWh0dHBzOi8vbGlic3NoMi5vcmcvZG93bmxvYWQvbGlic3No Mi0le3ZlcnNpb259LnRhci5nei5hc2MKICMgRGFuaWVsIFN0ZW5iZXJnJ3MgR1BHIGtleXM7IGxp bmtlZCBmcm9tIGh0dHBzOi8vZGFuaWVsLmhheHguc2UvYWRkcmVzcy5odG1sCiBTb3VyY2UyOglo dHRwczovL2RhbmllbC5oYXh4LnNlL215a2V5LmFzYwogUGF0Y2gwOgkJbGlic3NoMi0xLjExLjEt Q1ZFLTIwMjYtNzU5OC5wYXRjaAorUGF0Y2gxOgkJOTdhY2YzZGZkYTgwYzkxYzNhOGM5ZjIzNzI1 NDYzMDFkNGExYTdhOC1saWJzc2gyLTEuMTEuMS5wYXRjaAorUGF0Y2gyOgkJMTc2MjY4NTdkMjBi M2M5YTFhZGRmYTQ1OTc5ZGFkY2VlMWNkODRhNC5wYXRjaAogCiBCdWlsZFJlcXVpcmVzOgljb3Jl dXRpbHMKIEJ1aWxkUmVxdWlyZXM6CWZpbmR1dGlscwpAQCAtNjYsNiArNjgsMTMgQEAgZGV2ZWxv cGluZyBhcHBsaWNhdGlvbnMgdGhhdCB1c2UgbGlic3NoMi4KICMgQ1ZFLTIwMjYtNzU5OCBsaWJz c2gyOiBpbnRlZ2VyIG92ZXJmbG93IHZpYSBsYXJnZSB1c2VybmFtZSBvciBwYXNzd29yZCBhcmd1 bWVudHMKICMgaHR0cHM6Ly9naXRodWIuY29tL2xpYnNzaDIvbGlic3NoMi9wdWxsLzE4NTgKICVw YXRjaCAtUDAKKyMgQ1ZFLTIwMjYtNTUyMDAgdHJhbnNwb3J0LmM6IEFkZGl0aW9uYWwgYm91bmRh cnkgY2hlY2tzIGZvciBwYWNrZXQgbGVuZ3RoCisjIFBhdGNoIG1vZGlmaWVkIGZvciBkb3duc3Ry ZWFtCisjIGh0dHBzOi8vZ2l0aHViLmNvbS9saWJzc2gyL2xpYnNzaDIvcHVsbC8yMDUyCislcGF0 Y2ggLXAxIC1QMQorIyBDVkUtMjAyNi01NTE5OSBwYWNrZXQuYzogY2hlY2sgX2xpYnNzaDJfZ2V0 X3N0cmluZygpIHJldHVybiBpbiBFWFRfSU5GTyBoYW5kbGVyCisjIGh0dHBzOi8vZ2l0aHViLmNv bS9saWJzc2gyL2xpYnNzaDIvcHVsbC8xODY0CislcGF0Y2ggLXAxIC1QMgogCiAjIFJlcGxhY2Ug aGFyZCB3aXJlZCBwb3J0IG51bWJlciBpbiB0aGUgdGVzdCBzdWl0ZSB0byBhdm9pZCBjb2xsaXNp b25zCiAjIGJldHdlZW4gMzItYml0IGFuZCA2NC1iaXQgYnVpbGRzIHJ1bm5pbmcgb24gYSBzaW5n bGUgYnVpbGQtaG9zdApAQCAtMTIxLDYgKzEzMCw5IEBAIExDX0FMTD1lbl9VUy5VVEYtOCBtYWtl IC1DIHRlc3RzIGNoZWNrCiAle19saWJkaXJ9L3BrZ2NvbmZpZy9saWJzc2gyLnBjCiAKICVjaGFu Z2Vsb2cKKyogVHVlIEp1biAyMyAyMDI2IE1pa2VsIE9sYXNhZ2FzdGkgVXJhbmdhIDxtaWtlbEBv bGFzYWdhc3RpLmluZm8+IC0gMS4xMS4xLTgKKy0gRml4IENWRS0yMDI2LTU1MjAwICYgQ1ZFLTIw MjYtNTUxOTkKKwogKiBGcmkgSnVuIDEyIDIwMjYgWWFha292IFNlbGtvd2l0eiA8eXNlbGtvd2lA cmVkaGF0LmNvbT4gLSAxLjExLjEtNwogLSBSZWJ1aWx0IGZvciBvcGVuc3NsIDQuMAogCg==