From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Mikel Olasagasti Uranga To: git-commits@fedoraproject.org Subject: [rpms/libssh2] epel10.2: Fix CVE-2026-55200 & CVE-2026-55199 Date: Wed, 24 Jun 2026 17:24:18 GMT Message-ID: <178232185896.1.97575665178776561.rpms-libssh2-f3f46cd0ce45@fedoraproject.org> List-ID: X-Git-Repo: rpms/libssh2 X-Git-Branch: epel10.2 X-Git-Rev: f3f46cd0ce4519b6f464431480a1764a63d12fa9 QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvbGlic3NoMgpCcmFu Y2ggOiBlcGVsMTAuMgpDb21taXQgOiBmM2Y0NmNkMGNlNDUxOWI2ZjQ2NDQzMTQ4MGExNzY0YTYz ZDEyZmE5CkF1dGhvciA6IE1pa2VsIE9sYXNhZ2FzdGkgVXJhbmdhIDxtaWtlbEBvbGFzYWdhc3Rp LmluZm8+CkRhdGUgICA6IDIwMjYtMDYtMjNUMTg6MTA6MjkrMDI6MDAKU3RhdHMgIDogKzgzLy0x IGluIDMgZmlsZShzKQpVUkwgICAgOiBodHRwczovL3NyYy5mZWRvcmFwcm9qZWN0Lm9yZy9ycG1z L2xpYnNzaDIvYy9mM2Y0NmNkMGNlNDUxOWI2ZjQ2NDQzMTQ4MGExNzY0YTYzZDEyZmE5P2JyYW5j aD1lcGVsMTAuMgoKTG9nOgpGaXggQ1ZFLTIwMjYtNTUyMDAgJiBDVkUtMjAyNi01NTE5OQoKLS0t CmRpZmYgLS1naXQgYS8xNzYyNjg1N2QyMGIzYzlhMWFkZGZhNDU5NzlkYWRjZWUxY2Q4NGE0LnBh dGNoIGIvMTc2MjY4NTdkMjBiM2M5YTFhZGRmYTQ1OTc5ZGFkY2VlMWNkODRhNC5wYXRjaApuZXcg ZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwLi4wNjUyN2Q4Ci0tLSAvZGV2L251bGwKKysr IGIvMTc2MjY4NTdkMjBiM2M5YTFhZGRmYTQ1OTc5ZGFkY2VlMWNkODRhNC5wYXRjaApAQCAtMCww ICsxLDM5IEBACitGcm9tIDE3NjI2ODU3ZDIwYjNjOWExYWRkZmE0NTk3OWRhZGNlZTFjZDg0YTQg TW9uIFNlcCAxNyAwMDowMDowMCAyMDAxCitGcm9tOiBUcmlzdGFuSW5TZWMgPHRyaXN0YW4ubXRu QGdtYWlsLmNvbT4KK0RhdGU6IFdlZCwgMTUgQXByIDIwMjYgMTQ6NTE6MDggLTA0MDAKK1N1Ympl Y3Q6IFtQQVRDSF0gcGFja2V0OiBjaGVjayBgX2xpYnNzaDJfZ2V0X3N0cmluZygpYCByZXR1cm4g aW4gYEVYVF9JTkZPYAorIGhhbmRsZXIKKworVGhlIGBTU0hfTVNHX0VYVF9JTkZPYCBoYW5kbGVy IGRpc2NhcmRzIHRoZSByZXR1cm4gdmFsdWVzIGZyb20KK2BfbGlic3NoMl9nZXRfc3RyaW5nKClg IHdoZW4gcGFyc2luZyBleHRlbnNpb24gbmFtZS92YWx1ZSBwYWlycy4gV2hlbgordGhlIGJ1ZmZl ciBpcyBleGhhdXN0ZWQgYmVmb3JlIGFsbCBjbGFpbWVkIGV4dGVuc2lvbnMgYXJlIHBhcnNlZCwK K3RoZSBsb29wIGNvbnRpbnVlcyB3aXRoIG5vLW9wIGl0ZXJhdGlvbnMgdW50aWwgYG5yX2V4dGVu c2lvbnNgIHJlYWNoZXMKK3plcm8uCisKK1RoZSBgbnJfZXh0ZW5zaW9ucyA+PSAxMDI0YCBjYXAg bGltaXRzIHRoZSB3b3JzdCBjYXNlLCBidXQgdGhlIGxvb3AKK3Nob3VsZCBzdGlsbCBicmVhayBv biBwYXJzZSBmYWlsdXJlIGZvciBjb3JyZWN0bmVzcyBhbmQgY29uc2lzdGVuY3kKK3dpdGggb3Ro ZXIgcGFyc2VycyBpbiB0aGlzIGZpbGUgKGUuZy4gYFNTSF9NU0dfQ0hBTk5FTF9PUEVOYCwKK2BT U0hfTVNHX0tFWElOSVRgKSB0aGF0IGNoZWNrIGBfbGlic3NoMl9nZXRfc3RyaW5nKClgIHJldHVy biB2YWx1ZXMuCisKK0Nsb3NlcyAjMTg2NAorLS0tCisgc3JjL3BhY2tldC5jIHwgNiArKysrLS0K KyAxIGZpbGUgY2hhbmdlZCwgNCBpbnNlcnRpb25zKCspLCAyIGRlbGV0aW9ucygtKQorCitkaWZm IC0tZ2l0IGEvc3JjL3BhY2tldC5jIGIvc3JjL3BhY2tldC5jCitpbmRleCBhZTg2MzY1ZDJhLi44 YTdhMGQyNjkwIDEwMDY0NAorLS0tIGEvc3JjL3BhY2tldC5jCisrKysgYi9zcmMvcGFja2V0LmMK K0BAIC04OTAsOCArODkwLDEwIEBAIF9saWJzc2gyX3BhY2tldF9hZGQoTElCU1NIMl9TRVNTSU9O ICogc2Vzc2lvbiwgdW5zaWduZWQgY2hhciAqZGF0YSwKKyAKKyAgICAgICAgICAgICAgICAgICAg IG5yX2V4dGVuc2lvbnMgLT0gMTsKKyAKKy0gICAgICAgICAgICAgICAgICAgIF9saWJzc2gyX2dl dF9zdHJpbmcoJmJ1ZiwgJm5hbWUsICZuYW1lX2xlbik7CistICAgICAgICAgICAgICAgICAgICBf bGlic3NoMl9nZXRfc3RyaW5nKCZidWYsICZ2YWx1ZSwgJnZhbHVlX2xlbik7CisrICAgICAgICAg ICAgICAgICAgICBpZihfbGlic3NoMl9nZXRfc3RyaW5nKCZidWYsICZuYW1lLCAmbmFtZV9sZW4p KQorKyAgICAgICAgICAgICAgICAgICAgICAgIGJyZWFrOworKyAgICAgICAgICAgICAgICAgICAg aWYoX2xpYnNzaDJfZ2V0X3N0cmluZygmYnVmLCAmdmFsdWUsICZ2YWx1ZV9sZW4pKQorKyAgICAg ICAgICAgICAgICAgICAgICAgIGJyZWFrOworIAorICAgICAgICAgICAgICAgICAgICAgaWYobmFt ZSAmJiB2YWx1ZSkgeworICAgICAgICAgICAgICAgICAgICAgICAgIF9saWJzc2gyX2RlYnVnKChz ZXNzaW9uLAoKZGlmZiAtLWdpdCBhLzk3YWNmM2RmZGE4MGM5MWMzYThjOWYyMzcyNTQ2MzAxZDRh MWE3YTgtbGlic3NoMi0xLjExLjEucGF0Y2ggYi85N2FjZjNkZmRhODBjOTFjM2E4YzlmMjM3MjU0 NjMwMWQ0YTFhN2E4LWxpYnNzaDItMS4xMS4xLnBhdGNoCm5ldyBmaWxlIG1vZGUgMTAwNjQ0Cmlu ZGV4IDAwMDAwMDAuLmRmZmMzOGEKLS0tIC9kZXYvbnVsbAorKysgYi85N2FjZjNkZmRhODBjOTFj M2E4YzlmMjM3MjU0NjMwMWQ0YTFhN2E4LWxpYnNzaDItMS4xMS4xLnBhdGNoCkBAIC0wLDAgKzEs MzEgQEAKK0Zyb20gOTdhY2YzZGZkYTgwYzkxYzNhOGM5ZjIzNzI1NDYzMDFkNGExYTdhOCBNb24g U2VwIDE3IDAwOjAwOjAwIDIwMDEKK0Zyb206IFdpbGwgQ29zZ3JvdmUgPHdpbGxAcGFuaWMuY29t PgorRGF0ZTogRnJpLCAxMiBKdW4gMjAyNiAxNTo1Nzo0NCAtMDcwMAorU3ViamVjdDogW1BBVENI XSB0cmFuc3BvcnQuYzogQWRkaXRpb25hbCBib3VuZGFyeSBjaGVja3MgZm9yIHBhY2tldCBsZW5n dGgKKyAoIzIwNTIpCisKK0FkZCBhZGRpdGlvbmFsIGJvdW5kcyBjaGVja2luZyBvbiBwYWNrZXQg bGVuZ3RoIHRvIHByZXZlbnQgT09CIHdyaXRlLgorCitDcmVkaXQ6IFtUcmlzdGFuSW5TZWNdKGh0 dHBzOi8vZ2l0aHViLmNvbS9UcmlzdGFuSW5TZWMpCistLS0KKyBzcmMvdHJhbnNwb3J0LmMgfCA2 ICsrKysrLQorIDEgZmlsZSBjaGFuZ2VkLCA1IGluc2VydGlvbnMoKyksIDEgZGVsZXRpb24oLSkK KworZGlmZiAtLWdpdCBhL3NyYy90cmFuc3BvcnQuYyBiL3NyYy90cmFuc3BvcnQuYworaW5kZXgg ODY5ZmM1YTRmYS4uNzkyNWFkMzNkMSAxMDA2NDQKKy0tLSBhL3NyYy90cmFuc3BvcnQuYworKysr IGIvc3JjL3RyYW5zcG9ydC5jCitAQCAtNjQxLDggKzY0MSwxMiBAQCBpbnQgX2xpYnNzaDJfdHJh bnNwb3J0X3JlYWQoTElCU1NIMl9TRVNTSU9OICogc2Vzc2lvbikKKyAKKyAgICAgICAgICAgICAg ICAgcC0+cGFja2V0X2xlbmd0aCA9IF9saWJzc2gyX250b2h1MzIoYmxvY2spOworLSAgICAgICAg ICAgICAgICBpZihwLT5wYWNrZXRfbGVuZ3RoIDwgMSkKKysgICAgICAgICAgICAgICAgaWYocC0+ cGFja2V0X2xlbmd0aCA8IDEpIHsKKyAgICAgICAgICAgICAgICAgICAgIHJldHVybiBMSUJTU0gy X0VSUk9SX0RFQ1JZUFQ7CisrICAgICAgICAgICAgICAgIH0KKysgICAgICAgICAgICAgICAgZWxz ZSBpZihwLT5wYWNrZXRfbGVuZ3RoID4gTElCU1NIMl9QQUNLRVRfTUFYUEFZTE9BRCkgeworKyAg ICAgICAgICAgICAgICAgICAgcmV0dXJuIExJQlNTSDJfRVJST1JfT1VUX09GX0JPVU5EQVJZOwor KyAgICAgICAgICAgICAgICB9CisgCisgICAgICAgICAgICAgICAgIC8qIHRvdGFsX251bSBtYXkg aW5jbHVkZSBzaXplIGZpZWxkLCBob3dldmVyIGR1ZSB0byBleGlzdGluZworICAgICAgICAgICAg ICAgICAgKiBsb2dpYyBpdCBuZWVkcyB0byBiZSByZW1vdmVkIGFmdGVyIHRoZSBlbnRpcmUgcGFj a2V0IGlzIHJlYWQKKyAgICAgICAgICAgICAgICAgICovCgpkaWZmIC0tZ2l0IGEvbGlic3NoMi5z cGVjIGIvbGlic3NoMi5zcGVjCmluZGV4IDIzODg1NWMuLmRjMmZjZjYgMTAwNjQ0Ci0tLSBhL2xp YnNzaDIuc3BlYworKysgYi9saWJzc2gyLnNwZWMKQEAgLTYsNyArNiw3IEBACiAKIE5hbWU6CQls aWJzc2gyCiBWZXJzaW9uOgkxLjExLjEKLVJlbGVhc2U6CTclez9kaXN0fQorUmVsZWFzZToJOCV7 P2Rpc3R9CiBTdW1tYXJ5OglBIGxpYnJhcnkgaW1wbGVtZW50aW5nIHRoZSBTU0gyIHByb3RvY29s CiBMaWNlbnNlOglCU0QtMy1DbGF1c2UKIFVSTDoJCWh0dHBzOi8vd3d3LmxpYnNzaDIub3JnLwpA QCAtMTUsNiArMTUsOCBAQCBTb3VyY2UxOglodHRwczovL2xpYnNzaDIub3JnL2Rvd25sb2FkL2xp YnNzaDItJXt2ZXJzaW9ufS50YXIuZ3ouYXNjCiAjIERhbmllbCBTdGVuYmVyZydzIEdQRyBrZXlz OyBsaW5rZWQgZnJvbSBodHRwczovL2RhbmllbC5oYXh4LnNlL2FkZHJlc3MuaHRtbAogU291cmNl MjoJaHR0cHM6Ly9kYW5pZWwuaGF4eC5zZS9teWtleS5hc2MKIFBhdGNoMDoJCWxpYnNzaDItMS4x MS4xLUNWRS0yMDI2LTc1OTgucGF0Y2gKK1BhdGNoMToJCTk3YWNmM2RmZGE4MGM5MWMzYThjOWYy MzcyNTQ2MzAxZDRhMWE3YTgtbGlic3NoMi0xLjExLjEucGF0Y2gKK1BhdGNoMjoJCTE3NjI2ODU3 ZDIwYjNjOWExYWRkZmE0NTk3OWRhZGNlZTFjZDg0YTQucGF0Y2gKIAogQnVpbGRSZXF1aXJlczoJ Y29yZXV0aWxzCiBCdWlsZFJlcXVpcmVzOglmaW5kdXRpbHMKQEAgLTY2LDYgKzY4LDEzIEBAIGRl dmVsb3BpbmcgYXBwbGljYXRpb25zIHRoYXQgdXNlIGxpYnNzaDIuCiAjIENWRS0yMDI2LTc1OTgg bGlic3NoMjogaW50ZWdlciBvdmVyZmxvdyB2aWEgbGFyZ2UgdXNlcm5hbWUgb3IgcGFzc3dvcmQg YXJndW1lbnRzCiAjIGh0dHBzOi8vZ2l0aHViLmNvbS9saWJzc2gyL2xpYnNzaDIvcHVsbC8xODU4 CiAlcGF0Y2ggLVAwCisjIENWRS0yMDI2LTU1MjAwIHRyYW5zcG9ydC5jOiBBZGRpdGlvbmFsIGJv dW5kYXJ5IGNoZWNrcyBmb3IgcGFja2V0IGxlbmd0aAorIyBQYXRjaCBtb2RpZmllZCBmb3IgZG93 bnN0cmVhbQorIyBodHRwczovL2dpdGh1Yi5jb20vbGlic3NoMi9saWJzc2gyL3B1bGwvMjA1Mgor JXBhdGNoIC1wMSAtUDEKKyMgQ1ZFLTIwMjYtNTUxOTkgcGFja2V0LmM6IGNoZWNrIF9saWJzc2gy X2dldF9zdHJpbmcoKSByZXR1cm4gaW4gRVhUX0lORk8gaGFuZGxlcgorIyBodHRwczovL2dpdGh1 Yi5jb20vbGlic3NoMi9saWJzc2gyL3B1bGwvMTg2NAorJXBhdGNoIC1wMSAtUDIKIAogIyBSZXBs YWNlIGhhcmQgd2lyZWQgcG9ydCBudW1iZXIgaW4gdGhlIHRlc3Qgc3VpdGUgdG8gYXZvaWQgY29s bGlzaW9ucwogIyBiZXR3ZWVuIDMyLWJpdCBhbmQgNjQtYml0IGJ1aWxkcyBydW5uaW5nIG9uIGEg c2luZ2xlIGJ1aWxkLWhvc3QKQEAgLTEyMSw2ICsxMzAsOSBAQCBMQ19BTEw9ZW5fVVMuVVRGLTgg bWFrZSAtQyB0ZXN0cyBjaGVjawogJXtfbGliZGlyfS9wa2djb25maWcvbGlic3NoMi5wYwogCiAl Y2hhbmdlbG9nCisqIFR1ZSBKdW4gMjMgMjAyNiBNaWtlbCBPbGFzYWdhc3RpIFVyYW5nYSA8bWlr ZWxAb2xhc2FnYXN0aS5pbmZvPiAtIDEuMTEuMS04CistIEZpeCBDVkUtMjAyNi01NTIwMCAmIENW RS0yMDI2LTU1MTk5CisKICogRnJpIEp1biAxMiAyMDI2IFlhYWtvdiBTZWxrb3dpdHogPHlzZWxr b3dpQHJlZGhhdC5jb20+IC0gMS4xMS4xLTcKIC0gUmVidWlsdCBmb3Igb3BlbnNzbCA0LjAKIAo=