From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Mikel Olasagasti Uranga To: git-commits@fedoraproject.org Subject: [rpms/libssh2] epel9: Fix CVE-2026-55200 & CVE-2026-55199 Date: Wed, 24 Jun 2026 17:31:55 GMT Message-ID: <178232231579.1.6668129610076041223.rpms-libssh2-f3f46cd0ce45@fedoraproject.org> List-ID: X-Git-Repo: rpms/libssh2 X-Git-Branch: epel9 X-Git-Rev: f3f46cd0ce4519b6f464431480a1764a63d12fa9 QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvbGlic3NoMgpCcmFu Y2ggOiBlcGVsOQpDb21taXQgOiBmM2Y0NmNkMGNlNDUxOWI2ZjQ2NDQzMTQ4MGExNzY0YTYzZDEy ZmE5CkF1dGhvciA6IE1pa2VsIE9sYXNhZ2FzdGkgVXJhbmdhIDxtaWtlbEBvbGFzYWdhc3RpLmlu Zm8+CkRhdGUgICA6IDIwMjYtMDYtMjNUMTg6MTA6MjkrMDI6MDAKU3RhdHMgIDogKzgzLy0xIGlu IDMgZmlsZShzKQpVUkwgICAgOiBodHRwczovL3NyYy5mZWRvcmFwcm9qZWN0Lm9yZy9ycG1zL2xp YnNzaDIvYy9mM2Y0NmNkMGNlNDUxOWI2ZjQ2NDQzMTQ4MGExNzY0YTYzZDEyZmE5P2JyYW5jaD1l cGVsOQoKTG9nOgpGaXggQ1ZFLTIwMjYtNTUyMDAgJiBDVkUtMjAyNi01NTE5OQoKLS0tCmRpZmYg LS1naXQgYS8xNzYyNjg1N2QyMGIzYzlhMWFkZGZhNDU5NzlkYWRjZWUxY2Q4NGE0LnBhdGNoIGIv MTc2MjY4NTdkMjBiM2M5YTFhZGRmYTQ1OTc5ZGFkY2VlMWNkODRhNC5wYXRjaApuZXcgZmlsZSBt b2RlIDEwMDY0NAppbmRleCAwMDAwMDAwLi4wNjUyN2Q4Ci0tLSAvZGV2L251bGwKKysrIGIvMTc2 MjY4NTdkMjBiM2M5YTFhZGRmYTQ1OTc5ZGFkY2VlMWNkODRhNC5wYXRjaApAQCAtMCwwICsxLDM5 IEBACitGcm9tIDE3NjI2ODU3ZDIwYjNjOWExYWRkZmE0NTk3OWRhZGNlZTFjZDg0YTQgTW9uIFNl cCAxNyAwMDowMDowMCAyMDAxCitGcm9tOiBUcmlzdGFuSW5TZWMgPHRyaXN0YW4ubXRuQGdtYWls LmNvbT4KK0RhdGU6IFdlZCwgMTUgQXByIDIwMjYgMTQ6NTE6MDggLTA0MDAKK1N1YmplY3Q6IFtQ QVRDSF0gcGFja2V0OiBjaGVjayBgX2xpYnNzaDJfZ2V0X3N0cmluZygpYCByZXR1cm4gaW4gYEVY VF9JTkZPYAorIGhhbmRsZXIKKworVGhlIGBTU0hfTVNHX0VYVF9JTkZPYCBoYW5kbGVyIGRpc2Nh cmRzIHRoZSByZXR1cm4gdmFsdWVzIGZyb20KK2BfbGlic3NoMl9nZXRfc3RyaW5nKClgIHdoZW4g cGFyc2luZyBleHRlbnNpb24gbmFtZS92YWx1ZSBwYWlycy4gV2hlbgordGhlIGJ1ZmZlciBpcyBl eGhhdXN0ZWQgYmVmb3JlIGFsbCBjbGFpbWVkIGV4dGVuc2lvbnMgYXJlIHBhcnNlZCwKK3RoZSBs b29wIGNvbnRpbnVlcyB3aXRoIG5vLW9wIGl0ZXJhdGlvbnMgdW50aWwgYG5yX2V4dGVuc2lvbnNg IHJlYWNoZXMKK3plcm8uCisKK1RoZSBgbnJfZXh0ZW5zaW9ucyA+PSAxMDI0YCBjYXAgbGltaXRz IHRoZSB3b3JzdCBjYXNlLCBidXQgdGhlIGxvb3AKK3Nob3VsZCBzdGlsbCBicmVhayBvbiBwYXJz ZSBmYWlsdXJlIGZvciBjb3JyZWN0bmVzcyBhbmQgY29uc2lzdGVuY3kKK3dpdGggb3RoZXIgcGFy c2VycyBpbiB0aGlzIGZpbGUgKGUuZy4gYFNTSF9NU0dfQ0hBTk5FTF9PUEVOYCwKK2BTU0hfTVNH X0tFWElOSVRgKSB0aGF0IGNoZWNrIGBfbGlic3NoMl9nZXRfc3RyaW5nKClgIHJldHVybiB2YWx1 ZXMuCisKK0Nsb3NlcyAjMTg2NAorLS0tCisgc3JjL3BhY2tldC5jIHwgNiArKysrLS0KKyAxIGZp bGUgY2hhbmdlZCwgNCBpbnNlcnRpb25zKCspLCAyIGRlbGV0aW9ucygtKQorCitkaWZmIC0tZ2l0 IGEvc3JjL3BhY2tldC5jIGIvc3JjL3BhY2tldC5jCitpbmRleCBhZTg2MzY1ZDJhLi44YTdhMGQy NjkwIDEwMDY0NAorLS0tIGEvc3JjL3BhY2tldC5jCisrKysgYi9zcmMvcGFja2V0LmMKK0BAIC04 OTAsOCArODkwLDEwIEBAIF9saWJzc2gyX3BhY2tldF9hZGQoTElCU1NIMl9TRVNTSU9OICogc2Vz c2lvbiwgdW5zaWduZWQgY2hhciAqZGF0YSwKKyAKKyAgICAgICAgICAgICAgICAgICAgIG5yX2V4 dGVuc2lvbnMgLT0gMTsKKyAKKy0gICAgICAgICAgICAgICAgICAgIF9saWJzc2gyX2dldF9zdHJp bmcoJmJ1ZiwgJm5hbWUsICZuYW1lX2xlbik7CistICAgICAgICAgICAgICAgICAgICBfbGlic3No Ml9nZXRfc3RyaW5nKCZidWYsICZ2YWx1ZSwgJnZhbHVlX2xlbik7CisrICAgICAgICAgICAgICAg ICAgICBpZihfbGlic3NoMl9nZXRfc3RyaW5nKCZidWYsICZuYW1lLCAmbmFtZV9sZW4pKQorKyAg ICAgICAgICAgICAgICAgICAgICAgIGJyZWFrOworKyAgICAgICAgICAgICAgICAgICAgaWYoX2xp YnNzaDJfZ2V0X3N0cmluZygmYnVmLCAmdmFsdWUsICZ2YWx1ZV9sZW4pKQorKyAgICAgICAgICAg ICAgICAgICAgICAgIGJyZWFrOworIAorICAgICAgICAgICAgICAgICAgICAgaWYobmFtZSAmJiB2 YWx1ZSkgeworICAgICAgICAgICAgICAgICAgICAgICAgIF9saWJzc2gyX2RlYnVnKChzZXNzaW9u LAoKZGlmZiAtLWdpdCBhLzk3YWNmM2RmZGE4MGM5MWMzYThjOWYyMzcyNTQ2MzAxZDRhMWE3YTgt bGlic3NoMi0xLjExLjEucGF0Y2ggYi85N2FjZjNkZmRhODBjOTFjM2E4YzlmMjM3MjU0NjMwMWQ0 YTFhN2E4LWxpYnNzaDItMS4xMS4xLnBhdGNoCm5ldyBmaWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAw MDAwMDAuLmRmZmMzOGEKLS0tIC9kZXYvbnVsbAorKysgYi85N2FjZjNkZmRhODBjOTFjM2E4Yzlm MjM3MjU0NjMwMWQ0YTFhN2E4LWxpYnNzaDItMS4xMS4xLnBhdGNoCkBAIC0wLDAgKzEsMzEgQEAK K0Zyb20gOTdhY2YzZGZkYTgwYzkxYzNhOGM5ZjIzNzI1NDYzMDFkNGExYTdhOCBNb24gU2VwIDE3 IDAwOjAwOjAwIDIwMDEKK0Zyb206IFdpbGwgQ29zZ3JvdmUgPHdpbGxAcGFuaWMuY29tPgorRGF0 ZTogRnJpLCAxMiBKdW4gMjAyNiAxNTo1Nzo0NCAtMDcwMAorU3ViamVjdDogW1BBVENIXSB0cmFu c3BvcnQuYzogQWRkaXRpb25hbCBib3VuZGFyeSBjaGVja3MgZm9yIHBhY2tldCBsZW5ndGgKKyAo IzIwNTIpCisKK0FkZCBhZGRpdGlvbmFsIGJvdW5kcyBjaGVja2luZyBvbiBwYWNrZXQgbGVuZ3Ro IHRvIHByZXZlbnQgT09CIHdyaXRlLgorCitDcmVkaXQ6IFtUcmlzdGFuSW5TZWNdKGh0dHBzOi8v Z2l0aHViLmNvbS9UcmlzdGFuSW5TZWMpCistLS0KKyBzcmMvdHJhbnNwb3J0LmMgfCA2ICsrKysr LQorIDEgZmlsZSBjaGFuZ2VkLCA1IGluc2VydGlvbnMoKyksIDEgZGVsZXRpb24oLSkKKworZGlm ZiAtLWdpdCBhL3NyYy90cmFuc3BvcnQuYyBiL3NyYy90cmFuc3BvcnQuYworaW5kZXggODY5ZmM1 YTRmYS4uNzkyNWFkMzNkMSAxMDA2NDQKKy0tLSBhL3NyYy90cmFuc3BvcnQuYworKysrIGIvc3Jj L3RyYW5zcG9ydC5jCitAQCAtNjQxLDggKzY0MSwxMiBAQCBpbnQgX2xpYnNzaDJfdHJhbnNwb3J0 X3JlYWQoTElCU1NIMl9TRVNTSU9OICogc2Vzc2lvbikKKyAKKyAgICAgICAgICAgICAgICAgcC0+ cGFja2V0X2xlbmd0aCA9IF9saWJzc2gyX250b2h1MzIoYmxvY2spOworLSAgICAgICAgICAgICAg ICBpZihwLT5wYWNrZXRfbGVuZ3RoIDwgMSkKKysgICAgICAgICAgICAgICAgaWYocC0+cGFja2V0 X2xlbmd0aCA8IDEpIHsKKyAgICAgICAgICAgICAgICAgICAgIHJldHVybiBMSUJTU0gyX0VSUk9S X0RFQ1JZUFQ7CisrICAgICAgICAgICAgICAgIH0KKysgICAgICAgICAgICAgICAgZWxzZSBpZihw LT5wYWNrZXRfbGVuZ3RoID4gTElCU1NIMl9QQUNLRVRfTUFYUEFZTE9BRCkgeworKyAgICAgICAg ICAgICAgICAgICAgcmV0dXJuIExJQlNTSDJfRVJST1JfT1VUX09GX0JPVU5EQVJZOworKyAgICAg ICAgICAgICAgICB9CisgCisgICAgICAgICAgICAgICAgIC8qIHRvdGFsX251bSBtYXkgaW5jbHVk ZSBzaXplIGZpZWxkLCBob3dldmVyIGR1ZSB0byBleGlzdGluZworICAgICAgICAgICAgICAgICAg KiBsb2dpYyBpdCBuZWVkcyB0byBiZSByZW1vdmVkIGFmdGVyIHRoZSBlbnRpcmUgcGFja2V0IGlz IHJlYWQKKyAgICAgICAgICAgICAgICAgICovCgpkaWZmIC0tZ2l0IGEvbGlic3NoMi5zcGVjIGIv bGlic3NoMi5zcGVjCmluZGV4IDIzODg1NWMuLmRjMmZjZjYgMTAwNjQ0Ci0tLSBhL2xpYnNzaDIu c3BlYworKysgYi9saWJzc2gyLnNwZWMKQEAgLTYsNyArNiw3IEBACiAKIE5hbWU6CQlsaWJzc2gy CiBWZXJzaW9uOgkxLjExLjEKLVJlbGVhc2U6CTclez9kaXN0fQorUmVsZWFzZToJOCV7P2Rpc3R9 CiBTdW1tYXJ5OglBIGxpYnJhcnkgaW1wbGVtZW50aW5nIHRoZSBTU0gyIHByb3RvY29sCiBMaWNl bnNlOglCU0QtMy1DbGF1c2UKIFVSTDoJCWh0dHBzOi8vd3d3LmxpYnNzaDIub3JnLwpAQCAtMTUs NiArMTUsOCBAQCBTb3VyY2UxOglodHRwczovL2xpYnNzaDIub3JnL2Rvd25sb2FkL2xpYnNzaDIt JXt2ZXJzaW9ufS50YXIuZ3ouYXNjCiAjIERhbmllbCBTdGVuYmVyZydzIEdQRyBrZXlzOyBsaW5r ZWQgZnJvbSBodHRwczovL2RhbmllbC5oYXh4LnNlL2FkZHJlc3MuaHRtbAogU291cmNlMjoJaHR0 cHM6Ly9kYW5pZWwuaGF4eC5zZS9teWtleS5hc2MKIFBhdGNoMDoJCWxpYnNzaDItMS4xMS4xLUNW RS0yMDI2LTc1OTgucGF0Y2gKK1BhdGNoMToJCTk3YWNmM2RmZGE4MGM5MWMzYThjOWYyMzcyNTQ2 MzAxZDRhMWE3YTgtbGlic3NoMi0xLjExLjEucGF0Y2gKK1BhdGNoMjoJCTE3NjI2ODU3ZDIwYjNj OWExYWRkZmE0NTk3OWRhZGNlZTFjZDg0YTQucGF0Y2gKIAogQnVpbGRSZXF1aXJlczoJY29yZXV0 aWxzCiBCdWlsZFJlcXVpcmVzOglmaW5kdXRpbHMKQEAgLTY2LDYgKzY4LDEzIEBAIGRldmVsb3Bp bmcgYXBwbGljYXRpb25zIHRoYXQgdXNlIGxpYnNzaDIuCiAjIENWRS0yMDI2LTc1OTggbGlic3No MjogaW50ZWdlciBvdmVyZmxvdyB2aWEgbGFyZ2UgdXNlcm5hbWUgb3IgcGFzc3dvcmQgYXJndW1l bnRzCiAjIGh0dHBzOi8vZ2l0aHViLmNvbS9saWJzc2gyL2xpYnNzaDIvcHVsbC8xODU4CiAlcGF0 Y2ggLVAwCisjIENWRS0yMDI2LTU1MjAwIHRyYW5zcG9ydC5jOiBBZGRpdGlvbmFsIGJvdW5kYXJ5 IGNoZWNrcyBmb3IgcGFja2V0IGxlbmd0aAorIyBQYXRjaCBtb2RpZmllZCBmb3IgZG93bnN0cmVh bQorIyBodHRwczovL2dpdGh1Yi5jb20vbGlic3NoMi9saWJzc2gyL3B1bGwvMjA1MgorJXBhdGNo IC1wMSAtUDEKKyMgQ1ZFLTIwMjYtNTUxOTkgcGFja2V0LmM6IGNoZWNrIF9saWJzc2gyX2dldF9z dHJpbmcoKSByZXR1cm4gaW4gRVhUX0lORk8gaGFuZGxlcgorIyBodHRwczovL2dpdGh1Yi5jb20v bGlic3NoMi9saWJzc2gyL3B1bGwvMTg2NAorJXBhdGNoIC1wMSAtUDIKIAogIyBSZXBsYWNlIGhh cmQgd2lyZWQgcG9ydCBudW1iZXIgaW4gdGhlIHRlc3Qgc3VpdGUgdG8gYXZvaWQgY29sbGlzaW9u cwogIyBiZXR3ZWVuIDMyLWJpdCBhbmQgNjQtYml0IGJ1aWxkcyBydW5uaW5nIG9uIGEgc2luZ2xl IGJ1aWxkLWhvc3QKQEAgLTEyMSw2ICsxMzAsOSBAQCBMQ19BTEw9ZW5fVVMuVVRGLTggbWFrZSAt QyB0ZXN0cyBjaGVjawogJXtfbGliZGlyfS9wa2djb25maWcvbGlic3NoMi5wYwogCiAlY2hhbmdl bG9nCisqIFR1ZSBKdW4gMjMgMjAyNiBNaWtlbCBPbGFzYWdhc3RpIFVyYW5nYSA8bWlrZWxAb2xh c2FnYXN0aS5pbmZvPiAtIDEuMTEuMS04CistIEZpeCBDVkUtMjAyNi01NTIwMCAmIENWRS0yMDI2 LTU1MTk5CisKICogRnJpIEp1biAxMiAyMDI2IFlhYWtvdiBTZWxrb3dpdHogPHlzZWxrb3dpQHJl ZGhhdC5jb20+IC0gMS4xMS4xLTcKIC0gUmVidWlsdCBmb3Igb3BlbnNzbCA0LjAKIAo=