From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Paul Howarth To: git-commits@fedoraproject.org Subject: [rpms/libssh2] epel10: Address CVE-2025-15661 Date: Thu, 25 Jun 2026 14:26:47 GMT Message-ID: <178239760761.1.12151365114316290234.rpms-libssh2-13fb9aee68b7@fedoraproject.org> List-ID: X-Git-Repo: rpms/libssh2 X-Git-Branch: epel10 X-Git-Rev: 13fb9aee68b781a29ad5ae4e7a825a0eab20c355 ICAgICAgICAgICAgQSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KCiAgICAgICAgICAgIFJl cG8gICA6IHJwbXMvbGlic3NoMgogICAgICAgICAgICBCcmFuY2ggOiBlcGVsMTAKICAgICAgICAg ICAgQ29tbWl0IDogMTNmYjlhZWU2OGI3ODFhMjlhZDVhZTRlN2E4MjVhMGVhYjIwYzM1NQogICAg ICAgICAgICBBdXRob3IgOiBQYXVsIEhvd2FydGggPHBhdWxAY2l0eS1mYW4ub3JnPgogICAgICAg ICAgICBEYXRlICAgOiAyMDI2LTA2LTI1VDEzOjA5OjUwKzAxOjAwCiAgICAgICAgICAgIFN0YXRz ICA6ICsxNTEvLTEgaW4gMiBmaWxlKHMpCiAgICAgICAgICAgIFVSTCAgICA6IGh0dHBzOi8vc3Jj LmZlZG9yYXByb2plY3Qub3JnL3JwbXMvbGlic3NoMi9jLzEzZmI5YWVlNjhiNzgxYTI5YWQ1YWU0 ZTdhODI1YTBlYWIyMGMzNTU/YnJhbmNoPWVwZWwxMAoKICAgICAgICAgICAgTG9nOgogICAgICAg ICAgICBBZGRyZXNzIENWRS0yMDI1LTE1NjYxCgpJbmZvcm1hdGlvbiBkaXNjbG9zdXJlIGFuZCBk ZW5pYWwgb2Ygc2VydmljZSB2aWEgY3JhZnRlZCBTRlRQIHJlc3BvbnNlCi0gaHR0cHM6Ly9naXRo dWIuY29tL2xpYnNzaDIvbGlic3NoMi9wdWxsLzE3MDUKLSBodHRwczovL2dpdGh1Yi5jb20vbGli c3NoMi9saWJzc2gyL3B1bGwvMTcxNwoKLS0tCmRpZmYgLS1naXQgYS8yZGFlMzAyLWxpYnNzaDIt MS4xMS4xLnBhdGNoIGIvMmRhZTMwMi1saWJzc2gyLTEuMTEuMS5wYXRjaApuZXcgZmlsZSBtb2Rl IDEwMDY0NAppbmRleCAwMDAwMDAwLi43YmEwNzc0Ci0tLSAvZGV2L251bGwKKysrIGIvMmRhZTMw Mi1saWJzc2gyLTEuMTEuMS5wYXRjaApAQCAtMCwwICsxLDEzOCBAQAorRnJvbSAyZGFlMzAyNDg5 N2UxODk4ZDM4OTgzNTE1MWY0ZTk2MDYyMjc3MjFkIE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQor RnJvbTogV2lsbCBDb3Nncm92ZSA8d2lsbEBwYW5pYy5jb20+CitEYXRlOiBGcmksIDEwIE9jdCAy MDI1IDA4OjI2OjIwIC0wNzAwCitTdWJqZWN0OiBbUEFUQ0hdIFVwZGF0ZSBzZnRwX3N5bWxpbmsg dG8gYXZvaWQgb3V0IG9mIGJvdW5kcyByZWFkIG9uIG1hbGZvcm1lZAorIHBhY2tldCAjMTcwNSAo IzE3MTcpCisKK1VzZSBidWZmZXIgc3RydWN0IHRvIGd1YXJkIGFnYWluc3Qgb3V0IG9mIGJvdW5k cyByZWFkcyBhbmQgaW52YWxpZCBwYWNrZXRzLgorCitEaXNjb3ZlcnkgQ3JlZGl0OgorSm9zaHVh IFJvZ2VycworLS0tCisgc3JjL3NmdHAuYyB8IDY2ICsrKysrKysrKysrKysrKysrKysrKysrKysr KysrKysrKysrKysrLS0tLS0tLS0tLS0tLS0tLQorIDEgZmlsZSBjaGFuZ2VkLCA0NyBpbnNlcnRp b25zKCspLCAxOSBkZWxldGlvbnMoLSkKKworZGlmZiAtLWdpdCBhL3NyYy9zZnRwLmMgYi9zcmMv c2Z0cC5jCitpbmRleCA3MmIwMDdmNmViLi43MGQ3Njg2ZGFmIDEwMDY0NAorLS0tIGEvc3JjL3Nm dHAuYworKysrIGIvc3JjL3NmdHAuYworQEAgLTM3OTUsMTUgKzM3OTUsMTkgQEAgc3RhdGljIGlu dCBzZnRwX3N5bWxpbmsoTElCU1NIMl9TRlRQICpzZnRwLCBjb25zdCBjaGFyICpwYXRoLAorIHsK KyAgICAgTElCU1NIMl9DSEFOTkVMICpjaGFubmVsID0gc2Z0cC0+Y2hhbm5lbDsKKyAgICAgTElC U1NIMl9TRVNTSU9OICpzZXNzaW9uID0gY2hhbm5lbC0+c2Vzc2lvbjsKKy0gICAgc2l6ZV90IGRh dGFfbGVuID0gMCwgbGlua19sZW47CisrICAgIHNpemVfdCBkYXRhX2xlbiA9IDAsIGxrX2xlbjsK KyAgICAgLyogMTMgPSBwYWNrZXRfbGVuKDQpICsgcGFja2V0X3R5cGUoMSkgKyByZXF1ZXN0X2lk KDQpICsgcGF0aF9sZW4oNCkgKi8KKyAgICAgc3NpemVfdCBwYWNrZXRfbGVuID0KKyAgICAgICAg IHBhdGhfbGVuICsgMTMgKworICAgICAgICAgKChsaW5rX3R5cGUgPT0gTElCU1NIMl9TRlRQX1NZ TUxJTkspID8gKDQgKyB0YXJnZXRfbGVuKSA6IDApOworICAgICB1bnNpZ25lZCBjaGFyICpzLCAq ZGF0YSA9IE5VTEw7CisrICAgIHN0cnVjdCBzdHJpbmdfYnVmIGJ1ZjsKKyAgICAgc3RhdGljIGNv bnN0IHVuc2lnbmVkIGNoYXIgbGlua19yZXNwb25zZXNbMl0gPQorICAgICAgICAgeyBTU0hfRlhQ X05BTUUsIFNTSF9GWFBfU1RBVFVTIH07CisgICAgIGludCByZXRjb2RlOworKyAgICB1bnNpZ25l ZCBjaGFyIHBhY2tldF90eXBlOworKyAgICB1aW50MzJfdCB0bXBfdTMyOworKyAgICB1bnNpZ25l ZCBjaGFyICpsa190YXJnZXQ7CisgCisgICAgIGlmKHNmdHAtPnN5bWxpbmtfc3RhdGUgPT0gbGli c3NoMl9OQl9zdGF0ZV9pZGxlKSB7CisgICAgICAgICBzZnRwLT5sYXN0X2Vycm5vID0gTElCU1NI Ml9GWF9PSzsKK0BAIC0zODkxLDggKzM4OTUsMjUgQEAgc3RhdGljIGludCBzZnRwX3N5bWxpbmso TElCU1NIMl9TRlRQICpzZnRwLCBjb25zdCBjaGFyICpwYXRoLAorIAorICAgICBzZnRwLT5zeW1s aW5rX3N0YXRlID0gbGlic3NoMl9OQl9zdGF0ZV9pZGxlOworIAorLSAgICBpZihkYXRhWzBdID09 IFNTSF9GWFBfU1RBVFVTKSB7CistICAgICAgICByZXRjb2RlID0gX2xpYnNzaDJfbnRvaHUzMihk YXRhICsgNSk7CisrICAgIGJ1Zi5kYXRhID0gKHVuc2lnbmVkIGNoYXIgKilTU0gyX1VOQ09OU1Qo ZGF0YSk7CisrICAgIGJ1Zi5kYXRhcHRyID0gYnVmLmRhdGE7CisrICAgIGJ1Zi5sZW4gPSBkYXRh X2xlbjsKKysKKysgICAgaWYoX2xpYnNzaDJfZ2V0X2J5dGUoJmJ1ZiwgJnBhY2tldF90eXBlKSkg eworKyAgICAgICAgTElCU1NIMl9GUkVFKHNlc3Npb24sIGRhdGEpOworKyAgICAgICAgcmV0dXJu IF9saWJzc2gyX2Vycm9yKHNlc3Npb24sIExJQlNTSDJfRVJST1JfU0ZUUF9QUk9UT0NPTCwKKysg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAiU0ZUUCBQcm90b2NvbCBFcnJvciAodHlwZSki KTsKKysgICAgfQorKworKyAgICBpZihwYWNrZXRfdHlwZSA9PSBTU0hfRlhQX1NUQVRVUykgewor KyAgICAgICAgaWYoX2xpYnNzaDJfZ2V0X3UzMigmYnVmLCAmdG1wX3UzMikpIHsKKysgICAgICAg ICAgICBMSUJTU0gyX0ZSRUUoc2Vzc2lvbiwgZGF0YSk7CisrICAgICAgICAgICAgcmV0dXJuIF9s aWJzc2gyX2Vycm9yKHNlc3Npb24sIExJQlNTSDJfRVJST1JfU0ZUUF9QUk9UT0NPTCwKKysgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIlNGVFAgUHJvdG9jb2wgRXJyb3IgKGNvZGUp Iik7CisrICAgICAgICB9CisrCisrICAgICAgICByZXRjb2RlID0gKGludCl0bXBfdTMyOworKwor ICAgICAgICAgTElCU1NIMl9GUkVFKHNlc3Npb24sIGRhdGEpOworICAgICAgICAgaWYocmV0Y29k ZSA9PSBMSUJTU0gyX0ZYX09LKQorICAgICAgICAgICAgIHJldHVybiBMSUJTU0gyX0VSUk9SX05P TkU7CitAQCAtMzkwMywzMCArMzkyNCwzNyBAQCBzdGF0aWMgaW50IHNmdHBfc3ltbGluayhMSUJT U0gyX1NGVFAgKnNmdHAsIGNvbnN0IGNoYXIgKnBhdGgsCisgICAgICAgICB9CisgICAgIH0KKyAK Ky0gICAgaWYoX2xpYnNzaDJfbnRvaHUzMihkYXRhICsgNSkgPCAxKSB7CisrICAgIC8qIGFkdmFu Y2UgcGFzdCBpZCAqLworKyAgICBpZihfbGlic3NoMl9nZXRfdTMyKCZidWYsICZ0bXBfdTMyKSkg eworICAgICAgICAgTElCU1NIMl9GUkVFKHNlc3Npb24sIGRhdGEpOworICAgICAgICAgcmV0dXJu IF9saWJzc2gyX2Vycm9yKHNlc3Npb24sIExJQlNTSDJfRVJST1JfU0ZUUF9QUk9UT0NPTCwKKy0g ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAiSW52YWxpZCBSRUFETElOSy9SRUFMUEFUSCBy ZXNwb25zZSwgIgorLSAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICJubyBuYW1lIGVudHJp ZXMiKTsKKysgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAiU0ZUUCBQcm90b2NvbCBFcnJv ciAoaWQpIik7CisgICAgIH0KKyAKKy0gICAgaWYoZGF0YV9sZW4gPCAxMykgeworLSAgICAgICAg aWYoZGF0YV9sZW4gPiAwKSB7CistICAgICAgICAgICAgTElCU1NIMl9GUkVFKHNlc3Npb24sIGRh dGEpOworLSAgICAgICAgfQorKyAgICAvKiBsb29rIGZvciBhdCBsZWFzdCBvbmUgbGluayAqLwor KyAgICBpZihfbGlic3NoMl9nZXRfdTMyKCZidWYsICZ0bXBfdTMyKSB8fCB0bXBfdTMyIDwgMSkg eworKyAgICAgICAgTElCU1NIMl9GUkVFKHNlc3Npb24sIGRhdGEpOworICAgICAgICAgcmV0dXJu IF9saWJzc2gyX2Vycm9yKHNlc3Npb24sIExJQlNTSDJfRVJST1JfU0ZUUF9QUk9UT0NPTCwKKy0g ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAiU0ZUUCBzdGF0IHBhY2tldCB0b28gc2hvcnQi KTsKKysgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIkludmFsaWQgUkVBRExJ TksvUkVBTFBBVEggcmVzcG9uc2UsICIKKysgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIm5vIG5hbWUgZW50cmllcyIpOworICAgICB9CisgCistICAgIC8qIHRoaXMgcmVhZHMg YSB1MzIgYW5kIHN0b3JlcyBpdCBpbnRvIGEgc2lnbmVkIDMyYml0IHZhbHVlICovCistICAgIGxp bmtfbGVuID0gX2xpYnNzaDJfbnRvaHUzMihkYXRhICsgOSk7CistICAgIGlmKGxpbmtfbGVuIDwg dGFyZ2V0X2xlbikgeworLSAgICAgICAgbWVtY3B5KHRhcmdldCwgZGF0YSArIDEzLCBsaW5rX2xl bik7CistICAgICAgICB0YXJnZXRbbGlua19sZW5dID0gMDsKKy0gICAgICAgIHJldGNvZGUgPSAo aW50KWxpbmtfbGVuOworKyAgICBpZihfbGlic3NoMl9nZXRfc3RyaW5nKCZidWYsICZsa190YXJn ZXQsICZsa19sZW4pID09IExJQlNTSDJfRVJST1JfTk9ORSkgeworKyAgICAgICAgaWYobGtfbGVu IDwgdGFyZ2V0X2xlbikgeworKyAgICAgICAgICAgIG1lbWNweSh0YXJnZXQsIGxrX3RhcmdldCwg bGtfbGVuKTsKKysgICAgICAgICAgICB0YXJnZXRbbGtfbGVuXSA9ICdcMCc7CisrICAgICAgICAg ICAgcmV0Y29kZSA9IChpbnQpbGtfbGVuOworKyAgICAgICAgfQorKyAgICAgICAgZWxzZSB7Cisr ICAgICAgICAgICAgcmV0Y29kZSA9IExJQlNTSDJfRVJST1JfQlVGRkVSX1RPT19TTUFMTDsKKysg ICAgICAgIH0KKyAgICAgfQorLSAgICBlbHNlCistICAgICAgICByZXRjb2RlID0gTElCU1NIMl9F UlJPUl9CVUZGRVJfVE9PX1NNQUxMOworKyAgICBlbHNlIHsKKysgICAgICAgIExJQlNTSDJfRlJF RShzZXNzaW9uLCBkYXRhKTsKKysgICAgICAgIHJldHVybiBfbGlic3NoMl9lcnJvcihzZXNzaW9u LCBMSUJTU0gyX0VSUk9SX1NGVFBfUFJPVE9DT0wsCisrICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgIlNGVFAgUHJvdG9jb2wgRXJyb3IgKGZpbGVuYW1lKSIpOworKyAgICB9CisrCisgICAg IExJQlNTSDJfRlJFRShzZXNzaW9uLCBkYXRhKTsKKyAKKyAgICAgcmV0dXJuIHJldGNvZGU7Cist LS0gYS9zcmMvbGlic3NoMl9wcml2LmgKKysrKyBiL3NyYy9saWJzc2gyX3ByaXYuaAorQEAgLTEx Nyw2ICsxMTcsMTQgQEAKKyAjZGVmaW5lIFVJTlQzMl9NQVggMHhmZmZmZmZmZlUKKyAjZW5kaWYK KyAKKysjaWZkZWYgX1dJTjY0CisrI2RlZmluZSBTU0gyX1VOQ09OU1QocCkgICgodm9pZCAqKShs aWJzc2gyX3VpbnQ2NF90KShjb25zdCB2b2lkICopKHApKQorKyNlbGlmIGRlZmluZWQoX01TQ19W RVIpCisrI2RlZmluZSBTU0gyX1VOQ09OU1QocCkgICgodm9pZCAqKSh1bnNpZ25lZCBpbnQpKGNv bnN0IHZvaWQgKikocCkpCisrI2Vsc2UKKysjZGVmaW5lIFNTSDJfVU5DT05TVChwKSAgKCh2b2lk ICopKHVpbnRwdHJfdCkoY29uc3Qgdm9pZCAqKShwKSkKKysjZW5kaWYKKysKKyAjaWYgKGRlZmlu ZWQoX19HTlVDX18pIHx8IGRlZmluZWQoX19jbGFuZ19fKSkgJiYgXAorICAgICBkZWZpbmVkKF9f U1REQ19WRVJTSU9OX18pICYmIChfX1NURENfVkVSU0lPTl9fID49IDE5OTkwMUwpICYmIFwKKyAg ICAgIWRlZmluZWQoTElCU1NIMl9OT19GTVRfQ0hFQ0tTKQoKZGlmZiAtLWdpdCBhL2xpYnNzaDIu c3BlYyBiL2xpYnNzaDIuc3BlYwppbmRleCBkYzJmY2Y2Li43MGFiNjk3IDEwMDY0NAotLS0gYS9s aWJzc2gyLnNwZWMKKysrIGIvbGlic3NoMi5zcGVjCkBAIC02LDcgKzYsNyBAQAogCiBOYW1lOgkJ bGlic3NoMgogVmVyc2lvbjoJMS4xMS4xCi1SZWxlYXNlOgk4JXs/ZGlzdH0KK1JlbGVhc2U6CTkl ez9kaXN0fQogU3VtbWFyeToJQSBsaWJyYXJ5IGltcGxlbWVudGluZyB0aGUgU1NIMiBwcm90b2Nv bAogTGljZW5zZToJQlNELTMtQ2xhdXNlCiBVUkw6CQlodHRwczovL3d3dy5saWJzc2gyLm9yZy8K QEAgLTE3LDYgKzE3LDcgQEAgU291cmNlMjoJaHR0cHM6Ly9kYW5pZWwuaGF4eC5zZS9teWtleS5h c2MKIFBhdGNoMDoJCWxpYnNzaDItMS4xMS4xLUNWRS0yMDI2LTc1OTgucGF0Y2gKIFBhdGNoMToJ CTk3YWNmM2RmZGE4MGM5MWMzYThjOWYyMzcyNTQ2MzAxZDRhMWE3YTgtbGlic3NoMi0xLjExLjEu cGF0Y2gKIFBhdGNoMjoJCTE3NjI2ODU3ZDIwYjNjOWExYWRkZmE0NTk3OWRhZGNlZTFjZDg0YTQu cGF0Y2gKK1BhdGNoMzoJCTJkYWUzMDItbGlic3NoMi0xLjExLjEucGF0Y2gKIAogQnVpbGRSZXF1 aXJlczoJY29yZXV0aWxzCiBCdWlsZFJlcXVpcmVzOglmaW5kdXRpbHMKQEAgLTY4LDE0ICs2OSwy MSBAQCBkZXZlbG9waW5nIGFwcGxpY2F0aW9ucyB0aGF0IHVzZSBsaWJzc2gyLgogIyBDVkUtMjAy Ni03NTk4IGxpYnNzaDI6IGludGVnZXIgb3ZlcmZsb3cgdmlhIGxhcmdlIHVzZXJuYW1lIG9yIHBh c3N3b3JkIGFyZ3VtZW50cwogIyBodHRwczovL2dpdGh1Yi5jb20vbGlic3NoMi9saWJzc2gyL3B1 bGwvMTg1OAogJXBhdGNoIC1QMAorCiAjIENWRS0yMDI2LTU1MjAwIHRyYW5zcG9ydC5jOiBBZGRp dGlvbmFsIGJvdW5kYXJ5IGNoZWNrcyBmb3IgcGFja2V0IGxlbmd0aAogIyBQYXRjaCBtb2RpZmll ZCBmb3IgZG93bnN0cmVhbQogIyBodHRwczovL2dpdGh1Yi5jb20vbGlic3NoMi9saWJzc2gyL3B1 bGwvMjA1MgogJXBhdGNoIC1wMSAtUDEKKwogIyBDVkUtMjAyNi01NTE5OSBwYWNrZXQuYzogY2hl Y2sgX2xpYnNzaDJfZ2V0X3N0cmluZygpIHJldHVybiBpbiBFWFRfSU5GTyBoYW5kbGVyCiAjIGh0 dHBzOi8vZ2l0aHViLmNvbS9saWJzc2gyL2xpYnNzaDIvcHVsbC8xODY0CiAlcGF0Y2ggLXAxIC1Q MgogCisjIENWRS0yMDI1LTE1NjYxOiBJbmZvcm1hdGlvbiBkaXNjbG9zdXJlIGFuZCBkZW5pYWwg b2Ygc2VydmljZSB2aWEgY3JhZnRlZCBTRlRQIHJlc3BvbnNlCisjIGh0dHBzOi8vZ2l0aHViLmNv bS9saWJzc2gyL2xpYnNzaDIvcHVsbC8xNzA1CisjIGh0dHBzOi8vZ2l0aHViLmNvbS9saWJzc2gy L2xpYnNzaDIvcHVsbC8xNzE3CislcGF0Y2ggLXAxIC1QMworCiAjIFJlcGxhY2UgaGFyZCB3aXJl ZCBwb3J0IG51bWJlciBpbiB0aGUgdGVzdCBzdWl0ZSB0byBhdm9pZCBjb2xsaXNpb25zCiAjIGJl dHdlZW4gMzItYml0IGFuZCA2NC1iaXQgYnVpbGRzIHJ1bm5pbmcgb24gYSBzaW5nbGUgYnVpbGQt aG9zdAogc2VkIC1pIHMvNDcxMS80NyV7P19faXNhX2JpdHN9LyB0ZXN0cy97b3BlbnNzaF9maXh0 dXJlLmMsdGVzdF9zc2h7Mi5jLGQudGVzdH19CkBAIC0xMzAsNiArMTM4LDEwIEBAIExDX0FMTD1l bl9VUy5VVEYtOCBtYWtlIC1DIHRlc3RzIGNoZWNrCiAle19saWJkaXJ9L3BrZ2NvbmZpZy9saWJz c2gyLnBjCiAKICVjaGFuZ2Vsb2cKKyogVGh1IEp1biAyNSAyMDI2IFBhdWwgSG93YXJ0aCA8cGF1 bEBjaXR5LWZhbi5vcmc+IC0gMS4xMS4xLTkKKy0gRml4IENWRS0yMDI1LTE1NjYxOiBJbmZvcm1h dGlvbiBkaXNjbG9zdXJlIGFuZCBkZW5pYWwgb2Ygc2VydmljZSB2aWEgY3JhZnRlZAorICBTRlRQ IHJlc3BvbnNlCisKICogVHVlIEp1biAyMyAyMDI2IE1pa2VsIE9sYXNhZ2FzdGkgVXJhbmdhIDxt aWtlbEBvbGFzYWdhc3RpLmluZm8+IC0gMS4xMS4xLTgKIC0gRml4IENWRS0yMDI2LTU1MjAwICYg Q1ZFLTIwMjYtNTUxOTkKIAo=