From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Zdenek Dohnal To: git-commits@fedoraproject.org Subject: [rpms/hplip] rawhide: fix CVE-2026-14544 - incomplete fix after CVE-2026-8631 (fedora#2496773, Date: Fri, 03 Jul 2026 08:33:30 GMT Message-ID: <178306761038.1.16867766054415062826.rpms-hplip-f608b603fdbc@fedoraproject.org> List-ID: X-Git-Repo: rpms/hplip X-Git-Branch: rawhide X-Git-Rev: f608b603fdbcb101d3e64b847b965527a12c29cb ICAgICAgICAgIEEgbmV3IGNvbW1pdCBoYXMgYmVlbiBwdXNoZWQuCgogICAgICAgICAgUmVwbyAg IDogcnBtcy9ocGxpcAogICAgICAgICAgQnJhbmNoIDogcmF3aGlkZQogICAgICAgICAgQ29tbWl0 IDogZjYwOGI2MDNmZGJjYjEwMWQzZTY0Yjg0N2I5NjU1MjdhMTJjMjljYgogICAgICAgICAgQXV0 aG9yIDogWmRlbmVrIERvaG5hbCA8emRvaG5hbEByZWRoYXQuY29tPgogICAgICAgICAgRGF0ZSAg IDogMjAyNi0wNy0wM1QxMDozMzoyNSswMjowMAogICAgICAgICAgU3RhdHMgIDogKzE0Ly0xMyBp biAyIGZpbGUocykKICAgICAgICAgIFVSTCAgICA6IGh0dHBzOi8vc3JjLmZlZG9yYXByb2plY3Qu b3JnL3JwbXMvaHBsaXAvYy9mNjA4YjYwM2ZkYmNiMTAxZDNlNjRiODQ3Yjk2NTUyN2ExMmMyOWNi P2JyYW5jaD1yYXdoaWRlCgogICAgICAgICAgTG9nOgogICAgICAgICAgZml4IENWRS0yMDI2LTE0 NTQ0IC0gaW5jb21wbGV0ZSBmaXggYWZ0ZXIgQ1ZFLTIwMjYtODYzMSAoZmVkb3JhIzI0OTY3NzMs CgpmZWRvcmEjMjQ5Njc3MikKCi0tLQpkaWZmIC0tZ2l0IGEvaHBsaXAtQ1ZFLTIwMjYtODYzMS1v c2gucGF0Y2ggYi9ocGxpcC1DVkUtMjAyNi04NjMxLW9zaC5wYXRjaAppbmRleCA5MWJhYWE3Li4y MjZhNTcwIDEwMDY0NAotLS0gYS9ocGxpcC1DVkUtMjAyNi04NjMxLW9zaC5wYXRjaAorKysgYi9o cGxpcC1DVkUtMjAyNi04NjMxLW9zaC5wYXRjaApAQCAtMSwxMyArMSwxMCBAQAotZGlmZiAtLWdp dCBhL3BybnQvaHBjdXBzL2dlblBDTG0uY3BwIGIvcHJudC9ocGN1cHMvZ2VuUENMbS5jcHAKLWlu ZGV4IDBlMTY1MGMuLjVmODNjYmEgMTAwNjQ0Ci0tLS0gYS9wcm50L2hwY3Vwcy9nZW5QQ0xtLmNw cAotKysrIGIvcHJudC9ocGN1cHMvZ2VuUENMbS5jcHAKLUBAIC0xOTE3LDggKzE5MTcsMTEgQEAg aW50ICBQQ0xtR2VuZXJhdG9yOjpFbmNhcHN1bGF0ZSh2b2lkICpwSW5CdWZmZXIsIGludCBpbkJ1 ZmZlclNpemUsIGludCB0aGlzSGVpZ2gKLSAjaWZkZWYgU1VQUE9SVF9XSElURV9TVFJJUFMKK2Rp ZmYgLXVwIGhwbGlwLTMuMjEuMi9wcm50L2hwY3Vwcy9nZW5QQ0xtLmNwcC5DVkUtMjAyNi04NjMx LW9zaCBocGxpcC0zLjIxLjIvcHJudC9ocGN1cHMvZ2VuUENMbS5jcHAKKy0tLSBocGxpcC0zLjIx LjIvcHJudC9ocGN1cHMvZ2VuUENMbS5jcHAuQ1ZFLTIwMjYtODYzMS1vc2gJMjAyNi0wNy0wMyAw ODoyNToxNy43MTc4ODg3NjMgKzAyMDAKKysrKyBocGxpcC0zLjIxLjIvcHJudC9ocGN1cHMvZ2Vu UENMbS5jcHAJMjAyNi0wNy0wMyAwODo0ODoyMi4yMjUxMzA5NDAgKzAyMDAKK0BAIC0xOTIyLDcg KzE5MjIsMTAgQEAgaW50ICBQQ0xtR2VuZXJhdG9yOjpFbmNhcHN1bGF0ZSh2b2lkICpwSQogIAlp bnQgd2hpdGVTdHJpcExlbj0wOwogIAlpZighc2FmZV9tdWxfaW50X3Bvc2l0aXZlKHRoaXNIZWln aHQsIGN1cnJTb3VyY2VXaWR0aCwgJndoaXRlU3RyaXBMZW4pIHx8Ci0tCSAgICFzYWZlX211bF9p bnRfcG9zaXRpdmUod2hpdGVTdHJpcExlbiwgc3JjTnVtQ29tcG9uZW50cywgJndoaXRlU3RyaXBM ZW4pKQotKwkgICAhc2FmZV9tdWxfaW50X3Bvc2l0aXZlKHRoaXNIZWlnaHQsIHNyY051bUNvbXBv bmVudHMsICZ3aGl0ZVN0cmlwTGVuKSkKKyAJICAgIXNhZmVfbXVsX2ludF9wb3NpdGl2ZSh3aGl0 ZVN0cmlwTGVuLCBzcmNOdW1Db21wb25lbnRzLCAmd2hpdGVTdHJpcExlbikpCiArCXsKICsJCWZy ZWUobmV3U3RyaXBQdHIpOwogIAkJcmV0dXJuKGVycm9yT3V0QW5kQ2xlYW5VcCgpKTsKQEAgLTE1 LDcgKzEyLDcgQEAgaW5kZXggMGUxNjUwYy4uNWY4M2NiYSAxMDA2NDQKICAJYm9vbCB3aGl0ZVN0 cmlwPWlzV2hpdGVTdHJpcChwSW5CdWZmZXIsIHdoaXRlU3RyaXBMZW4pOwogIAlpZihEZWJ1Z0l0 MikKICAJewotQEAgLTE5NDAsMTEgKzE5NDMsMTcgQEAgaW50ICBQQ0xtR2VuZXJhdG9yOjpFbmNh cHN1bGF0ZSh2b2lkICpwSW5CdWZmZXIsIGludCBpbkJ1ZmZlclNpemUsIGludCB0aGlzSGVpZ2gK K0BAIC0xOTQ0LDExICsxOTQ3LDE3IEBAIGludCAgUENMbUdlbmVyYXRvcjo6RW5jYXBzdWxhdGUo dm9pZCAqcEkKICAJCQl1Ynl0ZSB3aGl0ZVB0PTB4ZmY7CiAgCQkJc2l6ZV90IHRtcFN0cmlwU2l6 ZT0wOwogIAkJCWlmKCFzYWZlX211bF9zaXplX3QoKHNpemVfdClzY2FubGluZVdpZHRoLCAoc2l6 ZV90KXRvcE1hcmdpbkluUGl4LCAmdG1wU3RyaXBTaXplKSkKQEAgLTMzLDcgKzMwLDcgQEAgaW5k ZXggMGUxNjUwYy4uNWY4M2NiYSAxMDA2NDQKICAJCQltZW1zZXQodG1wU3RyaXAsd2hpdGVQdCx0 bXBTdHJpcFNpemUpOwogIAogIAotQEAgLTIwMTIsNyArMjAyMSwxMCBAQCBpbnQgIFBDTG1HZW5l cmF0b3I6OkVuY2Fwc3VsYXRlKHZvaWQgKnBJbkJ1ZmZlciwgaW50IGluQnVmZmVyU2l6ZSwgaW50 IHRoaXNIZWlnaAorQEAgLTIwMTYsNyArMjAyNSwxMCBAQCBpbnQgIFBDTG1HZW5lcmF0b3I6OkVu Y2Fwc3VsYXRlKHZvaWQgKnBJCiAgCXsKICAJCWludCBzb3VyY2VMZW49MDsKICAJCWlmKCFzYWZl X211bF9pbnRfcG9zaXRpdmUobnVtTGluZXNUaGlzQ2FsbCwgc2NhbmxpbmVXaWR0aCwgJnNvdXJj ZUxlbikpCkBAIC00NCw3ICs0MSw3IEBAIGluZGV4IDBlMTY1MGMuLjVmODNjYmEgMTAwNjQ0CiAg CQl1aW50MzIgbGVuPSh1aW50MzIpc291cmNlTGVuOwogIAkJdUxvbmdmIGRlc3RTaXplPWxlbjsK ICAKLUBAIC0yMDIxLDEyICsyMDMzLDE4IEBAIGludCAgUENMbUdlbmVyYXRvcjo6RW5jYXBzdWxh dGUodm9pZCAqcEluQnVmZmVyLCBpbnQgaW5CdWZmZXJTaXplLCBpbnQgdGhpc0hlaWdoCitAQCAt MjAyNSwxMiArMjAzNywxOCBAQCBpbnQgIFBDTG1HZW5lcmF0b3I6OkVuY2Fwc3VsYXRlKHZvaWQg KnBJCiAgCQkJdWJ5dGUgd2hpdGVQdD0weGZmOwogIAkJCXNpemVfdCB0bXBTdHJpcFNpemU9MDsK ICAJCQlpZighc2FmZV9tdWxfc2l6ZV90KChzaXplX3Qpc2NhbmxpbmVXaWR0aCwgKHNpemVfdCl0 b3BNYXJnaW5JblBpeCwgJnRtcFN0cmlwU2l6ZSkpCkBAIC02Myw3ICs2MCw3IEBAIGluZGV4IDBl MTY1MGMuLjVmODNjYmEgMTAwNjQ0CiAgCQkJdUxvbmdmIHRtcERlc3RTaXplPWRlc3RTaXplOwog IAkJCW1lbXNldCh0bXBTdHJpcCx3aGl0ZVB0LHRtcFN0cmlwU2l6ZSk7CiAgCi1AQCAtMjA3NSwy MCArMjA5MywyOSBAQCBpbnQgIFBDTG1HZW5lcmF0b3I6OkVuY2Fwc3VsYXRlKHZvaWQgKnBJbkJ1 ZmZlciwgaW50IGluQnVmZmVyU2l6ZSwgaW50IHRoaXNIZWlnaAorQEAgLTIwNzksMjAgKzIwOTcs MjkgQEAgaW50ICBQQ0xtR2VuZXJhdG9yOjpFbmNhcHN1bGF0ZSh2b2lkICpwSQogIAl7CiAgCQlp bnQgc291cmNlTGVuPTA7CiAgCQlpZighc2FmZV9tdWxfaW50X3Bvc2l0aXZlKG51bUxpbmVzVGhp c0NhbGwsIHNjYW5saW5lV2lkdGgsICZzb3VyY2VMZW4pKQoKZGlmZiAtLWdpdCBhL2hwbGlwLnNw ZWMgYi9ocGxpcC5zcGVjCmluZGV4IGJmYzUyODYuLmMwZDgyMTkgMTAwNjQ0Ci0tLSBhL2hwbGlw LnNwZWMKKysrIGIvaHBsaXAuc3BlYwpAQCAtNyw3ICs3LDcgQEAKIFN1bW1hcnk6IEhQIExpbnV4 IEltYWdpbmcgYW5kIFByaW50aW5nIFByb2plY3QKIE5hbWU6IGhwbGlwCiBWZXJzaW9uOiAzLjI2 LjQKLVJlbGVhc2U6IDYlez9kaXN0fQorUmVsZWFzZTogNyV7P2Rpc3R9CiAjIG1vc3QgZmlsZXMg KGJhc2UvKiwgKiwgdWkqLy4uLikgLSBHUEwyKwogIyBwcm50L2hwaWpzLyBqcGVnIHJlbGF0ZWQg ZmlsZXMgLSBJSkcKICMgcHJudC8qIC0gQlNELTMtQ2xhdXNlLUhQIC0gaXQgaXMgbW9kaWZpZWQg YSBsaXR0bGUsIGFza2VkIGhlcmUgaHR0cHM6Ly9naXRsYWIuY29tL2ZlZG9yYS9sZWdhbC9mZWRv cmEtbGljZW5zZS1kYXRhLy0vaXNzdWVzLzI2NwpAQCAtMTAwMSw2ICsxMDAxLDEwIEBAIGZpbmQg ZG9jL2ltYWdlcyAtdHlwZSBmIC1leGVjIGNobW9kIDY0NCB7fSBcOwogJWNvbmZpZyhub3JlcGxh Y2UpICV7X3N5c2NvbmZkaXJ9L3NhbmUuZC9kbGwuZC9ocGFpbwogCiAlY2hhbmdlbG9nCisqIEZy aSBKdWwgMDMgMjAyNiBaZGVuZWsgRG9obmFsIDx6ZG9obmFsQHJlZGhhdC5jb20+IC0gMy4yNi40 LTcKKy0gZml4IENWRS0yMDI2LTE0NTQ0IC0gaW5jb21wbGV0ZSBmaXggYWZ0ZXIgQ1ZFLTIwMjYt ODYzMSAoZmVkb3JhIzI0OTY3NzMsCisgIGZlZG9yYSMyNDk2NzcyKQorCiAqIE1vbiBKdW4gMTUg MjAyNiBaZGVuZWsgRG9obmFsIDx6ZG9obmFsQHJlZGhhdC5jb20+IC0gMy4yNi40LTYKIC0gRml4 IG1vcmUgbGVha3MgYWZ0ZXIgQ1ZFLTIwMjYtODYzMiBmaXgKIAo=