From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Zdenek Dohnal To: git-commits@fedoraproject.org Subject: [rpms/hplip] f44: fix CVE-2026-14544 - incomplete fix after CVE-2026-8631 (fedora#2496773, Date: Fri, 03 Jul 2026 08:48:16 GMT Message-ID: <178306849615.1.10777872475499655676.rpms-hplip-f608b603fdbc@fedoraproject.org> List-ID: X-Git-Repo: rpms/hplip X-Git-Branch: f44 X-Git-Rev: f608b603fdbcb101d3e64b847b965527a12c29cb ICAgICAgICAgIEEgbmV3IGNvbW1pdCBoYXMgYmVlbiBwdXNoZWQuCgogICAgICAgICAgUmVwbyAg IDogcnBtcy9ocGxpcAogICAgICAgICAgQnJhbmNoIDogZjQ0CiAgICAgICAgICBDb21taXQgOiBm NjA4YjYwM2ZkYmNiMTAxZDNlNjRiODQ3Yjk2NTUyN2ExMmMyOWNiCiAgICAgICAgICBBdXRob3Ig OiBaZGVuZWsgRG9obmFsIDx6ZG9obmFsQHJlZGhhdC5jb20+CiAgICAgICAgICBEYXRlICAgOiAy MDI2LTA3LTAzVDEwOjMzOjI1KzAyOjAwCiAgICAgICAgICBTdGF0cyAgOiArMTQvLTEzIGluIDIg ZmlsZShzKQogICAgICAgICAgVVJMICAgIDogaHR0cHM6Ly9zcmMuZmVkb3JhcHJvamVjdC5vcmcv cnBtcy9ocGxpcC9jL2Y2MDhiNjAzZmRiY2IxMDFkM2U2NGI4NDdiOTY1NTI3YTEyYzI5Y2I/YnJh bmNoPWY0NAoKICAgICAgICAgIExvZzoKICAgICAgICAgIGZpeCBDVkUtMjAyNi0xNDU0NCAtIGlu Y29tcGxldGUgZml4IGFmdGVyIENWRS0yMDI2LTg2MzEgKGZlZG9yYSMyNDk2NzczLAoKZmVkb3Jh IzI0OTY3NzIpCgotLS0KZGlmZiAtLWdpdCBhL2hwbGlwLUNWRS0yMDI2LTg2MzEtb3NoLnBhdGNo IGIvaHBsaXAtQ1ZFLTIwMjYtODYzMS1vc2gucGF0Y2gKaW5kZXggOTFiYWFhNy4uMjI2YTU3MCAx MDA2NDQKLS0tIGEvaHBsaXAtQ1ZFLTIwMjYtODYzMS1vc2gucGF0Y2gKKysrIGIvaHBsaXAtQ1ZF LTIwMjYtODYzMS1vc2gucGF0Y2gKQEAgLTEsMTMgKzEsMTAgQEAKLWRpZmYgLS1naXQgYS9wcm50 L2hwY3Vwcy9nZW5QQ0xtLmNwcCBiL3BybnQvaHBjdXBzL2dlblBDTG0uY3BwCi1pbmRleCAwZTE2 NTBjLi41ZjgzY2JhIDEwMDY0NAotLS0tIGEvcHJudC9ocGN1cHMvZ2VuUENMbS5jcHAKLSsrKyBi L3BybnQvaHBjdXBzL2dlblBDTG0uY3BwCi1AQCAtMTkxNyw4ICsxOTE3LDExIEBAIGludCAgUENM bUdlbmVyYXRvcjo6RW5jYXBzdWxhdGUodm9pZCAqcEluQnVmZmVyLCBpbnQgaW5CdWZmZXJTaXpl LCBpbnQgdGhpc0hlaWdoCi0gI2lmZGVmIFNVUFBPUlRfV0hJVEVfU1RSSVBTCitkaWZmIC11cCBo cGxpcC0zLjIxLjIvcHJudC9ocGN1cHMvZ2VuUENMbS5jcHAuQ1ZFLTIwMjYtODYzMS1vc2ggaHBs aXAtMy4yMS4yL3BybnQvaHBjdXBzL2dlblBDTG0uY3BwCistLS0gaHBsaXAtMy4yMS4yL3BybnQv aHBjdXBzL2dlblBDTG0uY3BwLkNWRS0yMDI2LTg2MzEtb3NoCTIwMjYtMDctMDMgMDg6MjU6MTcu NzE3ODg4NzYzICswMjAwCisrKysgaHBsaXAtMy4yMS4yL3BybnQvaHBjdXBzL2dlblBDTG0uY3Bw CTIwMjYtMDctMDMgMDg6NDg6MjIuMjI1MTMwOTQwICswMjAwCitAQCAtMTkyMiw3ICsxOTIyLDEw IEBAIGludCAgUENMbUdlbmVyYXRvcjo6RW5jYXBzdWxhdGUodm9pZCAqcEkKICAJaW50IHdoaXRl U3RyaXBMZW49MDsKICAJaWYoIXNhZmVfbXVsX2ludF9wb3NpdGl2ZSh0aGlzSGVpZ2h0LCBjdXJy U291cmNlV2lkdGgsICZ3aGl0ZVN0cmlwTGVuKSB8fAotLQkgICAhc2FmZV9tdWxfaW50X3Bvc2l0 aXZlKHdoaXRlU3RyaXBMZW4sIHNyY051bUNvbXBvbmVudHMsICZ3aGl0ZVN0cmlwTGVuKSkKLSsJ ICAgIXNhZmVfbXVsX2ludF9wb3NpdGl2ZSh0aGlzSGVpZ2h0LCBzcmNOdW1Db21wb25lbnRzLCAm d2hpdGVTdHJpcExlbikpCisgCSAgICFzYWZlX211bF9pbnRfcG9zaXRpdmUod2hpdGVTdHJpcExl biwgc3JjTnVtQ29tcG9uZW50cywgJndoaXRlU3RyaXBMZW4pKQogKwl7CiArCQlmcmVlKG5ld1N0 cmlwUHRyKTsKICAJCXJldHVybihlcnJvck91dEFuZENsZWFuVXAoKSk7CkBAIC0xNSw3ICsxMiw3 IEBAIGluZGV4IDBlMTY1MGMuLjVmODNjYmEgMTAwNjQ0CiAgCWJvb2wgd2hpdGVTdHJpcD1pc1do aXRlU3RyaXAocEluQnVmZmVyLCB3aGl0ZVN0cmlwTGVuKTsKICAJaWYoRGVidWdJdDIpCiAgCXsK LUBAIC0xOTQwLDExICsxOTQzLDE3IEBAIGludCAgUENMbUdlbmVyYXRvcjo6RW5jYXBzdWxhdGUo dm9pZCAqcEluQnVmZmVyLCBpbnQgaW5CdWZmZXJTaXplLCBpbnQgdGhpc0hlaWdoCitAQCAtMTk0 NCwxMSArMTk0NywxNyBAQCBpbnQgIFBDTG1HZW5lcmF0b3I6OkVuY2Fwc3VsYXRlKHZvaWQgKnBJ CiAgCQkJdWJ5dGUgd2hpdGVQdD0weGZmOwogIAkJCXNpemVfdCB0bXBTdHJpcFNpemU9MDsKICAJ CQlpZighc2FmZV9tdWxfc2l6ZV90KChzaXplX3Qpc2NhbmxpbmVXaWR0aCwgKHNpemVfdCl0b3BN YXJnaW5JblBpeCwgJnRtcFN0cmlwU2l6ZSkpCkBAIC0zMyw3ICszMCw3IEBAIGluZGV4IDBlMTY1 MGMuLjVmODNjYmEgMTAwNjQ0CiAgCQkJbWVtc2V0KHRtcFN0cmlwLHdoaXRlUHQsdG1wU3RyaXBT aXplKTsKICAKICAKLUBAIC0yMDEyLDcgKzIwMjEsMTAgQEAgaW50ICBQQ0xtR2VuZXJhdG9yOjpF bmNhcHN1bGF0ZSh2b2lkICpwSW5CdWZmZXIsIGludCBpbkJ1ZmZlclNpemUsIGludCB0aGlzSGVp Z2gKK0BAIC0yMDE2LDcgKzIwMjUsMTAgQEAgaW50ICBQQ0xtR2VuZXJhdG9yOjpFbmNhcHN1bGF0 ZSh2b2lkICpwSQogIAl7CiAgCQlpbnQgc291cmNlTGVuPTA7CiAgCQlpZighc2FmZV9tdWxfaW50 X3Bvc2l0aXZlKG51bUxpbmVzVGhpc0NhbGwsIHNjYW5saW5lV2lkdGgsICZzb3VyY2VMZW4pKQpA QCAtNDQsNyArNDEsNyBAQCBpbmRleCAwZTE2NTBjLi41ZjgzY2JhIDEwMDY0NAogIAkJdWludDMy IGxlbj0odWludDMyKXNvdXJjZUxlbjsKICAJCXVMb25nZiBkZXN0U2l6ZT1sZW47CiAgCi1AQCAt MjAyMSwxMiArMjAzMywxOCBAQCBpbnQgIFBDTG1HZW5lcmF0b3I6OkVuY2Fwc3VsYXRlKHZvaWQg KnBJbkJ1ZmZlciwgaW50IGluQnVmZmVyU2l6ZSwgaW50IHRoaXNIZWlnaAorQEAgLTIwMjUsMTIg KzIwMzcsMTggQEAgaW50ICBQQ0xtR2VuZXJhdG9yOjpFbmNhcHN1bGF0ZSh2b2lkICpwSQogIAkJ CXVieXRlIHdoaXRlUHQ9MHhmZjsKICAJCQlzaXplX3QgdG1wU3RyaXBTaXplPTA7CiAgCQkJaWYo IXNhZmVfbXVsX3NpemVfdCgoc2l6ZV90KXNjYW5saW5lV2lkdGgsIChzaXplX3QpdG9wTWFyZ2lu SW5QaXgsICZ0bXBTdHJpcFNpemUpKQpAQCAtNjMsNyArNjAsNyBAQCBpbmRleCAwZTE2NTBjLi41 ZjgzY2JhIDEwMDY0NAogIAkJCXVMb25nZiB0bXBEZXN0U2l6ZT1kZXN0U2l6ZTsKICAJCQltZW1z ZXQodG1wU3RyaXAsd2hpdGVQdCx0bXBTdHJpcFNpemUpOwogIAotQEAgLTIwNzUsMjAgKzIwOTMs MjkgQEAgaW50ICBQQ0xtR2VuZXJhdG9yOjpFbmNhcHN1bGF0ZSh2b2lkICpwSW5CdWZmZXIsIGlu dCBpbkJ1ZmZlclNpemUsIGludCB0aGlzSGVpZ2gKK0BAIC0yMDc5LDIwICsyMDk3LDI5IEBAIGlu dCAgUENMbUdlbmVyYXRvcjo6RW5jYXBzdWxhdGUodm9pZCAqcEkKICAJewogIAkJaW50IHNvdXJj ZUxlbj0wOwogIAkJaWYoIXNhZmVfbXVsX2ludF9wb3NpdGl2ZShudW1MaW5lc1RoaXNDYWxsLCBz Y2FubGluZVdpZHRoLCAmc291cmNlTGVuKSkKCmRpZmYgLS1naXQgYS9ocGxpcC5zcGVjIGIvaHBs aXAuc3BlYwppbmRleCBiZmM1Mjg2Li5jMGQ4MjE5IDEwMDY0NAotLS0gYS9ocGxpcC5zcGVjCisr KyBiL2hwbGlwLnNwZWMKQEAgLTcsNyArNyw3IEBACiBTdW1tYXJ5OiBIUCBMaW51eCBJbWFnaW5n IGFuZCBQcmludGluZyBQcm9qZWN0CiBOYW1lOiBocGxpcAogVmVyc2lvbjogMy4yNi40Ci1SZWxl YXNlOiA2JXs/ZGlzdH0KK1JlbGVhc2U6IDclez9kaXN0fQogIyBtb3N0IGZpbGVzIChiYXNlLyos ICosIHVpKi8uLi4pIC0gR1BMMisKICMgcHJudC9ocGlqcy8ganBlZyByZWxhdGVkIGZpbGVzIC0g SUpHCiAjIHBybnQvKiAtIEJTRC0zLUNsYXVzZS1IUCAtIGl0IGlzIG1vZGlmaWVkIGEgbGl0dGxl LCBhc2tlZCBoZXJlIGh0dHBzOi8vZ2l0bGFiLmNvbS9mZWRvcmEvbGVnYWwvZmVkb3JhLWxpY2Vu c2UtZGF0YS8tL2lzc3Vlcy8yNjcKQEAgLTEwMDEsNiArMTAwMSwxMCBAQCBmaW5kIGRvYy9pbWFn ZXMgLXR5cGUgZiAtZXhlYyBjaG1vZCA2NDQge30gXDsKICVjb25maWcobm9yZXBsYWNlKSAle19z eXNjb25mZGlyfS9zYW5lLmQvZGxsLmQvaHBhaW8KIAogJWNoYW5nZWxvZworKiBGcmkgSnVsIDAz IDIwMjYgWmRlbmVrIERvaG5hbCA8emRvaG5hbEByZWRoYXQuY29tPiAtIDMuMjYuNC03CistIGZp eCBDVkUtMjAyNi0xNDU0NCAtIGluY29tcGxldGUgZml4IGFmdGVyIENWRS0yMDI2LTg2MzEgKGZl ZG9yYSMyNDk2NzczLAorICBmZWRvcmEjMjQ5Njc3MikKKwogKiBNb24gSnVuIDE1IDIwMjYgWmRl bmVrIERvaG5hbCA8emRvaG5hbEByZWRoYXQuY29tPiAtIDMuMjYuNC02CiAtIEZpeCBtb3JlIGxl YWtzIGFmdGVyIENWRS0yMDI2LTg2MzIgZml4CiAK