From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Steve Cossette To: git-commits@fedoraproject.org Subject: [rpms/plasma-workspace] rawhide: Fix for a sandbox escape flaw Date: Sat, 04 Jul 2026 11:45:43 GMT Message-ID: <178316554346.1.6629241158585301403.rpms-plasma-workspace-227c81ad6c57@fedoraproject.org> List-ID: X-Git-Repo: rpms/plasma-workspace X-Git-Branch: rawhide X-Git-Rev: 227c81ad6c57048aa76c4c524881b1b352509b28 QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvcGxhc21hLXdvcmtz cGFjZQpCcmFuY2ggOiByYXdoaWRlCkNvbW1pdCA6IDIyN2M4MWFkNmM1NzA0OGFhNzZjNGM1MjQ4 ODFiMWIzNTI1MDliMjgKQXV0aG9yIDogU3RldmUgQ29zc2V0dGUgPGZhcmNob3JkQGdtYWlsLmNv bT4KRGF0ZSAgIDogMjAyNi0wNy0wNFQwNzo0NTozNC0wNDowMApTdGF0cyAgOiArODQvLTEgaW4g MiBmaWxlKHMpClVSTCAgICA6IGh0dHBzOi8vc3JjLmZlZG9yYXByb2plY3Qub3JnL3JwbXMvcGxh c21hLXdvcmtzcGFjZS9jLzIyN2M4MWFkNmM1NzA0OGFhNzZjNGM1MjQ4ODFiMWIzNTI1MDliMjg/ YnJhbmNoPXJhd2hpZGUKCkxvZzoKRml4IGZvciBhIHNhbmRib3ggZXNjYXBlIGZsYXcKCi0tLQpk aWZmIC0tZ2l0IGEvNjgxOS5wYXRjaCBiLzY4MTkucGF0Y2gKbmV3IGZpbGUgbW9kZSAxMDA2NDQK aW5kZXggMDAwMDAwMC4uMWYwOWM2NQotLS0gL2Rldi9udWxsCisrKyBiLzY4MTkucGF0Y2gKQEAg LTAsMCArMSw4MCBAQAorRnJvbSA4M2E0MzlmMGJjNjE4MTFlNDUwYmMwMGVkMjhkMWI5NjRhMWUx OTAxIE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQorRnJvbTogRGF2aWQgRWRtdW5kc29uIDxrZGVA ZGF2aWRlZG11bmRzb24uY28udWs+CitEYXRlOiBGcmksIDMgSnVsIDIwMjYgMTE6Mjk6NTkgKzAw MDAKK1N1YmplY3Q6IFtQQVRDSF0gbGlidGFza21hbmFnZXI6IExpbWl0IGxhdW5jaGluZyBuZXcg aW5zdGFuY2VzIHdoZXJlIHNlcnZpY2UKKyBmaWxlcyBkbyBub3QgZXhpc3QKKworTGlidGFza21h bmFnZXIgaXMgZnVsbCBvZiBsZWdhY3kgY29kZSB0byBoYW5kbGUgYXBwbGljYXRpb25zIG5vdAor cHJvdmlkaW5nIGFwcGxpY2F0aW9uIElEcyBhbmQgaGF2aW5nIHdvcmthcm91bmRzIGZvciB0aGVt LgorCitUaGlzIGluY2x1ZGVzIHByb3ZpZGluZyBhICJPcGVuIGEgTmV3IFdpbmRvdyIgZW50cnkg Zm9yIG1vc3QKK2FwcGxpY2F0aW9ucyB1bmxlc3MgZXhwbGljaXRseSBpbmhpYml0ZWQuIFdoZXJl IGEgbWF0Y2hpbmcgLmRlc2t0b3AgaXMKK2ZvdW5kIHRoZSBFeGVjIGxpbmUgZnJvbSB0aGVyZSBp cyB1c2VkIG90aGVyd2lzZSB0aGVyZSBpcyBhIGZhbGxiYWNrIHRvCitsYXVuY2ggdGhlIHNhbWUg YmluYXJ5IGFnYWluLgorCitUaGlzIGxhdHRlciBmYWxsYmFjayBpcyBub3QgdmVyeSBzYW5kYm94 IGF3YXJlIGFuZCBjb3VsZCBiZSBleHBsb2l0ZWQgdG8KK2xhdW5jaCBhIGRpZmZlcmVudCBiaW5h cnkgb24gdGhlIGhvc3QuIEl0J3Mgbm90IGVzcGVjaWFsbHkgZXhwbG9pdGFibGUsCitpdCByZWxp ZXMgb24gdGhlIHVzZXIgY2xpY2tpbmcgYW4gYWN0aW9uLCBidXQgd2Ugc2hvdWxkIGNsb3NlIGl0 IGFueXdheS4KKworCisoY2hlcnJ5IHBpY2tlZCBmcm9tIGNvbW1pdCA3ZmYyMDlmYTE1MTFkZjYx NjE0NjZkMDU2ZDBhOGQ2MzkzMGMyYjY2KQorCitDby1hdXRob3JlZC1ieTogRGF2aWQgRWRtdW5k c29uIDxrZGVAZGF2aWRlZG11bmRzb24uY28udWs+CistLS0KKyBsaWJ0YXNrbWFuYWdlci90YXNr dG9vbHMuY3BwIHwgMjYgKysrKysrKysrKysrKysrLS0tLS0tLS0tLS0KKyAxIGZpbGUgY2hhbmdl ZCwgMTUgaW5zZXJ0aW9ucygrKSwgMTEgZGVsZXRpb25zKC0pCisKK2RpZmYgLS1naXQgYS9saWJ0 YXNrbWFuYWdlci90YXNrdG9vbHMuY3BwIGIvbGlidGFza21hbmFnZXIvdGFza3Rvb2xzLmNwcAor aW5kZXggNjI2ODBiYzI2My4uNTdjYThjNGZlNCAxMDA2NDQKKy0tLSBhL2xpYnRhc2ttYW5hZ2Vy L3Rhc2t0b29scy5jcHAKKysrKyBiL2xpYnRhc2ttYW5hZ2VyL3Rhc2t0b29scy5jcHAKK0BAIC02 MzEsMTUgKzYzMSw2IEBAIHZvaWQgcnVuQXBwKGNvbnN0IEFwcERhdGEgJmFwcERhdGEsIGNvbnN0 IFFMaXN0PFFVcmw+ICZ1cmxzKQorICAgICAgICAgICAgIGpvYi0+c3RhcnQoKTsKKyAKKyAgICAg ICAgICAgICBLQWN0aXZpdGllczo6UmVzb3VyY2VJbnN0YW5jZTo6bm90aWZ5QWNjZXNzZWQoUVVy bChRU3RyaW5nKHUiYXBwbGljYXRpb25zOiIgKyBzZXJ2aWNlLT5zdG9yYWdlSWQoKSkpLCBRU3Ry aW5nTGl0ZXJhbCgib3JnLmtkZS5saWJ0YXNrbWFuYWdlciIpKTsKKy0gICAgICAgIH0gZWxzZSB7 CistICAgICAgICAgICAgYXV0byAqam9iID0gbmV3IEtJTzo6T3BlblVybEpvYihhcHBEYXRhLnVy bCk7CistICAgICAgICAgICAgam9iLT5zZXRVaURlbGVnYXRlKG5ldyBLTm90aWZpY2F0aW9uSm9i VWlEZWxlZ2F0ZShLSm9iVWlEZWxlZ2F0ZTo6QXV0b0Vycm9ySGFuZGxpbmdFbmFibGVkKSk7Cist ICAgICAgICAgICAgam9iLT5zZXRSdW5FeGVjdXRhYmxlcyh0cnVlKTsKKy0gICAgICAgICAgICBq b2ItPnN0YXJ0KCk7CistCistICAgICAgICAgICAgaWYgKCFhcHBEYXRhLmlkLmlzRW1wdHkoKSkg eworLSAgICAgICAgICAgICAgICBLQWN0aXZpdGllczo6UmVzb3VyY2VJbnN0YW5jZTo6bm90aWZ5 QWNjZXNzZWQoUVVybChRU3RyaW5nKHUiYXBwbGljYXRpb25zOiIgKyBhcHBEYXRhLmlkKSksIFFT dHJpbmdMaXRlcmFsKCJvcmcua2RlLmxpYnRhc2ttYW5hZ2VyIikpOworLSAgICAgICAgICAgIH0K KyAgICAgICAgIH0KKyAgICAgfQorIH0KK0BAIC02NTcsNyArNjQ4LDIxIEBAIGJvb2wgY2FuTGF1 Y2hOZXdJbnN0YW5jZShjb25zdCBBcHBEYXRhICZhcHBEYXRhKQorICAgICAgICAgZGVza3RvcEVu dHJ5LmNob3AoOCk7CisgICAgIH0KKyAKKy0gICAgY29uc3QgS1NlcnZpY2U6OlB0ciBzZXJ2aWNl ID0gS1NlcnZpY2U6OnNlcnZpY2VCeURlc2t0b3BOYW1lKGRlc2t0b3BFbnRyeSk7CisrICAgIEtT ZXJ2aWNlOjpQdHIgc2VydmljZTsKKysKKysgICAgLy8gYXBwbGljYXRpb25zOiBVUkxzIGFyZSB1 c2VkIHRvIHJlZmVyIHRvIGFwcGxpY2F0aW9ucyBieSB0aGVpciBLU2VydmljZTo6bWVudUlkCisr ICAgIC8vIChpLmUuIC5kZXNrdG9wIGZpbGUgbmFtZSkgcmF0aGVyIHRoYW4gdGhlIGFic29sdXRl IHBhdGggdG8gYSAuZGVza3RvcCBmaWxlLgorKyAgICBpZiAoYXBwRGF0YS51cmwuc2NoZW1lKCkg PT0gUUxhdGluMVN0cmluZygiYXBwbGljYXRpb25zIikpIHsKKysgICAgICAgIHNlcnZpY2UgPSBL U2VydmljZTo6c2VydmljZUJ5TWVudUlkKGFwcERhdGEudXJsLnBhdGgoKSk7CisrICAgIH0gZWxz ZSBpZiAoYXBwRGF0YS51cmwuc2NoZW1lKCkgPT0gUUxhdGluMVN0cmluZygicHJlZmVycmVkIikp IHsKKysgICAgICAgIHNlcnZpY2UgPSBLU2VydmljZTo6c2VydmljZUJ5U3RvcmFnZUlkKGRlZmF1 bHRBcHBsaWNhdGlvbihhcHBEYXRhLnVybCkpOworKyAgICB9IGVsc2UgeworKyAgICAgICAgc2Vy dmljZSA9IEtTZXJ2aWNlOjpzZXJ2aWNlQnlEZXNrdG9wUGF0aChhcHBEYXRhLnVybC50b0xvY2Fs RmlsZSgpKTsKKysgICAgfQorKworKyAgICBpZiAoIXNlcnZpY2UpIHsKKysgICAgICAgIHJldHVy biBmYWxzZTsKKysgICAgfQorIAorICAgICBpZiAoc2VydmljZSkgeworICAgICAgICAgaWYgKHNl cnZpY2UtPm5vRGlzcGxheSgpKSB7CitAQCAtNjg2LDcgKzY5MSw2IEBAIGJvb2wgY2FuTGF1Y2hO ZXdJbnN0YW5jZShjb25zdCBBcHBEYXRhICZhcHBEYXRhKQorICAgICAgICAgICAgIH0KKyAgICAg ICAgIH0KKyAgICAgfQorLQorICAgICByZXR1cm4gdHJ1ZTsKKyB9CisgfQorLS0gCitHaXRMYWIK KwoKZGlmZiAtLWdpdCBhL3BsYXNtYS13b3Jrc3BhY2Uuc3BlYyBiL3BsYXNtYS13b3Jrc3BhY2Uu c3BlYwppbmRleCAzMWQ0YTE5Li40NThlZGEwIDEwMDY0NAotLS0gYS9wbGFzbWEtd29ya3NwYWNl LnNwZWMKKysrIGIvcGxhc21hLXdvcmtzcGFjZS5zcGVjCkBAIC0zLDcgKzMsNyBAQAogTmFtZTog ICAgcGxhc21hLXdvcmtzcGFjZQogU3VtbWFyeTogUGxhc21hIHdvcmtzcGFjZSwgYXBwbGljYXRp b25zIGFuZCBhcHBsZXRzCiBWZXJzaW9uOiA2LjcuMgotUmVsZWFzZTogMSV7P2Rpc3R9CitSZWxl YXNlOiAyJXs/ZGlzdH0KIAogIyBBdXRvbWF0aWNhbGx5IGNvbnZlcnRlZCBmcm9tIG9sZCBmb3Jt YXQ6IEJTRC0yLUNsYXVzZSBBTkQgQlNELTMtQ2xhdXNlIEFORCBDQzAtMS4wIEFORCBHUEwtMi4w LW9ubHkgQU5EIEdQTC0yLjAtb3ItbGF0ZXIgQU5EIEdQTC0zLjAtb25seSBBTkQgTEdQTC0yLjAt b25seSBBTkQgTEdQTC0yLjAtb3ItbGF0ZXIgQU5EIExHUEwtMi4xLW9ubHkgQU5EIExHUEwtMi4x LW9yLWxhdGVyIEFORCBMR1BMLTMuMC1vbmx5IEFORCBMR1BMLTMuMC1vci1sYXRlciBBTkQgKEdQ TC0yLjAtb25seSBPUiBHUEwtMy4wLW9ubHkpIEFORCAoTEdQTC0yLjEtb25seSBPUiBMR1BMLTMu MC1vbmx5KSBBTkQgTUlUIC0gcmV2aWV3IGlzIGhpZ2hseSByZWNvbW1lbmRlZC4KIExpY2Vuc2U6 IEJTRC0yLUNsYXVzZSBBTkQgQlNELTMtQ2xhdXNlIEFORCBDQzAtMS4wIEFORCBHUEwtMi4wLW9u bHkgQU5EIEdQTC0yLjAtb3ItbGF0ZXIgQU5EIEdQTC0zLjAtb25seSBBTkQgTEdQTC0yLjAtb25s eSBBTkQgTEdQTC0yLjAtb3ItbGF0ZXIgQU5EIExHUEwtMi4xLW9ubHkgQU5EIExHUEwtMi4xLW9y LWxhdGVyIEFORCBMR1BMLTMuMC1vbmx5IEFORCBMR1BMLTMuMC1vci1sYXRlciBBTkQgKEdQTC0y LjAtb25seSBPUiBHUEwtMy4wLW9ubHkpIEFORCAoTEdQTC0yLjEtb25seSBPUiBMR1BMLTMuMC1v bmx5KSBBTkQgTUlUCkBAIC02NjMsNiArNjYzLDkgQEAgZmkKIAogCiAlY2hhbmdlbG9nCisqIFNh dCBKdWwgMDQgMjAyNiBTdGV2ZSBDb3NzZXR0ZSA8ZmFyY2hvcmRAZ21haWwuY29tPiAtIDYuNy4y LTIKKy0gRml4IGFuIGlzc3VlIGZvciBhIHNhbmRib3ggZXNjYXBlIHZ1bG4KKwogKiBXZWQgSnVs IDAxIDIwMjYgU3RldmUgQ29zc2V0dGUgPGZhcmNob3JkQGdtYWlsLmNvbT4gLSA2LjcuMi0xCiAt IDYuNy4yCiAK