From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Zoltan Fridrich To: git-commits@fedoraproject.org Subject: [rpms/openssh] rawhide: Fix CVE-2026-55654 Date: Tue, 07 Jul 2026 11:40:38 GMT Message-ID: <178342443834.1.8239627929852693578.rpms-openssh-beb33e3c84f1@fedoraproject.org> List-ID: X-Git-Repo: rpms/openssh X-Git-Branch: rawhide X-Git-Rev: beb33e3c84f1731cdf00cfec018c82bc0ed48a16 ICAgICAgICAgICAgQSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KCiAgICAgICAgICAgIFJl cG8gICA6IHJwbXMvb3BlbnNzaAogICAgICAgICAgICBCcmFuY2ggOiByYXdoaWRlCiAgICAgICAg ICAgIENvbW1pdCA6IGJlYjMzZTNjODRmMTczMWNkZjAwY2ZlYzAxOGM4MmJjMGVkNDhhMTYKICAg ICAgICAgICAgQXV0aG9yIDogWm9sdGFuIEZyaWRyaWNoIDx6ZnJpZHJpY0ByZWRoYXQuY29tPgog ICAgICAgICAgICBEYXRlICAgOiAyMDI2LTA3LTA3VDEyOjA5OjU4KzAyOjAwCiAgICAgICAgICAg IFN0YXRzICA6ICs0MC8tMzQgaW4gMiBmaWxlKHMpCiAgICAgICAgICAgIFVSTCAgICA6IGh0dHBz Oi8vc3JjLmZlZG9yYXByb2plY3Qub3JnL3JwbXMvb3BlbnNzaC9jL2JlYjMzZTNjODRmMTczMWNk ZjAwY2ZlYzAxOGM4MmJjMGVkNDhhMTY/YnJhbmNoPXJhd2hpZGUKCiAgICAgICAgICAgIExvZzoK ICAgICAgICAgICAgRml4IENWRS0yMDI2LTU1NjU0CgpGaXggaGVhcCBvdXQtb2YtYm91bmRzIHJl YWQgZHVyaW5nIEdTU0FQSSBpbmRpY2F0b3IKY2xlYW51cCBkdWUgdG8gbWlzc2luZyBOVUxMIHRl cm1pbmF0b3IKClNpZ25lZC1vZmYtYnk6IFpvbHRhbiBGcmlkcmljaCA8emZyaWRyaWNAcmVkaGF0 LmNvbT4KCi0tLQpkaWZmIC0tZ2l0IGEvMDA0Ny1zdXBwb3J0LWF1dGhlbnRpY2F0aW9uLWluZGlj YXRvcnMtaW4tR1NTQVBJLnBhdGNoIGIvMDA0Ny1zdXBwb3J0LWF1dGhlbnRpY2F0aW9uLWluZGlj YXRvcnMtaW4tR1NTQVBJLnBhdGNoCmluZGV4IDEwMTY4OTAuLmU4NzVlZjQgMTAwNjQ0Ci0tLSBh LzAwNDctc3VwcG9ydC1hdXRoZW50aWNhdGlvbi1pbmRpY2F0b3JzLWluLUdTU0FQSS5wYXRjaAor KysgYi8wMDQ3LXN1cHBvcnQtYXV0aGVudGljYXRpb24taW5kaWNhdG9ycy1pbi1HU1NBUEkucGF0 Y2gKQEAgLTE3Myw3ICsxNzMsNyBAQCBpbmRleCA2ZWI3ZDIxNjMuLjY4NmFjNGViMyAxMDA2NDQK ICAKICBzc2hfZ3NzYXBpX21lY2ggZ3NzYXBpX251bGxfbWVjaCA9CiAgICAgIHsgTlVMTCwgTlVM TCwgezAsIE5VTEx9LCBOVUxMLCBOVUxMLCBOVUxMLCBOVUxMLCBOVUxMfTsKLUBAIC0yOTcsNiAr Mjk3LDk1IEBAIHNzaF9nc3NhcGlfcGFyc2VfZW5hbWUoR3NzY3R4dCAqY3R4LCBnc3NfYnVmZmVy X3QgZW5hbWUsIGdzc19idWZmZXJfdCBuYW1lKQorQEAgLTI5NSw2ICsyOTUsOTkgQEAgc3NoX2dz c2FwaV9wYXJzZV9lbmFtZShHc3NjdHh0ICpjdHgsIGdzcwogIAlyZXR1cm4gR1NTX1NfQ09NUExF VEU7CiAgfQogIApAQCAtMTk2LDYzICsxOTYsNjcgQEAgaW5kZXggNmViN2QyMTYzLi42ODZhYzRl YjMgMTAwNjQ0CiArCWludCBpc19tZWNobmFtZSwgYXV0aGVudGljYXRlZCwgY29tcGxldGUsIG1v cmU7CiArCXNpemVfdCBjb3VudCwgaTsKICsKKysJLyogYWx3YXlzIGluaXRpYWxpemUgY2xpZW50 LT5pbmRpY2F0b3JzICovCisrCWNsaWVudC0+aW5kaWNhdG9ycyA9IE5VTEw7CisrCiArCWN0eC0+ bWFqb3IgPSBnc3NfaW5xdWlyZV9uYW1lKCZjdHgtPm1pbm9yLCBnc3NfbmFtZSwKICsJCQkJICAg ICAgJmlzX21lY2huYW1lLCBOVUxMLCAmYXR0cnMpOwotKwlpZiAoY3R4LT5tYWpvciAhPSBHU1Nf U19DT01QTEVURSkgewotKwkJcmV0dXJuIChjdHgtPm1ham9yKTsKLSsJfQorKwlpZiAoY3R4LT5t YWpvciAhPSBHU1NfU19DT01QTEVURSkKKysJCXJldHVybiBjdHgtPm1ham9yOwogKwogKwlpZiAo YXR0cnMgPT0gR1NTX0NfTk9fQlVGRkVSX1NFVCkgewotKwkJLyogTm8gaW5kaWNhdG9ycyBpbiB0 aGUgdGlja2V0ICovCi0rCQlyZXR1cm4gKDApOworKwkJLyogbm8gaW5kaWNhdG9ycyBpbiB0aGUg dGlja2V0ICovCisrCQlyZXR1cm4gR1NTX1NfQ09NUExFVEU7CiArCX0KICsKLSsJY2xpZW50LT5p bmRpY2F0b3JzID0gTlVMTDsKKysJLyogY2xpZW50LT5pbmRpY2F0b3JzIGlzIE5VTEwgdGVybWlu YXRlZCAqLwogKwljb3VudCA9IDA7CisrCWNsaWVudC0+aW5kaWNhdG9ycyA9IHhjYWxsb2MoY291 bnQgKyAxLCBzaXplb2YoY2hhciAqKSk7CisrCiArCWZvciAoaSA9IDA7IGkgPCBhdHRycy0+Y291 bnQ7IGkrKykgewogKwkJYXV0aGVudGljYXRlZCA9IDA7CiArCQljb21wbGV0ZSA9IDA7CiArCQlt b3JlID0gLTE7CisrCiArCQkvKiBza2lwIGFueXRoaW5nIGJ1dCBhdXRoLWluZGljYXRvcnMgKi8K ICsJCWlmICgoKHNpemVvZihBVVRIX0lORElDQVRPUlNfVEFHKSAtIDEpICE9IGF0dHJzLT5lbGVt ZW50c1tpXS5sZW5ndGgpIHx8Ci0rCQkgICAgbWVtY21wKEFVVEhfSU5ESUNBVE9SU19UQUcsCi0r CQkJICAgYXR0cnMtPmVsZW1lbnRzW2ldLnZhbHVlLAorKwkJICAgIG1lbWNtcChBVVRIX0lORElD QVRPUlNfVEFHLCBhdHRycy0+ZWxlbWVudHNbaV0udmFsdWUsCiArCQkJICAgc2l6ZW9mKEFVVEhf SU5ESUNBVE9SU19UQUcpIC0gMSkgIT0gMCkKICsJCQljb250aW51ZTsKKysKICsJCS8qIHJldHJp ZXZlIGFsbCBpbmRpY2F0b3JzICovCiArCQl3aGlsZSAobW9yZSAhPSAwKSB7CiArCQkJdmFsdWUu dmFsdWUgPSBOVUxMOwogKwkJCWRpc3BsYXlfdmFsdWUudmFsdWUgPSBOVUxMOworKwogKwkJCWN0 eC0+bWFqb3IgPSBnc3NfZ2V0X25hbWVfYXR0cmlidXRlKCZjdHgtPm1pbm9yLCBnc3NfbmFtZSwK LSsJCQkJCQkJICAgICZhdHRycy0+ZWxlbWVudHNbaV0sICZhdXRoZW50aWNhdGVkLAotKwkJCQkJ CQkgICAgJmNvbXBsZXRlLCAmdmFsdWUsICZkaXNwbGF5X3ZhbHVlLCAmbW9yZSk7CisrCQkJCQkJ CSAgICAmYXR0cnMtPmVsZW1lbnRzW2ldLAorKwkJCQkJCQkgICAgJmF1dGhlbnRpY2F0ZWQsICZj b21wbGV0ZSwKKysJCQkJCQkJICAgICZ2YWx1ZSwgJmRpc3BsYXlfdmFsdWUsICZtb3JlKTsKICsJ CQlpZiAoY3R4LT5tYWpvciAhPSBHU1NfU19DT01QTEVURSkKICsJCQkJZ290byBvdXQ7CiArCi0r CQkJaWYgKCh2YWx1ZS52YWx1ZSAhPSBOVUxMKSAmJiBhdXRoZW50aWNhdGVkKSB7Ci0rCQkJCWlm IChjb3VudCA+PSBTU0hfR1NTQVBJX01BWF9JTkRJQ0FUT1JTKSB7Ci0rCQkJCQlsb2dpdCgic3No X2dzc2FwaV9nZXRpbmRpY2F0b3JzOiB0b28gbWFueSAiCi0rCQkJCQkgICAgImluZGljYXRvcnMs IHRydW5jYXRpbmcgYXQgJWQiLAotKwkJCQkJICAgIFNTSF9HU1NBUElfTUFYX0lORElDQVRPUlMp OwotKwkJCQkJLyogdmFsdWUvZGlzcGxheV92YWx1ZSByZWxlYXNlZCBhdCBvdXQ6ICovCi0rCQkJ CQlnb3RvIGRvbmU7Ci0rCQkJCX0KKysJCQlpZiAodmFsdWUudmFsdWUgPT0gTlVMTCB8fCAhYXV0 aGVudGljYXRlZCkKKysJCQkJY29udGludWU7CiArCi0rCQkJCWNsaWVudC0+aW5kaWNhdG9ycyA9 IHhyZWNhbGxvY2FycmF5KGNsaWVudC0+aW5kaWNhdG9ycywgY291bnQsIGNvdW50ICsgMSwgc2l6 ZW9mKGNoYXIqKSk7Ci0rCQkJCWlmIChjbGllbnQtPmluZGljYXRvcnMgPT0gTlVMTCkgewotKwkJ CQkJZmF0YWwoInNzaF9nc3NhcGlfZ2V0aW5kaWNhdG9ycyBmYWlsZWQgdG8gYWxsb2NhdGUgbWVt b3J5Iik7Ci0rCQkJCX0KLSsJCQkJY2xpZW50LT5pbmRpY2F0b3JzW2NvdW50XSA9IHhtYWxsb2Mo dmFsdWUubGVuZ3RoICsgMSk7Ci0rCQkJCW1lbWNweShjbGllbnQtPmluZGljYXRvcnNbY291bnRd LCB2YWx1ZS52YWx1ZSwgdmFsdWUubGVuZ3RoKTsKLSsJCQkJY2xpZW50LT5pbmRpY2F0b3JzW2Nv dW50XVt2YWx1ZS5sZW5ndGhdID0gJ1wwJzsKLSsJCQkJY291bnQrKzsKKysJCQlpZiAoY291bnQg Pj0gU1NIX0dTU0FQSV9NQVhfSU5ESUNBVE9SUykgeworKwkJCQlsb2dpdCgic3NoX2dzc2FwaV9n ZXRpbmRpY2F0b3JzOiIKKysJCQkJICAgICAgIiB0b28gbWFueSBpbmRpY2F0b3JzLCB0cnVuY2F0 aW5nIGF0ICVkIiwKKysJCQkJICAgICAgU1NIX0dTU0FQSV9NQVhfSU5ESUNBVE9SUyk7CisrCQkJ CWdvdG8gb3V0OwogKwkJCX0KKysKKysJCQljbGllbnQtPmluZGljYXRvcnNbY291bnRdID0geG1h bGxvYyh2YWx1ZS5sZW5ndGggKyAxKTsKKysJCQltZW1jcHkoY2xpZW50LT5pbmRpY2F0b3JzW2Nv dW50XSwgdmFsdWUudmFsdWUsIHZhbHVlLmxlbmd0aCk7CisrCQkJY2xpZW50LT5pbmRpY2F0b3Jz W2NvdW50XVt2YWx1ZS5sZW5ndGhdID0gJ1wwJzsKKysJCQljb3VudCsrOworKworKwkJCS8qIGFk ZCBOVUxMIHRlcm1pbmF0b3IgKi8KKysJCQljbGllbnQtPmluZGljYXRvcnMgPSB4cmVjYWxsb2Nh cnJheShjbGllbnQtPmluZGljYXRvcnMsIGNvdW50LAorKwkJCQkJCQkgICAgY291bnQgKyAxLCBz aXplb2YoY2hhciAqKSk7CiArCQl9CiArCX0KICsKLStkb25lOgotKwkvKiBzbG90IFtjb3VudF0g aXMgemVyb2VkIGJ5IHJlY2FsbG9jYXJyYXksIHNlcnZlcyBhcyBOVUxMIHNlbnRpbmVsICovCi0r CiArb3V0OgogKwlpZiAoY3R4LT5tYWpvciAhPSBHU1NfU19DT01QTEVURSAmJiBjbGllbnQtPmlu ZGljYXRvcnMgIT0gTlVMTCkgewogKwkJZm9yIChpID0gMDsgaSA8IGNvdW50OyBpKyspCkBAIC0y NjAsMTAgKzI2NCwxMCBAQCBpbmRleCA2ZWI3ZDIxNjMuLjY4NmFjNGViMyAxMDA2NDQKICsJCWZy ZWUoY2xpZW50LT5pbmRpY2F0b3JzKTsKICsJCWNsaWVudC0+aW5kaWNhdG9ycyA9IE5VTEw7CiAr CX0KLSsJKHZvaWQpIGdzc19yZWxlYXNlX2J1ZmZlcigmY3R4LT5taW5vciwgJnZhbHVlKTsKLSsJ KHZvaWQpIGdzc19yZWxlYXNlX2J1ZmZlcigmY3R4LT5taW5vciwgJmRpc3BsYXlfdmFsdWUpOwot Kwkodm9pZCkgZ3NzX3JlbGVhc2VfYnVmZmVyX3NldCgmY3R4LT5taW5vciwgJmF0dHJzKTsKLSsJ cmV0dXJuIChjdHgtPm1ham9yKTsKKysJZ3NzX3JlbGVhc2VfYnVmZmVyKCZjdHgtPm1pbm9yLCAm dmFsdWUpOworKwlnc3NfcmVsZWFzZV9idWZmZXIoJmN0eC0+bWlub3IsICZkaXNwbGF5X3ZhbHVl KTsKKysJZ3NzX3JlbGVhc2VfYnVmZmVyX3NldCgmY3R4LT5taW5vciwgJmF0dHJzKTsKKysJcmV0 dXJuIGN0eC0+bWFqb3I7CiArfQogKwogIC8qIEV4dHJhY3QgdGhlIGNsaWVudCBkZXRhaWxzIGZy b20gYSBnaXZlbiBjb250ZXh0LiBUaGlzIGNhbiBvbmx5IHJlbGlhYmx5CgpkaWZmIC0tZ2l0IGEv b3BlbnNzaC5zcGVjIGIvb3BlbnNzaC5zcGVjCmluZGV4IDY3N2U2MmEuLjE5ZWZkNjMgMTAwNjQ0 Ci0tLSBhL29wZW5zc2guc3BlYworKysgYi9vcGVuc3NoLnNwZWMKQEAgLTUxNyw2ICs1MTcsOCBA QCB0ZXN0IC1mICV7c3lzY29uZmlnX2FuYWNvbmRhfSAmJiBcCiAqIFR1ZSBKdWwgMDcgMjAyNiBa b2x0YW4gRnJpZHJpY2ggPHpmcmlkcmljQHJlZGhhdC5jb20+IC0gMTAuM3AxLTUKIC0gQ1ZFLTIw MjYtNTU2NTM6IEZpeCBkb3VibGUgZnJlZSBpbiBvcGVuc3NoIERILUdFWCBjbGllbnQgcGF0aCBk dXJpbmcKICAgRklQUyBrbm93bi1ncm91cCB2YWxpZGF0aW9uIHRoYXQgbGVhZHMgdG8gY2xpZW50 LXNpZGUgZGVuaWFsIG9mIHNlcnZpY2UKKy0gQ1ZFLTIwMjYtNTU2NTQ6IEZpeCBoZWFwIG91dC1v Zi1ib3VuZHMgcmVhZCBkdXJpbmcgR1NTQVBJIGluZGljYXRvcgorICBjbGVhbnVwIGR1ZSB0byBt aXNzaW5nIE5VTEwgdGVybWluYXRvcgogCiAqIEZyaSBKdW4gMTIgMjAyNiBEbWl0cnkgQmVseWF2 c2tpeSA8ZGJlbHlhdnNAcmVkaGF0LmNvbT4gLSAxMC4zcDEtNAogLSBSZWJ1aWxkIGFnYWluc3Qg T3BlblNTTCA0LjAuMQo=