From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Paul Howarth To: git-commits@fedoraproject.org Subject: [rpms/proftpd] epel9: Fix SFTP request payload length underflow calculation (CVE-2026-53994) Date: Tue, 28 Jul 2026 17:52:32 GMT Message-ID: <178526115247.1.7619992036416817347.rpms-proftpd-59cb23f386cb@fedoraproject.org> List-ID: X-Git-Repo: rpms/proftpd X-Git-Branch: epel9 X-Git-Rev: 59cb23f386cb7882251a6ea573f927fbfa8f3b49 ICAgICAgICAgICAgQSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KCiAgICAgICAgICAgIFJl cG8gICA6IHJwbXMvcHJvZnRwZAogICAgICAgICAgICBCcmFuY2ggOiBlcGVsOQogICAgICAgICAg ICBDb21taXQgOiA1OWNiMjNmMzg2Y2I3ODgyMjUxYTZlYTU3M2Y5MjdmYmZhOGYzYjQ5CiAgICAg ICAgICAgIEF1dGhvciA6IFBhdWwgSG93YXJ0aCA8cGF1bEBjaXR5LWZhbi5vcmc+CiAgICAgICAg ICAgIERhdGUgICA6IDIwMjYtMDctMjJUMTQ6NTM6MTkrMDE6MDAKICAgICAgICAgICAgU3RhdHMg IDogKzUxLy0wIGluIDIgZmlsZShzKQogICAgICAgICAgICBVUkwgICAgOiBodHRwczovL3NyYy5m ZWRvcmFwcm9qZWN0Lm9yZy9ycG1zL3Byb2Z0cGQvYy81OWNiMjNmMzg2Y2I3ODgyMjUxYTZlYTU3 M2Y5MjdmYmZhOGYzYjQ5P2JyYW5jaD1lcGVsOQoKICAgICAgICAgICAgTG9nOgogICAgICAgICAg ICBGaXggU0ZUUCByZXF1ZXN0IHBheWxvYWQgbGVuZ3RoIHVuZGVyZmxvdyBjYWxjdWxhdGlvbiAo Q1ZFLTIwMjYtNTM5OTQpCgpodHRwczovL2dpdGh1Yi5jb20vcHJvZnRwZC9wcm9mdHBkL2lzc3Vl cy8yMTE1CgotLS0KZGlmZiAtLWdpdCBhL21vZF9zZnRwLTEuMy44ZC1pc3N1ZTIxMTUucGF0Y2gg Yi9tb2Rfc2Z0cC0xLjMuOGQtaXNzdWUyMTE1LnBhdGNoCm5ldyBmaWxlIG1vZGUgMTAwNjQ0Cmlu ZGV4IDAwMDAwMDAuLjQ5M2Q1YjcKLS0tIC9kZXYvbnVsbAorKysgYi9tb2Rfc2Z0cC0xLjMuOGQt aXNzdWUyMTE1LnBhdGNoCkBAIC0wLDAgKzEsNDQgQEAKK2RpZmYgLS1naXQgYS9jb250cmliL21v ZF9zZnRwL2Z4cC5jIGIvY29udHJpYi9tb2Rfc2Z0cC9meHAuYworaW5kZXggZDYxZTcxMDQ2Li44 ZTg2NzY0OWMgMTAwNjQ0CistLS0gYS9jb250cmliL21vZF9zZnRwL2Z4cC5jCisrKysgYi9jb250 cmliL21vZF9zZnRwL2Z4cC5jCitAQCAtMzM4MSw2ICszMzgxLDIzIEBAIHN0YXRpYyBzdHJ1Y3Qg ZnhwX3BhY2tldCAqZnhwX3BhY2tldF9yZWFkKHVpbnQzMl90IGNoYW5uZWxfaWQsCisgICAgICAg IiglbHUgYnl0ZXMgcmVtYWluaW5nIGluIGJ1ZmZlcikiLCAodW5zaWduZWQgbG9uZykgZnhwLT5w YWNrZXRfbGVuLAorICAgICAgICh1bnNpZ25lZCBsb25nKSBidWZsZW4pOworIAorKyAgICAvKiBX ZSByZXF1aXJlIDUgYnl0ZXMgb2YgU0ZUUCByZXF1ZXN0IGRhdGEgYXQgYSBtaW5pbXVtOiAxIGJ5 dGUgZm9yIHRoZQorKyAgICAgKiByZXF1ZXN0IHR5cGUsIGFuZCA0IGJ5dGVzIGZvciB0aGUgcGF5 bG9hZCBsZW5ndGggKElzc3VlICMyMTE1KS4KKysgICAgICovCisrICAgIGlmIChmeHAtPnBhY2tl dF9sZW4gPCA1KSB7CisrICAgICAgKHZvaWQpIHByX2xvZ193cml0ZWZpbGUoc2Z0cF9sb2dmZCwg TU9EX1NGVFBfVkVSU0lPTiwKKysgICAgICAgICJpbGxlZ2FsIFNGVFAgcmVxdWVzdCBsZW5ndGgg KCVsdSBieXRlcywgcmVxdWlyZSBhdCBsZWFzdCA1IGJ5dGVzKSwgIgorKyAgICAgICAgInJlamVj dGluZyIsICh1bnNpZ25lZCBsb25nKSBmeHAtPnBhY2tldF9sZW4pOworKyAgICAgIFNGVFBfRElT Q09OTkVDVF9DT05OKFNGVFBfU1NIMl9ESVNDT05ORUNUX0JZX0FQUExJQ0FUSU9OLCBOVUxMKTsK KysgICAgfQorKworKyAgICBpZiAoZnhwLT5wYWNrZXRfbGVuID4gRlhQX01BWF9QQUNLRVRfTEVO KSB7CisrICAgICAgKHZvaWQpIHByX2xvZ193cml0ZWZpbGUoc2Z0cF9sb2dmZCwgTU9EX1NGVFBf VkVSU0lPTiwKKysgICAgICAgICJyZWNlaXZlZCBleGNlc3NpdmUgU0ZUUCBwYWNrZXQgKGxlbiAl bHUgPiBtYXggJWx1IGJ5dGVzKSwgcmVqZWN0aW5nIiwKKysgICAgICAgICh1bnNpZ25lZCBsb25n KSBmeHAtPnBhY2tldF9sZW4sICh1bnNpZ25lZCBsb25nKSBGWFBfTUFYX1BBQ0tFVF9MRU4pOwor KyAgICAgIFNGVFBfRElTQ09OTkVDVF9DT05OKFNGVFBfU1NIMl9ESVNDT05ORUNUX0JZX0FQUExJ Q0FUSU9OLCBOVUxMKTsKKysgICAgfQorKworICAgICBpZiAoYnVmbGVuID09IDApIHsKKyAgICAg ICBmeHBfcGFja2V0X3NldF9wYWNrZXQoZnhwKTsKKyAgICAgICBmeHBfcGFja2V0X2NsZWFyX2Nh Y2hlKCk7CitAQCAtMTM2NzQsMTUgKzEzNjkxLDYgQEAgaW50IHNmdHBfZnhwX2hhbmRsZV9wYWNr ZXQocG9vbCAqcCwgdm9pZCAqc3NoMiwgdWludDMyX3QgY2hhbm5lbF9pZCwKKyAgICAgICAgICh1 bnNpZ25lZCBsb25nKSBjaGFubmVsX2lkKTsKKyAgICAgfQorIAorLSAgICBpZiAoZnhwLT5wYWNr ZXRfbGVuID4gRlhQX01BWF9QQUNLRVRfTEVOKSB7CistICAgICAgKHZvaWQpIHByX2xvZ193cml0 ZWZpbGUoc2Z0cF9sb2dmZCwgTU9EX1NGVFBfVkVSU0lPTiwKKy0gICAgICAgICJyZWNlaXZlZCBl eGNlc3NpdmUgU0ZUUCBwYWNrZXQgKGxlbiAlbHUgPiBtYXggJWx1IGJ5dGVzKSwgcmVqZWN0aW5n IiwKKy0gICAgICAgICh1bnNpZ25lZCBsb25nKSBmeHAtPnBhY2tldF9sZW4sICh1bnNpZ25lZCBs b25nKSBGWFBfTUFYX1BBQ0tFVF9MRU4pOworLSAgICAgIGRlc3Ryb3lfcG9vbChmeHAtPnBvb2wp OworLSAgICAgIGVycm5vID0gRVBFUk07CistICAgICAgcmV0dXJuIC0xOworLSAgICB9CistCisg ICAgIGZ4cF9zZXNzaW9uID0gZnhwX2dldF9zZXNzaW9uKGNoYW5uZWxfaWQpOworICAgICBpZiAo ZnhwX3Nlc3Npb24gPT0gTlVMTCkgeworICAgICAgICh2b2lkKSBwcl9sb2dfd3JpdGVmaWxlKHNm dHBfbG9nZmQsIE1PRF9TRlRQX1ZFUlNJT04sCgpkaWZmIC0tZ2l0IGEvcHJvZnRwZC5zcGVjIGIv cHJvZnRwZC5zcGVjCmluZGV4IGMyYjQ4MTUuLjE1NDBjZTAgMTAwNjQ0Ci0tLSBhL3Byb2Z0cGQu c3BlYworKysgYi9wcm9mdHBkLnNwZWMKQEAgLTczLDYgKzczLDcgQEAgUGF0Y2gyMjoJCWh0dHBz Oi8vZ2l0aHViLmNvbS9wcm9mdHBkL3Byb2Z0cGQvY29tbWl0LzdlMDc2ZTg0LnBhdGNoCiBQYXRj aDIzOgkJaHR0cHM6Ly9naXRodWIuY29tL3Byb2Z0cGQvcHJvZnRwZC9jb21taXQvMDc3OTdhYmEu cGF0Y2gKIFBhdGNoMjQ6CQlodHRwczovL2dpdGh1Yi5jb20vcHJvZnRwZC9wcm9mdHBkL2NvbW1p dC81ZTA2YWNjNC5wYXRjaAogUGF0Y2gyNToJCWh0dHBzOi8vZ2l0aHViLmNvbS9wcm9mdHBkL3By b2Z0cGQvY29tbWl0LzFhNWNlNjQ2LnBhdGNoCitQYXRjaDI2OgkJaHR0cHM6Ly9naXRodWIuY29t L3VzZXItYXR0YWNobWVudHMvZmlsZXMvMzAyMDU0MTAvbW9kX3NmdHAtMS4zLjhkLWlzc3VlMjEx NS5wYXRjaAogCiBCdWlsZFJlcXVpcmVzOgkJY29yZXV0aWxzCiBCdWlsZFJlcXVpcmVzOgkJZ2Nj CkBAIC0zMTAsNiArMzExLDEwIEBAIHNlZCAtaSAtZSAnL15bWzpzcGFjZTpdXSpUTFNDaXBoZXJT dWl0ZVtbOnNwYWNlOl1dKlBST0ZJTEU9U1lTVEVNJC9kJyBtb2RfdGxzLmNvCiAjIEFkZHJlc3Mg YW5vdGhlciBhdmVudWUgZm9yIFNRTCBpbmplY3Rpb24sIHZpYSBjdXN0b20gU1FMVXNlckluZm8g cXVlcmllcwogJXBhdGNoIC1QIDI1IC1wMQogCisjIEZpeCBTRlRQIHJlcXVlc3QgcGF5bG9hZCBs ZW5ndGggdW5kZXJmbG93IGNhbGN1bGF0aW9uIGluIG1vZF9zZnRwIChDVkUtMjAyNi01Mzk5NCkK KyMgaHR0cHM6Ly9naXRodWIuY29tL3Byb2Z0cGQvcHJvZnRwZC9pc3N1ZXMvMjExNQorJXBhdGNo IC1QIDI2IC1wMQorCiAjIFR3ZWFrIGxvZ3JvdGF0ZSBzY3JpcHQgZm9yIHN5c3RlbWQgY29tcGF0 aWJpbGl0eSAoIzgwMjE3OCkKICVpZiAoMCV7P3JoZWx9ICYmIDAlez9yaGVsfSA8PSA3KSB8fCAo MCV7P2ZlZG9yYX0gJiYgMCV7P2ZlZG9yYX0gPD0gMjMpCiBzZWQgLWkgLWUgJy9raWxsYWxsL3Mv dGVzdC4qL3N5c3RlbWN0bCByZWxvYWQgcHJvZnRwZC5zZXJ2aWNlLycgXApAQCAtNTU5LDYgKzU2 NCw4IEBAIGZpCiAqIFdlZCBKdWwgMjIgMjAyNiBQYXVsIEhvd2FydGggPHBhdWxAY2l0eS1mYW4u b3JnPiAtIDEuMy44ZC00CiAtIEFkZHJlc3MgYW5vdGhlciBhdmVudWUgZm9yIFNRTCBpbmplY3Rp b24sIHZpYSBjdXN0b20gU1FMVXNlckluZm8gcXVlcmllcwogICAoaHR0cHM6Ly9naXRodWIuY29t L3Byb2Z0cGQvcHJvZnRwZC9pc3N1ZXMvMjA1MiNpc3N1ZWNvbW1lbnQtNDQ4OTExMDU5OCkKKy0g Rml4IFNGVFAgcmVxdWVzdCBwYXlsb2FkIGxlbmd0aCB1bmRlcmZsb3cgY2FsY3VsYXRpb24gaW4g bW9kX3NmdHAKKyAgKENWRS0yMDI2LTUzOTk0LCBodHRwczovL2dpdGh1Yi5jb20vcHJvZnRwZC9w cm9mdHBkL2lzc3Vlcy8yMTE1KQogCiAqIE1vbiBNYXkgMTEgMjAyNiBQYXVsIEhvd2FydGggPHBh dWxAY2l0eS1mYW4ub3JnPiAtIDEuMy44ZC0zCiAtIEFkZGl0aW9uYWwgZXNjYXBpbmcgZm9yIGF2 b2lkYW5jZSBvZiBTUUwgaW5qZWN0aW9uIGlzc3VlcyB3aXRoICUle25vdGU6Li4ufQo=