From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Paul Howarth To: git-commits@fedoraproject.org Subject: [rpms/proftpd] epel9: Fix signed integer overflow via scp file size record parser (CVE-2026-63091) Date: Tue, 28 Jul 2026 17:52:32 GMT Message-ID: <178526115290.1.14768947157869079484.rpms-proftpd-989871ba18bd@fedoraproject.org> List-ID: X-Git-Repo: rpms/proftpd X-Git-Branch: epel9 X-Git-Rev: 989871ba18bdc54f59c18cb47e3626c9775f468e ICAgICAgICAgICAgQSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KCiAgICAgICAgICAgIFJl cG8gICA6IHJwbXMvcHJvZnRwZAogICAgICAgICAgICBCcmFuY2ggOiBlcGVsOQogICAgICAgICAg ICBDb21taXQgOiA5ODk4NzFiYTE4YmRjNTRmNTljMThjYjQ3ZTM2MjZjOTc3NWY0NjhlCiAgICAg ICAgICAgIEF1dGhvciA6IFBhdWwgSG93YXJ0aCA8cGF1bEBjaXR5LWZhbi5vcmc+CiAgICAgICAg ICAgIERhdGUgICA6IDIwMjYtMDctMjJUMTU6MDQ6MTkrMDE6MDAKICAgICAgICAgICAgU3RhdHMg IDogKzU2Ly0wIGluIDIgZmlsZShzKQogICAgICAgICAgICBVUkwgICAgOiBodHRwczovL3NyYy5m ZWRvcmFwcm9qZWN0Lm9yZy9ycG1zL3Byb2Z0cGQvYy85ODk4NzFiYTE4YmRjNTRmNTljMThjYjQ3 ZTM2MjZjOTc3NWY0NjhlP2JyYW5jaD1lcGVsOQoKICAgICAgICAgICAgTG9nOgogICAgICAgICAg ICBGaXggc2lnbmVkIGludGVnZXIgb3ZlcmZsb3cgdmlhIHNjcCBmaWxlIHNpemUgcmVjb3JkIHBh cnNlciAoQ1ZFLTIwMjYtNjMwOTEpCgpFeGVyY2lzZSBjYXV0aW9uIHdoZW4gcmVhZGluZyB0aGUg Y2xpZW50LXByb3ZpZGVkIGZpbGUgc2l6ZSBmb3IgU0NQIHVwbG9hZHMsCmFzIGl0IGNvdWxkIHBv c3NpYmx5IG92ZXJmbG93IG91ciBzaXplIHR5cGUuCgotLS0KZGlmZiAtLWdpdCBhL2JhZjRiNzky LnBhdGNoIGIvYmFmNGI3OTIucGF0Y2gKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXggMDAwMDAw MC4uNTg2NWQ4MQotLS0gL2Rldi9udWxsCisrKyBiL2JhZjRiNzkyLnBhdGNoCkBAIC0wLDAgKzEs NDkgQEAKK0Zyb20gYmFmNGI3OTI5NzU4YzcyY2RiNmNmMTYzMjVmYTI1ZjQzNWQyM2RiNiBNb24g U2VwIDE3IDAwOjAwOjAwIDIwMDEKK0Zyb206IFRKIFNhdW5kZXJzIDx0akBjYXN0YWdsaWEub3Jn PgorRGF0ZTogV2VkLCAxIEp1bCAyMDI2IDA5OjE0OjM4IC0wNzAwCitTdWJqZWN0OiBbUEFUQ0hd IEV4ZXJjaXNlIGNhdXRpb24gd2hlbiByZWFkaW5nIHRoZSBjbGllbnQtcHJvdmlkZWQgZmlsZSBz aXplCisgZm9yIFNDUCB1cGxvYWRzLCBhcyBpdCBjb3VsZCBwb3NzaWJseSBvdmVyZmxvdyBvdXIg c2l6ZSB0eXBlLgorCitUaGFua3MgdG8gRmFiaWFuIFdhaGxlIG9mIEhhcCBTZWN1cml0eSBmb3Ig cmVwb3J0aW5nIHRoaXMgaXNzdWUuCistLS0KKyBjb250cmliL21vZF9zZnRwL3NjcC5jIHwgMjMg KysrKysrKysrKysrKysrKystLS0tLS0KKyAxIGZpbGUgY2hhbmdlZCwgMTcgaW5zZXJ0aW9ucygr KSwgNiBkZWxldGlvbnMoLSkKKworZGlmZiAtLWdpdCBhL2NvbnRyaWIvbW9kX3NmdHAvc2NwLmMg Yi9jb250cmliL21vZF9zZnRwL3NjcC5jCitpbmRleCA4YzEwNTU4N2YuLmIxZjNlODlhZSAxMDA2 NDQKKy0tLSBhL2NvbnRyaWIvbW9kX3NmdHAvc2NwLmMKKysrKyBiL2NvbnRyaWIvbW9kX3NmdHAv c2NwLmMKK0BAIC02MDMsMTYgKzYwMywyNyBAQCBzdGF0aWMgaW50IHJlY3ZfcGVybXMocG9vbCAq cCwgdWludDMyX3QgY2hhbm5lbF9pZCwgY2hhciAqbW9kZV9zdHIsCisgCisgc3RhdGljIGludCBy ZWN2X2ZpbGVzeihwb29sICpwLCB1aW50MzJfdCBjaGFubmVsX2lkLCBjaGFyICpzaXplX3N0ciwK KyAgICAgb2ZmX3QgKmZpbGVzeikgeworLSAgcmVnaXN0ZXIgdW5zaWduZWQgaW50IGk7CisrICBj aGFyICplbmRwID0gTlVMTDsKKysgIHVuc2lnbmVkIGxvbmcgbG9uZyBzejsKKysgICpmaWxlc3og PSAwOworIAorLSAgLyogVGhlIGZpbGUgc2l6ZSBmaWVsZCBjb3VsZCBiZSBvZiBhcmJpdHJhcnkg bGVuZ3RoLiAqLworLSAgZm9yIChpID0gMCwgKmZpbGVzeiA9IDA7IFBSX0lTRElHSVQoc2l6ZV9z dHJbaV0pOyBpKyspIHsKKy0gICAgcHJfc2lnbmFsc19oYW5kbGUoKTsKKysjaWYgZGVmaW5lZChI QVZFX1NUUk9VTEwpCisrICBzeiA9IHN0cnRvdWxsKHNpemVfc3RyLCAmZW5kcCwgMTApOworKyNl bHNlCisrICBzeiA9IHN0cnRvdWwoc2l6ZV9zdHIsICZlbmRwLCAxMCk7CisrI2VuZGlmIC8qIEhB VkVfU1RST1VMTCAqLworIAorLSAgICAqZmlsZXN6ID0gKCpmaWxlc3ogKiAxMCkgKyAoc2l6ZV9z dHJbaV0gLSAnMCcpOworKyAgKmZpbGVzeiA9IChvZmZfdCkgc3o7CisrCisrICAvKiBXYXRjaCBm b3IgY2FzZXMgd2hlcmUgdGhlIHNlbnQgZmlsZSBzaXplIG1pZ2h0IG92ZXJmbG93IG91ciBzaXpl IHR5cGUuICovCisrICBpZiAoKmZpbGVzeiA8IDApIHsKKysgICAgcHJfdHJhY2VfbXNnKHRyYWNl X2NoYW5uZWwsIDIsICJmaWxlIHNpemUgb3V0IG9mIHJhbmdlIik7CisrICAgIHdyaXRlX2NvbmZp cm0ocCwgY2hhbm5lbF9pZCwgMSwgImZpbGUgc2l6ZSBvdXQgb2YgcmFuZ2UiKTsKKysgICAgcmV0 dXJuIC0xOworICAgfQorIAorLSAgaWYgKHNpemVfc3RyW2ldICE9ICcgJykgeworKyAgaWYgKGVu ZHAgPT0gTlVMTCB8fAorKyAgICAgICplbmRwICE9ICcgJykgeworICAgICBwcl90cmFjZV9tc2co dHJhY2VfY2hhbm5lbCwgMiwgImZpbGUgc2l6ZSBub3QgZm9sbG93ZWQgYnkgc3BhY2UgZGVsaW1p dGVyIik7CisgICAgIHdyaXRlX2NvbmZpcm0ocCwgY2hhbm5lbF9pZCwgMSwgImZpbGUgc2l6ZSBu b3QgZGVsaW1pdGVkIik7CisgICAgIHJldHVybiAtMTsKCmRpZmYgLS1naXQgYS9wcm9mdHBkLnNw ZWMgYi9wcm9mdHBkLnNwZWMKaW5kZXggMTU0MGNlMC4uNmI1NjljYiAxMDA2NDQKLS0tIGEvcHJv ZnRwZC5zcGVjCisrKyBiL3Byb2Z0cGQuc3BlYwpAQCAtNzQsNiArNzQsNyBAQCBQYXRjaDIzOgkJ aHR0cHM6Ly9naXRodWIuY29tL3Byb2Z0cGQvcHJvZnRwZC9jb21taXQvMDc3OTdhYmEucGF0Y2gK IFBhdGNoMjQ6CQlodHRwczovL2dpdGh1Yi5jb20vcHJvZnRwZC9wcm9mdHBkL2NvbW1pdC81ZTA2 YWNjNC5wYXRjaAogUGF0Y2gyNToJCWh0dHBzOi8vZ2l0aHViLmNvbS9wcm9mdHBkL3Byb2Z0cGQv Y29tbWl0LzFhNWNlNjQ2LnBhdGNoCiBQYXRjaDI2OgkJaHR0cHM6Ly9naXRodWIuY29tL3VzZXIt YXR0YWNobWVudHMvZmlsZXMvMzAyMDU0MTAvbW9kX3NmdHAtMS4zLjhkLWlzc3VlMjExNS5wYXRj aAorUGF0Y2gyNzoJCWh0dHBzOi8vZ2l0aHViLmNvbS9wcm9mdHBkL3Byb2Z0cGQvY29tbWl0L2Jh ZjRiNzkyLnBhdGNoCiAKIEJ1aWxkUmVxdWlyZXM6CQljb3JldXRpbHMKIEJ1aWxkUmVxdWlyZXM6 CQlnY2MKQEAgLTMxNSw2ICszMTYsMTAgQEAgc2VkIC1pIC1lICcvXltbOnNwYWNlOl1dKlRMU0Np cGhlclN1aXRlW1s6c3BhY2U6XV0qUFJPRklMRT1TWVNURU0kL2QnIG1vZF90bHMuY28KICMgaHR0 cHM6Ly9naXRodWIuY29tL3Byb2Z0cGQvcHJvZnRwZC9pc3N1ZXMvMjExNQogJXBhdGNoIC1QIDI2 IC1wMQogCisjIEV4ZXJjaXNlIGNhdXRpb24gd2hlbiByZWFkaW5nIHRoZSBjbGllbnQtcHJvdmlk ZWQgZmlsZSBzaXplIGZvciBTQ1AgdXBsb2FkcywKKyMgYXMgaXQgY291bGQgcG9zc2libHkgb3Zl cmZsb3cgb3VyIHNpemUgdHlwZSAoQ1ZFLTIwMjYtNjMwOTEpCislcGF0Y2ggLVAgMjcgLXAxCisK ICMgVHdlYWsgbG9ncm90YXRlIHNjcmlwdCBmb3Igc3lzdGVtZCBjb21wYXRpYmlsaXR5ICgjODAy MTc4KQogJWlmICgwJXs/cmhlbH0gJiYgMCV7P3JoZWx9IDw9IDcpIHx8ICgwJXs/ZmVkb3JhfSAm JiAwJXs/ZmVkb3JhfSA8PSAyMykKIHNlZCAtaSAtZSAnL2tpbGxhbGwvcy90ZXN0Liovc3lzdGVt Y3RsIHJlbG9hZCBwcm9mdHBkLnNlcnZpY2UvJyBcCkBAIC01NjYsNiArNTcxLDggQEAgZmkKICAg KGh0dHBzOi8vZ2l0aHViLmNvbS9wcm9mdHBkL3Byb2Z0cGQvaXNzdWVzLzIwNTIjaXNzdWVjb21t ZW50LTQ0ODkxMTA1OTgpCiAtIEZpeCBTRlRQIHJlcXVlc3QgcGF5bG9hZCBsZW5ndGggdW5kZXJm bG93IGNhbGN1bGF0aW9uIGluIG1vZF9zZnRwCiAgIChDVkUtMjAyNi01Mzk5NCwgaHR0cHM6Ly9n aXRodWIuY29tL3Byb2Z0cGQvcHJvZnRwZC9pc3N1ZXMvMjExNSkKKy0gRXhlcmNpc2UgY2F1dGlv biB3aGVuIHJlYWRpbmcgdGhlIGNsaWVudC1wcm92aWRlZCBmaWxlIHNpemUgZm9yIFNDUCB1cGxv YWRzLAorICBhcyBpdCBjb3VsZCBwb3NzaWJseSBvdmVyZmxvdyBvdXIgc2l6ZSB0eXBlIChDVkUt MjAyNi02MzA5MSkKIAogKiBNb24gTWF5IDExIDIwMjYgUGF1bCBIb3dhcnRoIDxwYXVsQGNpdHkt ZmFuLm9yZz4gLSAxLjMuOGQtMwogLSBBZGRpdGlvbmFsIGVzY2FwaW5nIGZvciBhdm9pZGFuY2Ug b2YgU1FMIGluamVjdGlvbiBpc3N1ZXMgd2l0aCAlJXtub3RlOi4uLn0K