From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Paul Howarth To: git-commits@fedoraproject.org Subject: [rpms/proftpd] epel9: Fix heap buffer overflow via SFTP packet reassembly (CVE-2026-63090) Date: Tue, 28 Jul 2026 17:52:33 GMT Message-ID: <178526115337.1.11429810068824948447.rpms-proftpd-792754350069@fedoraproject.org> List-ID: X-Git-Repo: rpms/proftpd X-Git-Branch: epel9 X-Git-Rev: 792754350069b0d185d8a364ab0d8183f1c0aeb6 ICAgICAgICAgICAgQSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KCiAgICAgICAgICAgIFJl cG8gICA6IHJwbXMvcHJvZnRwZAogICAgICAgICAgICBCcmFuY2ggOiBlcGVsOQogICAgICAgICAg ICBDb21taXQgOiA3OTI3NTQzNTAwNjliMGQxODVkOGEzNjRhYjBkODE4M2YxYzBhZWI2CiAgICAg ICAgICAgIEF1dGhvciA6IFBhdWwgSG93YXJ0aCA8cGF1bEBjaXR5LWZhbi5vcmc+CiAgICAgICAg ICAgIERhdGUgICA6IDIwMjYtMDctMjJUMTU6MTc6MjUrMDE6MDAKICAgICAgICAgICAgU3RhdHMg IDogKzg4Ly0wIGluIDIgZmlsZShzKQogICAgICAgICAgICBVUkwgICAgOiBodHRwczovL3NyYy5m ZWRvcmFwcm9qZWN0Lm9yZy9ycG1zL3Byb2Z0cGQvYy83OTI3NTQzNTAwNjliMGQxODVkOGEzNjRh YjBkODE4M2YxYzBhZWI2P2JyYW5jaD1lcGVsOQoKICAgICAgICAgICAgTG9nOgogICAgICAgICAg ICBGaXggaGVhcCBidWZmZXIgb3ZlcmZsb3cgdmlhIFNGVFAgcGFja2V0IHJlYXNzZW1ibHkgKENW RS0yMDI2LTYzMDkwKQoKaHR0cHM6Ly9naXRodWIuY29tL3Byb2Z0cGQvcHJvZnRwZC9pc3N1ZXMv MjE5MAoKLS0tCmRpZmYgLS1naXQgYS9tb2Rfc2Z0cC0xLjMuOGQtaXNzdWUyMTkwLnBhdGNoIGIv bW9kX3NmdHAtMS4zLjhkLWlzc3VlMjE5MC5wYXRjaApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRl eCAwMDAwMDAwLi5jMmI5MTQ1Ci0tLSAvZGV2L251bGwKKysrIGIvbW9kX3NmdHAtMS4zLjhkLWlz c3VlMjE5MC5wYXRjaApAQCAtMCwwICsxLDgxIEBACitkaWZmIC0tZ2l0IGEvY29udHJpYi9tb2Rf c2Z0cC9meHAuYyBiL2NvbnRyaWIvbW9kX3NmdHAvZnhwLmMKK2luZGV4IGQ2MWU3MTA0Ni4uYTc2 MzFlYWE0IDEwMDY0NAorLS0tIGEvY29udHJpYi9tb2Rfc2Z0cC9meHAuYworKysrIGIvY29udHJp Yi9tb2Rfc2Z0cC9meHAuYworQEAgLTI2NCwxMSArMjY0LDExIEBAIHN0cnVjdCBmeHBfYnVmZmVy IHsKKyAjZGVmaW5lCUZYUF9QQUNLRVRfSEFWRV9QQVlMT0FEX1NJWkUJMHgwMDA4CisgI2RlZmlu ZQlGWFBfUEFDS0VUX0hBVkVfUEFZTE9BRAkJMHgwMDEwCisgCistLyogQWZ0ZXIgMzJLIG9mIGFs bG9jYXRpb24gZnJvbSB0aGUgc2NyYXRjaCBTRlRQIHBheWxvYWQgcG9vbCwgZGVzdHJveSB0aGUK KysvKiBBZnRlciA2NEsgb2YgYWxsb2NhdGlvbiBmcm9tIHRoZSBzY3JhdGNoIFNGVFAgcGF5bG9h ZCBwb29sLCBkZXN0cm95IHRoZQorICAqIHBvb2wgYW5kIGNyZWF0ZSBhIG5ldyBvbmUuICBUaGlz IHdpbGwgcHJldmVudCB1bmJvdW5kZWQgYWxsb2NhdGlvbgorICAqIGZyb20gdGhlIHBvb2wuCisg ICovCistI2RlZmluZSBGWFBfUEFDS0VUX0RBVEFfQUxMT0NfTUFYX1NaCQkoMTAyNCAqIDMyKQor KyNkZWZpbmUgRlhQX1BBQ0tFVF9EQVRBX0FMTE9DX01BWF9TWgkJKDEwMjQgKiA2NCkKKyBzdGF0 aWMgc2l6ZV90IGZ4cF9wYWNrZXRfZGF0YV9hbGxvY3N6ID0gMDsKKyAKKyAjZGVmaW5lIEZYUF9Q QUNLRVRfREFUQV9ERUZBVUxUX1NaCQkoMTAyNCAqIDE2KQorQEAgLTMyODgsMzcgKzMyODgsNDUg QEAgc3RhdGljIHZvaWQgZnhwX3BhY2tldF9hZGRfY2FjaGUodW5zaWduZWQgY2hhciAqZGF0YSwg dWludDMyX3QgZGF0YWxlbikgeworIAorICAgICB9IGVsc2UgeworICAgICAgIC8qIFdlIG5lZWQg YSBsYXJnZXIgYnVmZmVyLiAgUm91bmQgdXAgdG8gdGhlIG5lYXJlc3QgMUsgc2l6ZS4gKi8KKysg ICAgICBwb29sICp0bXBfcG9vbDsKKysgICAgICBjaGFyICpjYWNoZWRfZGF0YTsKKysgICAgICB1 aW50MzJfdCBjYWNoZWRfZGF0YWxlbjsKKyAgICAgICBzaXplX3Qgc3o7CisgCistICAgICAgc3og PSBzZnRwX2NyeXB0b19nZXRfc2l6ZShjdXJyX2J1ZmxlbiArIGRhdGFsZW4gKyAxLCAxMDI0KTsK KysgICAgICBpZiAoY3Vycl9idWZsZW4gKyBkYXRhbGVuID4gRlhQX01BWF9QQUNLRVRfTEVOKSB7 CisrICAgICAgICAodm9pZCkgcHJfbG9nX3dyaXRlZmlsZShzZnRwX2xvZ2ZkLCBNT0RfU0ZUUF9W RVJTSU9OLAorKyAgICAgICAgICAicmVjZWl2ZWQgZXhjZXNzaXZlIFNGVFAgZGF0YSAobGVuICVs dSA+IG1heCAlbHUgYnl0ZXMpLCByZWplY3RpbmciLAorKyAgICAgICAgICAodW5zaWduZWQgbG9u ZykgY3Vycl9idWZsZW4gKyBkYXRhbGVuLAorKyAgICAgICAgICAodW5zaWduZWQgbG9uZykgRlhQ X01BWF9QQUNLRVRfTEVOKTsKKysgICAgICAgIFNGVFBfRElTQ09OTkVDVF9DT05OKFNGVFBfU1NI Ml9ESVNDT05ORUNUX0JZX0FQUExJQ0FUSU9OLCBOVUxMKTsKKysgICAgICB9CisgCistICAgICAg aWYgKGZ4cF9wYWNrZXRfZGF0YV9hbGxvY3N6ID4gRlhQX1BBQ0tFVF9EQVRBX0FMTE9DX01BWF9T WikgeworLSAgICAgICAgcG9vbCAqdG1wX3Bvb2w7CistICAgICAgICBjaGFyICp0bXBfZGF0YTsK Ky0gICAgICAgIHVpbnQzMl90IHRtcF9kYXRhbGVuOworKyAgICAgIC8qIEdldCB0aGUgZXhpc3Rp bmcgY2FjaGVkIGRhdGEgYmVmb3JlIGFsbG9jYXRpbmcgYSBsYXJnZXIgYnVmZmVyLiAqLworKyAg ICAgIHRtcF9wb29sID0gbWFrZV9zdWJfcG9vbChmeHBfcG9vbCk7CisrCisrICAgICAgY2FjaGVk X2RhdGFsZW4gPSBjdXJyX2J1ZmxlbjsKKysgICAgICBjYWNoZWRfZGF0YSA9IHBhbGxvYyh0bXBf cG9vbCwgY2FjaGVkX2RhdGFsZW4pOworKyAgICAgIG1lbWNweShjYWNoZWRfZGF0YSwgY3Vycl9i dWYsIGNhY2hlZF9kYXRhbGVuKTsKKyAKKysgICAgICBpZiAoZnhwX3BhY2tldF9kYXRhX2FsbG9j c3ogPiBGWFBfUEFDS0VUX0RBVEFfQUxMT0NfTUFYX1NaKSB7CisgICAgICAgICAodm9pZCkgcHJf bG9nX3dyaXRlZmlsZShzZnRwX2xvZ2ZkLCBNT0RfU0ZUUF9WRVJTSU9OLAorICAgICAgICAgICAi cmVuZXdpbmcgU0ZUUCBwYWNrZXQgZGF0YSBwb29sIik7CisgCistICAgICAgICB0bXBfcG9vbCA9 IG1ha2Vfc3ViX3Bvb2woZnhwX3Bvb2wpOworLSAgICAgICAgdG1wX2RhdGFsZW4gPSBjdXJyX2J1 ZmxlbjsKKy0gICAgICAgIHRtcF9kYXRhID0gcGFsbG9jKHRtcF9wb29sLCB0bXBfZGF0YWxlbik7 ICAgICAgICAgICAgICAgIAorLSAgICAgICAgbWVtY3B5KHRtcF9kYXRhLCBjdXJyX2J1ZiwgdG1w X2RhdGFsZW4pOworLSAgICAgICAgCisgICAgICAgICBkZXN0cm95X3Bvb2woY3Vycl9idWZfcG9v bCk7CisgCisgICAgICAgICBjdXJyX2J1Zl9wb29sID0gbWFrZV9zdWJfcG9vbChmeHBfcG9vbCk7 CisgICAgICAgICBwcl9wb29sX3RhZyhjdXJyX2J1Zl9wb29sLCAiU0ZUUCBwYWNrZXQgYnVmZmVy IHBvb2wiKTsKKysgICAgICB9CisgCistICAgICAgICBjdXJyX2J1ZnN6ID0gc3o7CistICAgICAg ICBjdXJyX2J1ZiA9IHBhbGxvYyhjdXJyX2J1Zl9wb29sLCBjdXJyX2J1ZnN6KTsKKy0gICAgICAg IGZ4cF9wYWNrZXRfZGF0YV9hbGxvY3N6ICs9IHN6OworKyAgICAgIHN6ID0gc2Z0cF9jcnlwdG9f Z2V0X3NpemUoY3Vycl9idWZsZW4gKyBkYXRhbGVuICsgMSwgMTAyNCk7CisrICAgICAgY3Vycl9i dWZzeiA9IHN6OworKyAgICAgIGN1cnJfYnVmID0gcGFsbG9jKGN1cnJfYnVmX3Bvb2wsIGN1cnJf YnVmc3opOworKyAgICAgIGZ4cF9wYWNrZXRfZGF0YV9hbGxvY3N6ICs9IHN6OworIAorLSAgICAg ICAgbWVtY3B5KGN1cnJfYnVmLCB0bXBfZGF0YSwgdG1wX2RhdGFsZW4pOworLSAgICAgICAgY3Vy cl9idWZsZW4gPSB0bXBfZGF0YWxlbjsKKysgICAgICBtZW1jcHkoY3Vycl9idWYsIGNhY2hlZF9k YXRhLCBjYWNoZWRfZGF0YWxlbik7CisrICAgICAgY3Vycl9idWZsZW4gPSBjYWNoZWRfZGF0YWxl bjsKKyAKKy0gICAgICAgIGRlc3Ryb3lfcG9vbCh0bXBfcG9vbCk7CistICAgICAgfQorKyAgICAg IGRlc3Ryb3lfcG9vbCh0bXBfcG9vbCk7CisgICAgIH0KKyAKKyAgICAgLyogQXBwZW5kIHRoZSBT U0gyIGRhdGEgdG8gdGhlIGN1cnJlbnQgdW5jb25zdW1lZCBidWZmZXIuCgpkaWZmIC0tZ2l0IGEv cHJvZnRwZC5zcGVjIGIvcHJvZnRwZC5zcGVjCmluZGV4IDZiNTY5Y2IuLjk0ZjQzN2EgMTAwNjQ0 Ci0tLSBhL3Byb2Z0cGQuc3BlYworKysgYi9wcm9mdHBkLnNwZWMKQEAgLTc1LDYgKzc1LDcgQEAg UGF0Y2gyNDoJCWh0dHBzOi8vZ2l0aHViLmNvbS9wcm9mdHBkL3Byb2Z0cGQvY29tbWl0LzVlMDZh Y2M0LnBhdGNoCiBQYXRjaDI1OgkJaHR0cHM6Ly9naXRodWIuY29tL3Byb2Z0cGQvcHJvZnRwZC9j b21taXQvMWE1Y2U2NDYucGF0Y2gKIFBhdGNoMjY6CQlodHRwczovL2dpdGh1Yi5jb20vdXNlci1h dHRhY2htZW50cy9maWxlcy8zMDIwNTQxMC9tb2Rfc2Z0cC0xLjMuOGQtaXNzdWUyMTE1LnBhdGNo CiBQYXRjaDI3OgkJaHR0cHM6Ly9naXRodWIuY29tL3Byb2Z0cGQvcHJvZnRwZC9jb21taXQvYmFm NGI3OTIucGF0Y2gKK1BhdGNoMjg6CQlodHRwczovL2dpdGh1Yi5jb20vdXNlci1hdHRhY2htZW50 cy9maWxlcy8zMDIwNTU0MS9tb2Rfc2Z0cC0xLjMuOGQtaXNzdWUyMTkwLnBhdGNoCiAKIEJ1aWxk UmVxdWlyZXM6CQljb3JldXRpbHMKIEJ1aWxkUmVxdWlyZXM6CQlnY2MKQEAgLTMyMCw2ICszMjEs MTAgQEAgc2VkIC1pIC1lICcvXltbOnNwYWNlOl1dKlRMU0NpcGhlclN1aXRlW1s6c3BhY2U6XV0q UFJPRklMRT1TWVNURU0kL2QnIG1vZF90bHMuY28KICMgYXMgaXQgY291bGQgcG9zc2libHkgb3Zl cmZsb3cgb3VyIHNpemUgdHlwZSAoQ1ZFLTIwMjYtNjMwOTEpCiAlcGF0Y2ggLVAgMjcgLXAxCiAK KyMgQXV0aGVudGljYXRlZCBTRlRQIHNlc3Npb25zIGNhbiBvdmVyZmxvdyB0aGUgU0ZUUCBwYWNr ZXQgYnVmZmVyCisjIGh0dHBzOi8vZ2l0aHViLmNvbS9wcm9mdHBkL3Byb2Z0cGQvaXNzdWVzLzIx OTAgKENWRS0yMDI2LTYzMDkwKQorJXBhdGNoIC1QIDI4IC1wMQorCiAjIFR3ZWFrIGxvZ3JvdGF0 ZSBzY3JpcHQgZm9yIHN5c3RlbWQgY29tcGF0aWJpbGl0eSAoIzgwMjE3OCkKICVpZiAoMCV7P3Jo ZWx9ICYmIDAlez9yaGVsfSA8PSA3KSB8fCAoMCV7P2ZlZG9yYX0gJiYgMCV7P2ZlZG9yYX0gPD0g MjMpCiBzZWQgLWkgLWUgJy9raWxsYWxsL3MvdGVzdC4qL3N5c3RlbWN0bCByZWxvYWQgcHJvZnRw ZC5zZXJ2aWNlLycgXApAQCAtNTczLDYgKzU3OCw4IEBAIGZpCiAgIChDVkUtMjAyNi01Mzk5NCwg aHR0cHM6Ly9naXRodWIuY29tL3Byb2Z0cGQvcHJvZnRwZC9pc3N1ZXMvMjExNSkKIC0gRXhlcmNp c2UgY2F1dGlvbiB3aGVuIHJlYWRpbmcgdGhlIGNsaWVudC1wcm92aWRlZCBmaWxlIHNpemUgZm9y IFNDUCB1cGxvYWRzLAogICBhcyBpdCBjb3VsZCBwb3NzaWJseSBvdmVyZmxvdyBvdXIgc2l6ZSB0 eXBlIChDVkUtMjAyNi02MzA5MSkKKy0gQXV0aGVudGljYXRlZCBTRlRQIHNlc3Npb25zIGNvdWxk IG92ZXJmbG93IHRoZSBTRlRQIHBhY2tldCBidWZmZXIKKyAgKENWRS0yMDI2LTYzMDkwLCBodHRw czovL2dpdGh1Yi5jb20vcHJvZnRwZC9wcm9mdHBkL2lzc3Vlcy8yMTkwKQogCiAqIE1vbiBNYXkg MTEgMjAyNiBQYXVsIEhvd2FydGggPHBhdWxAY2l0eS1mYW4ub3JnPiAtIDEuMy44ZC0zCiAtIEFk ZGl0aW9uYWwgZXNjYXBpbmcgZm9yIGF2b2lkYW5jZSBvZiBTUUwgaW5qZWN0aW9uIGlzc3VlcyB3 aXRoICUle25vdGU6Li4ufQo=