From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Paul Howarth To: git-commits@fedoraproject.org Subject: [rpms/proftpd] epel8: Fix SFTP request payload length underflow calculation (CVE-2026-53994) Date: Tue, 28 Jul 2026 18:05:57 GMT Message-ID: <178526195789.1.15813865232226178999.rpms-proftpd-0caf73d3f35a@fedoraproject.org> List-ID: X-Git-Repo: rpms/proftpd X-Git-Branch: epel8 X-Git-Rev: 0caf73d3f35a1ad4305dd894677a5317cf51706b ICAgICAgICAgICAgQSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KCiAgICAgICAgICAgIFJl cG8gICA6IHJwbXMvcHJvZnRwZAogICAgICAgICAgICBCcmFuY2ggOiBlcGVsOAogICAgICAgICAg ICBDb21taXQgOiAwY2FmNzNkM2YzNWExYWQ0MzA1ZGQ4OTQ2NzdhNTMxN2NmNTE3MDZiCiAgICAg ICAgICAgIEF1dGhvciA6IFBhdWwgSG93YXJ0aCA8cGF1bEBjaXR5LWZhbi5vcmc+CiAgICAgICAg ICAgIERhdGUgICA6IDIwMjYtMDctMjdUMTY6MzQ6MjkrMDE6MDAKICAgICAgICAgICAgU3RhdHMg IDogKzUxLy0wIGluIDIgZmlsZShzKQogICAgICAgICAgICBVUkwgICAgOiBodHRwczovL3NyYy5m ZWRvcmFwcm9qZWN0Lm9yZy9ycG1zL3Byb2Z0cGQvYy8wY2FmNzNkM2YzNWExYWQ0MzA1ZGQ4OTQ2 NzdhNTMxN2NmNTE3MDZiP2JyYW5jaD1lcGVsOAoKICAgICAgICAgICAgTG9nOgogICAgICAgICAg ICBGaXggU0ZUUCByZXF1ZXN0IHBheWxvYWQgbGVuZ3RoIHVuZGVyZmxvdyBjYWxjdWxhdGlvbiAo Q1ZFLTIwMjYtNTM5OTQpCgpodHRwczovL2dpdGh1Yi5jb20vcHJvZnRwZC9wcm9mdHBkL2lzc3Vl cy8yMTE1CgotLS0KZGlmZiAtLWdpdCBhL21vZF9zZnRwLTEuMy44ZC1pc3N1ZTIxMTUucGF0Y2gg Yi9tb2Rfc2Z0cC0xLjMuOGQtaXNzdWUyMTE1LnBhdGNoCm5ldyBmaWxlIG1vZGUgMTAwNjQ0Cmlu ZGV4IDAwMDAwMDAuLjQ5M2Q1YjcKLS0tIC9kZXYvbnVsbAorKysgYi9tb2Rfc2Z0cC0xLjMuOGQt aXNzdWUyMTE1LnBhdGNoCkBAIC0wLDAgKzEsNDQgQEAKK2RpZmYgLS1naXQgYS9jb250cmliL21v ZF9zZnRwL2Z4cC5jIGIvY29udHJpYi9tb2Rfc2Z0cC9meHAuYworaW5kZXggZDYxZTcxMDQ2Li44 ZTg2NzY0OWMgMTAwNjQ0CistLS0gYS9jb250cmliL21vZF9zZnRwL2Z4cC5jCisrKysgYi9jb250 cmliL21vZF9zZnRwL2Z4cC5jCitAQCAtMzM4MSw2ICszMzgxLDIzIEBAIHN0YXRpYyBzdHJ1Y3Qg ZnhwX3BhY2tldCAqZnhwX3BhY2tldF9yZWFkKHVpbnQzMl90IGNoYW5uZWxfaWQsCisgICAgICAg IiglbHUgYnl0ZXMgcmVtYWluaW5nIGluIGJ1ZmZlcikiLCAodW5zaWduZWQgbG9uZykgZnhwLT5w YWNrZXRfbGVuLAorICAgICAgICh1bnNpZ25lZCBsb25nKSBidWZsZW4pOworIAorKyAgICAvKiBX ZSByZXF1aXJlIDUgYnl0ZXMgb2YgU0ZUUCByZXF1ZXN0IGRhdGEgYXQgYSBtaW5pbXVtOiAxIGJ5 dGUgZm9yIHRoZQorKyAgICAgKiByZXF1ZXN0IHR5cGUsIGFuZCA0IGJ5dGVzIGZvciB0aGUgcGF5 bG9hZCBsZW5ndGggKElzc3VlICMyMTE1KS4KKysgICAgICovCisrICAgIGlmIChmeHAtPnBhY2tl dF9sZW4gPCA1KSB7CisrICAgICAgKHZvaWQpIHByX2xvZ193cml0ZWZpbGUoc2Z0cF9sb2dmZCwg TU9EX1NGVFBfVkVSU0lPTiwKKysgICAgICAgICJpbGxlZ2FsIFNGVFAgcmVxdWVzdCBsZW5ndGgg KCVsdSBieXRlcywgcmVxdWlyZSBhdCBsZWFzdCA1IGJ5dGVzKSwgIgorKyAgICAgICAgInJlamVj dGluZyIsICh1bnNpZ25lZCBsb25nKSBmeHAtPnBhY2tldF9sZW4pOworKyAgICAgIFNGVFBfRElT Q09OTkVDVF9DT05OKFNGVFBfU1NIMl9ESVNDT05ORUNUX0JZX0FQUExJQ0FUSU9OLCBOVUxMKTsK KysgICAgfQorKworKyAgICBpZiAoZnhwLT5wYWNrZXRfbGVuID4gRlhQX01BWF9QQUNLRVRfTEVO KSB7CisrICAgICAgKHZvaWQpIHByX2xvZ193cml0ZWZpbGUoc2Z0cF9sb2dmZCwgTU9EX1NGVFBf VkVSU0lPTiwKKysgICAgICAgICJyZWNlaXZlZCBleGNlc3NpdmUgU0ZUUCBwYWNrZXQgKGxlbiAl bHUgPiBtYXggJWx1IGJ5dGVzKSwgcmVqZWN0aW5nIiwKKysgICAgICAgICh1bnNpZ25lZCBsb25n KSBmeHAtPnBhY2tldF9sZW4sICh1bnNpZ25lZCBsb25nKSBGWFBfTUFYX1BBQ0tFVF9MRU4pOwor KyAgICAgIFNGVFBfRElTQ09OTkVDVF9DT05OKFNGVFBfU1NIMl9ESVNDT05ORUNUX0JZX0FQUExJ Q0FUSU9OLCBOVUxMKTsKKysgICAgfQorKworICAgICBpZiAoYnVmbGVuID09IDApIHsKKyAgICAg ICBmeHBfcGFja2V0X3NldF9wYWNrZXQoZnhwKTsKKyAgICAgICBmeHBfcGFja2V0X2NsZWFyX2Nh Y2hlKCk7CitAQCAtMTM2NzQsMTUgKzEzNjkxLDYgQEAgaW50IHNmdHBfZnhwX2hhbmRsZV9wYWNr ZXQocG9vbCAqcCwgdm9pZCAqc3NoMiwgdWludDMyX3QgY2hhbm5lbF9pZCwKKyAgICAgICAgICh1 bnNpZ25lZCBsb25nKSBjaGFubmVsX2lkKTsKKyAgICAgfQorIAorLSAgICBpZiAoZnhwLT5wYWNr ZXRfbGVuID4gRlhQX01BWF9QQUNLRVRfTEVOKSB7CistICAgICAgKHZvaWQpIHByX2xvZ193cml0 ZWZpbGUoc2Z0cF9sb2dmZCwgTU9EX1NGVFBfVkVSU0lPTiwKKy0gICAgICAgICJyZWNlaXZlZCBl eGNlc3NpdmUgU0ZUUCBwYWNrZXQgKGxlbiAlbHUgPiBtYXggJWx1IGJ5dGVzKSwgcmVqZWN0aW5n IiwKKy0gICAgICAgICh1bnNpZ25lZCBsb25nKSBmeHAtPnBhY2tldF9sZW4sICh1bnNpZ25lZCBs b25nKSBGWFBfTUFYX1BBQ0tFVF9MRU4pOworLSAgICAgIGRlc3Ryb3lfcG9vbChmeHAtPnBvb2wp OworLSAgICAgIGVycm5vID0gRVBFUk07CistICAgICAgcmV0dXJuIC0xOworLSAgICB9CistCisg ICAgIGZ4cF9zZXNzaW9uID0gZnhwX2dldF9zZXNzaW9uKGNoYW5uZWxfaWQpOworICAgICBpZiAo ZnhwX3Nlc3Npb24gPT0gTlVMTCkgeworICAgICAgICh2b2lkKSBwcl9sb2dfd3JpdGVmaWxlKHNm dHBfbG9nZmQsIE1PRF9TRlRQX1ZFUlNJT04sCgpkaWZmIC0tZ2l0IGEvcHJvZnRwZC5zcGVjIGIv cHJvZnRwZC5zcGVjCmluZGV4IDhiN2E3YjIuLjJkNTMzZjYgMTAwNjQ0Ci0tLSBhL3Byb2Z0cGQu c3BlYworKysgYi9wcm9mdHBkLnNwZWMKQEAgLTEwNyw2ICsxMDcsNyBAQCBQYXRjaDExODoJCXBy b2Z0cGQtMS4zLjZlLWlzc3VlMTg0MC5wYXRjaAogUGF0Y2gxMTk6CQlodHRwczovL2dpdGh1Yi5j b20vcHJvZnRwZC9wcm9mdHBkL2NvbW1pdC8wNzc5N2FiYS5wYXRjaAogUGF0Y2gxMjA6CQlodHRw czovL2dpdGh1Yi5jb20vcHJvZnRwZC9wcm9mdHBkL2NvbW1pdC81ZTA2YWNjNC5wYXRjaAogUGF0 Y2gxMjE6CQlodHRwczovL2dpdGh1Yi5jb20vcHJvZnRwZC9wcm9mdHBkL2NvbW1pdC8xYTVjZTY0 Ni5wYXRjaAorUGF0Y2gxMjI6CQlodHRwczovL2dpdGh1Yi5jb20vdXNlci1hdHRhY2htZW50cy9m aWxlcy8zMDIwNTQxMC9tb2Rfc2Z0cC0xLjMuOGQtaXNzdWUyMTE1LnBhdGNoCiAKIEJ1aWxkUmVx dWlyZXM6CQljb3JldXRpbHMKIEJ1aWxkUmVxdWlyZXM6CQlnY2MKQEAgLTM4Niw2ICszODcsMTAg QEAgc2VkIC1pIC1lICcvXltbOnNwYWNlOl1dKlRMU0NpcGhlclN1aXRlW1s6c3BhY2U6XV0qUFJP RklMRT1TWVNURU0kL2QnIG1vZF90bHMuY28KICMgQWRkcmVzcyBhbm90aGVyIGF2ZW51ZSBmb3Ig U1FMIGluamVjdGlvbiwgdmlhIGN1c3RvbSBTUUxVc2VySW5mbyBxdWVyaWVzCiAlcGF0Y2ggLVAg MTIxIC1wMQogCisjIEZpeCBTRlRQIHJlcXVlc3QgcGF5bG9hZCBsZW5ndGggdW5kZXJmbG93IGNh bGN1bGF0aW9uIGluIG1vZF9zZnRwIChDVkUtMjAyNi01Mzk5NCkKKyMgaHR0cHM6Ly9naXRodWIu Y29tL3Byb2Z0cGQvcHJvZnRwZC9pc3N1ZXMvMjExNQorJXBhdGNoIC1QIDEyMiAtcDEKKwogJWlm ICV7dXNlX3N5c3RlbWR9CiAjIFR3ZWFrIGxvZ3JvdGF0ZSBzY3JpcHQgZm9yIHN5c3RlbWQgY29t cGF0aWJpbGl0eSAoIzgwMjE3OCkKIHNlZCAtaSAtZSAnL2tpbGxhbGwvcy90ZXN0Liovc3lzdGVt Y3RsIHJlbG9hZCBwcm9mdHBkLnNlcnZpY2UvJyBcCkBAIC02NzEsNiArNjc2LDggQEAgZmkKICog TW9uIEp1bCAyNyAyMDI2IFBhdWwgSG93YXJ0aCA8cGF1bEBjaXR5LWZhbi5vcmc+IC0gMS4zLjZl LTExCiAtIEFkZHJlc3MgYW5vdGhlciBhdmVudWUgZm9yIFNRTCBpbmplY3Rpb24sIHZpYSBjdXN0 b20gU1FMVXNlckluZm8gcXVlcmllcwogICAoaHR0cHM6Ly9naXRodWIuY29tL3Byb2Z0cGQvcHJv ZnRwZC9pc3N1ZXMvMjA1MiNpc3N1ZWNvbW1lbnQtNDQ4OTExMDU5OCkKKy0gRml4IFNGVFAgcmVx dWVzdCBwYXlsb2FkIGxlbmd0aCB1bmRlcmZsb3cgY2FsY3VsYXRpb24gaW4gbW9kX3NmdHAKKyAg KENWRS0yMDI2LTUzOTk0LCBodHRwczovL2dpdGh1Yi5jb20vcHJvZnRwZC9wcm9mdHBkL2lzc3Vl cy8yMTE1KQogCiAqIE1vbiBNYXkgMTEgMjAyNiBQYXVsIEhvd2FydGggPHBhdWxAY2l0eS1mYW4u b3JnPiAtIDEuMy42ZS0xMAogLSBGaXggZm9yIFNRTCBJbmplY3Rpb24gaW4gbW9kX3dyYXAyX3Nx bCB2aWEgcmV2ZXJzZSBETlMgaG9zdG5hbWUK