From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Paul Howarth To: git-commits@fedoraproject.org Subject: [rpms/proftpd] epel8: Fix signed integer overflow via scp file size record parser (CVE-2026-63091) Date: Tue, 28 Jul 2026 18:05:58 GMT Message-ID: <178526195835.1.2760695493439130978.rpms-proftpd-d186c914291a@fedoraproject.org> List-ID: X-Git-Repo: rpms/proftpd X-Git-Branch: epel8 X-Git-Rev: d186c914291a8c74fe0408e7cc03a5bd6a08ae41 ICAgICAgICAgICAgQSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KCiAgICAgICAgICAgIFJl cG8gICA6IHJwbXMvcHJvZnRwZAogICAgICAgICAgICBCcmFuY2ggOiBlcGVsOAogICAgICAgICAg ICBDb21taXQgOiBkMTg2YzkxNDI5MWE4Yzc0ZmUwNDA4ZTdjYzAzYTViZDZhMDhhZTQxCiAgICAg ICAgICAgIEF1dGhvciA6IFBhdWwgSG93YXJ0aCA8cGF1bEBjaXR5LWZhbi5vcmc+CiAgICAgICAg ICAgIERhdGUgICA6IDIwMjYtMDctMjdUMTY6NDE6MzcrMDE6MDAKICAgICAgICAgICAgU3RhdHMg IDogKzU2Ly0wIGluIDIgZmlsZShzKQogICAgICAgICAgICBVUkwgICAgOiBodHRwczovL3NyYy5m ZWRvcmFwcm9qZWN0Lm9yZy9ycG1zL3Byb2Z0cGQvYy9kMTg2YzkxNDI5MWE4Yzc0ZmUwNDA4ZTdj YzAzYTViZDZhMDhhZTQxP2JyYW5jaD1lcGVsOAoKICAgICAgICAgICAgTG9nOgogICAgICAgICAg ICBGaXggc2lnbmVkIGludGVnZXIgb3ZlcmZsb3cgdmlhIHNjcCBmaWxlIHNpemUgcmVjb3JkIHBh cnNlciAoQ1ZFLTIwMjYtNjMwOTEpCgpFeGVyY2lzZSBjYXV0aW9uIHdoZW4gcmVhZGluZyB0aGUg Y2xpZW50LXByb3ZpZGVkIGZpbGUgc2l6ZSBmb3IgU0NQIHVwbG9hZHMsCmFzIGl0IGNvdWxkIHBv c3NpYmx5IG92ZXJmbG93IG91ciBzaXplIHR5cGUuCgotLS0KZGlmZiAtLWdpdCBhL2JhZjRiNzky LnBhdGNoIGIvYmFmNGI3OTIucGF0Y2gKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXggMDAwMDAw MC4uNTg2NWQ4MQotLS0gL2Rldi9udWxsCisrKyBiL2JhZjRiNzkyLnBhdGNoCkBAIC0wLDAgKzEs NDkgQEAKK0Zyb20gYmFmNGI3OTI5NzU4YzcyY2RiNmNmMTYzMjVmYTI1ZjQzNWQyM2RiNiBNb24g U2VwIDE3IDAwOjAwOjAwIDIwMDEKK0Zyb206IFRKIFNhdW5kZXJzIDx0akBjYXN0YWdsaWEub3Jn PgorRGF0ZTogV2VkLCAxIEp1bCAyMDI2IDA5OjE0OjM4IC0wNzAwCitTdWJqZWN0OiBbUEFUQ0hd IEV4ZXJjaXNlIGNhdXRpb24gd2hlbiByZWFkaW5nIHRoZSBjbGllbnQtcHJvdmlkZWQgZmlsZSBz aXplCisgZm9yIFNDUCB1cGxvYWRzLCBhcyBpdCBjb3VsZCBwb3NzaWJseSBvdmVyZmxvdyBvdXIg c2l6ZSB0eXBlLgorCitUaGFua3MgdG8gRmFiaWFuIFdhaGxlIG9mIEhhcCBTZWN1cml0eSBmb3Ig cmVwb3J0aW5nIHRoaXMgaXNzdWUuCistLS0KKyBjb250cmliL21vZF9zZnRwL3NjcC5jIHwgMjMg KysrKysrKysrKysrKysrKystLS0tLS0KKyAxIGZpbGUgY2hhbmdlZCwgMTcgaW5zZXJ0aW9ucygr KSwgNiBkZWxldGlvbnMoLSkKKworZGlmZiAtLWdpdCBhL2NvbnRyaWIvbW9kX3NmdHAvc2NwLmMg Yi9jb250cmliL21vZF9zZnRwL3NjcC5jCitpbmRleCA4YzEwNTU4N2YuLmIxZjNlODlhZSAxMDA2 NDQKKy0tLSBhL2NvbnRyaWIvbW9kX3NmdHAvc2NwLmMKKysrKyBiL2NvbnRyaWIvbW9kX3NmdHAv c2NwLmMKK0BAIC02MDMsMTYgKzYwMywyNyBAQCBzdGF0aWMgaW50IHJlY3ZfcGVybXMocG9vbCAq cCwgdWludDMyX3QgY2hhbm5lbF9pZCwgY2hhciAqbW9kZV9zdHIsCisgCisgc3RhdGljIGludCBy ZWN2X2ZpbGVzeihwb29sICpwLCB1aW50MzJfdCBjaGFubmVsX2lkLCBjaGFyICpzaXplX3N0ciwK KyAgICAgb2ZmX3QgKmZpbGVzeikgeworLSAgcmVnaXN0ZXIgdW5zaWduZWQgaW50IGk7CisrICBj aGFyICplbmRwID0gTlVMTDsKKysgIHVuc2lnbmVkIGxvbmcgbG9uZyBzejsKKysgICpmaWxlc3og PSAwOworIAorLSAgLyogVGhlIGZpbGUgc2l6ZSBmaWVsZCBjb3VsZCBiZSBvZiBhcmJpdHJhcnkg bGVuZ3RoLiAqLworLSAgZm9yIChpID0gMCwgKmZpbGVzeiA9IDA7IFBSX0lTRElHSVQoc2l6ZV9z dHJbaV0pOyBpKyspIHsKKy0gICAgcHJfc2lnbmFsc19oYW5kbGUoKTsKKysjaWYgZGVmaW5lZChI QVZFX1NUUk9VTEwpCisrICBzeiA9IHN0cnRvdWxsKHNpemVfc3RyLCAmZW5kcCwgMTApOworKyNl bHNlCisrICBzeiA9IHN0cnRvdWwoc2l6ZV9zdHIsICZlbmRwLCAxMCk7CisrI2VuZGlmIC8qIEhB VkVfU1RST1VMTCAqLworIAorLSAgICAqZmlsZXN6ID0gKCpmaWxlc3ogKiAxMCkgKyAoc2l6ZV9z dHJbaV0gLSAnMCcpOworKyAgKmZpbGVzeiA9IChvZmZfdCkgc3o7CisrCisrICAvKiBXYXRjaCBm b3IgY2FzZXMgd2hlcmUgdGhlIHNlbnQgZmlsZSBzaXplIG1pZ2h0IG92ZXJmbG93IG91ciBzaXpl IHR5cGUuICovCisrICBpZiAoKmZpbGVzeiA8IDApIHsKKysgICAgcHJfdHJhY2VfbXNnKHRyYWNl X2NoYW5uZWwsIDIsICJmaWxlIHNpemUgb3V0IG9mIHJhbmdlIik7CisrICAgIHdyaXRlX2NvbmZp cm0ocCwgY2hhbm5lbF9pZCwgMSwgImZpbGUgc2l6ZSBvdXQgb2YgcmFuZ2UiKTsKKysgICAgcmV0 dXJuIC0xOworICAgfQorIAorLSAgaWYgKHNpemVfc3RyW2ldICE9ICcgJykgeworKyAgaWYgKGVu ZHAgPT0gTlVMTCB8fAorKyAgICAgICplbmRwICE9ICcgJykgeworICAgICBwcl90cmFjZV9tc2co dHJhY2VfY2hhbm5lbCwgMiwgImZpbGUgc2l6ZSBub3QgZm9sbG93ZWQgYnkgc3BhY2UgZGVsaW1p dGVyIik7CisgICAgIHdyaXRlX2NvbmZpcm0ocCwgY2hhbm5lbF9pZCwgMSwgImZpbGUgc2l6ZSBu b3QgZGVsaW1pdGVkIik7CisgICAgIHJldHVybiAtMTsKCmRpZmYgLS1naXQgYS9wcm9mdHBkLnNw ZWMgYi9wcm9mdHBkLnNwZWMKaW5kZXggMmQ1MzNmNi4uOTBjN2JmMyAxMDA2NDQKLS0tIGEvcHJv ZnRwZC5zcGVjCisrKyBiL3Byb2Z0cGQuc3BlYwpAQCAtMTA4LDYgKzEwOCw3IEBAIFBhdGNoMTE5 OgkJaHR0cHM6Ly9naXRodWIuY29tL3Byb2Z0cGQvcHJvZnRwZC9jb21taXQvMDc3OTdhYmEucGF0 Y2gKIFBhdGNoMTIwOgkJaHR0cHM6Ly9naXRodWIuY29tL3Byb2Z0cGQvcHJvZnRwZC9jb21taXQv NWUwNmFjYzQucGF0Y2gKIFBhdGNoMTIxOgkJaHR0cHM6Ly9naXRodWIuY29tL3Byb2Z0cGQvcHJv ZnRwZC9jb21taXQvMWE1Y2U2NDYucGF0Y2gKIFBhdGNoMTIyOgkJaHR0cHM6Ly9naXRodWIuY29t L3VzZXItYXR0YWNobWVudHMvZmlsZXMvMzAyMDU0MTAvbW9kX3NmdHAtMS4zLjhkLWlzc3VlMjEx NS5wYXRjaAorUGF0Y2gxMjM6CQlodHRwczovL2dpdGh1Yi5jb20vcHJvZnRwZC9wcm9mdHBkL2Nv bW1pdC9iYWY0Yjc5Mi5wYXRjaAogCiBCdWlsZFJlcXVpcmVzOgkJY29yZXV0aWxzCiBCdWlsZFJl cXVpcmVzOgkJZ2NjCkBAIC0zOTEsNiArMzkyLDEwIEBAIHNlZCAtaSAtZSAnL15bWzpzcGFjZTpd XSpUTFNDaXBoZXJTdWl0ZVtbOnNwYWNlOl1dKlBST0ZJTEU9U1lTVEVNJC9kJyBtb2RfdGxzLmNv CiAjIGh0dHBzOi8vZ2l0aHViLmNvbS9wcm9mdHBkL3Byb2Z0cGQvaXNzdWVzLzIxMTUKICVwYXRj aCAtUCAxMjIgLXAxCiAKKyMgRXhlcmNpc2UgY2F1dGlvbiB3aGVuIHJlYWRpbmcgdGhlIGNsaWVu dC1wcm92aWRlZCBmaWxlIHNpemUgZm9yIFNDUCB1cGxvYWRzLAorIyBhcyBpdCBjb3VsZCBwb3Nz aWJseSBvdmVyZmxvdyBvdXIgc2l6ZSB0eXBlIChDVkUtMjAyNi02MzA5MSkKKyVwYXRjaCAtUCAx MjMgLXAxCisKICVpZiAle3VzZV9zeXN0ZW1kfQogIyBUd2VhayBsb2dyb3RhdGUgc2NyaXB0IGZv ciBzeXN0ZW1kIGNvbXBhdGliaWxpdHkgKCM4MDIxNzgpCiBzZWQgLWkgLWUgJy9raWxsYWxsL3Mv dGVzdC4qL3N5c3RlbWN0bCByZWxvYWQgcHJvZnRwZC5zZXJ2aWNlLycgXApAQCAtNjc4LDYgKzY4 Myw4IEBAIGZpCiAgIChodHRwczovL2dpdGh1Yi5jb20vcHJvZnRwZC9wcm9mdHBkL2lzc3Vlcy8y MDUyI2lzc3VlY29tbWVudC00NDg5MTEwNTk4KQogLSBGaXggU0ZUUCByZXF1ZXN0IHBheWxvYWQg bGVuZ3RoIHVuZGVyZmxvdyBjYWxjdWxhdGlvbiBpbiBtb2Rfc2Z0cAogICAoQ1ZFLTIwMjYtNTM5 OTQsIGh0dHBzOi8vZ2l0aHViLmNvbS9wcm9mdHBkL3Byb2Z0cGQvaXNzdWVzLzIxMTUpCistIEV4 ZXJjaXNlIGNhdXRpb24gd2hlbiByZWFkaW5nIHRoZSBjbGllbnQtcHJvdmlkZWQgZmlsZSBzaXpl IGZvciBTQ1AgdXBsb2FkcywKKyAgYXMgaXQgY291bGQgcG9zc2libHkgb3ZlcmZsb3cgb3VyIHNp emUgdHlwZSAoQ1ZFLTIwMjYtNjMwOTEpCiAKICogTW9uIE1heSAxMSAyMDI2IFBhdWwgSG93YXJ0 aCA8cGF1bEBjaXR5LWZhbi5vcmc+IC0gMS4zLjZlLTEwCiAtIEZpeCBmb3IgU1FMIEluamVjdGlv biBpbiBtb2Rfd3JhcDJfc3FsIHZpYSByZXZlcnNlIEROUyBob3N0bmFtZQo=