From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Paul Howarth To: git-commits@fedoraproject.org Subject: [rpms/proftpd] epel8: Fix heap buffer overflow via SFTP packet reassembly (CVE-2026-63090) Date: Tue, 28 Jul 2026 18:05:58 GMT Message-ID: <178526195880.1.184779850156719678.rpms-proftpd-83099d06da02@fedoraproject.org> List-ID: X-Git-Repo: rpms/proftpd X-Git-Branch: epel8 X-Git-Rev: 83099d06da02a86af9c589ed4542321d58e773b3 ICAgICAgICAgICAgQSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KCiAgICAgICAgICAgIFJl cG8gICA6IHJwbXMvcHJvZnRwZAogICAgICAgICAgICBCcmFuY2ggOiBlcGVsOAogICAgICAgICAg ICBDb21taXQgOiA4MzA5OWQwNmRhMDJhODZhZjljNTg5ZWQ0NTQyMzIxZDU4ZTc3M2IzCiAgICAg ICAgICAgIEF1dGhvciA6IFBhdWwgSG93YXJ0aCA8cGF1bEBjaXR5LWZhbi5vcmc+CiAgICAgICAg ICAgIERhdGUgICA6IDIwMjYtMDctMjdUMTY6NDk6MTQrMDE6MDAKICAgICAgICAgICAgU3RhdHMg IDogKzg4Ly0wIGluIDIgZmlsZShzKQogICAgICAgICAgICBVUkwgICAgOiBodHRwczovL3NyYy5m ZWRvcmFwcm9qZWN0Lm9yZy9ycG1zL3Byb2Z0cGQvYy84MzA5OWQwNmRhMDJhODZhZjljNTg5ZWQ0 NTQyMzIxZDU4ZTc3M2IzP2JyYW5jaD1lcGVsOAoKICAgICAgICAgICAgTG9nOgogICAgICAgICAg ICBGaXggaGVhcCBidWZmZXIgb3ZlcmZsb3cgdmlhIFNGVFAgcGFja2V0IHJlYXNzZW1ibHkgKENW RS0yMDI2LTYzMDkwKQoKaHR0cHM6Ly9naXRodWIuY29tL3Byb2Z0cGQvcHJvZnRwZC9pc3N1ZXMv MjE5MAoKLS0tCmRpZmYgLS1naXQgYS9tb2Rfc2Z0cC0xLjMuOGQtaXNzdWUyMTkwLnBhdGNoIGIv bW9kX3NmdHAtMS4zLjhkLWlzc3VlMjE5MC5wYXRjaApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRl eCAwMDAwMDAwLi5jMmI5MTQ1Ci0tLSAvZGV2L251bGwKKysrIGIvbW9kX3NmdHAtMS4zLjhkLWlz c3VlMjE5MC5wYXRjaApAQCAtMCwwICsxLDgxIEBACitkaWZmIC0tZ2l0IGEvY29udHJpYi9tb2Rf c2Z0cC9meHAuYyBiL2NvbnRyaWIvbW9kX3NmdHAvZnhwLmMKK2luZGV4IGQ2MWU3MTA0Ni4uYTc2 MzFlYWE0IDEwMDY0NAorLS0tIGEvY29udHJpYi9tb2Rfc2Z0cC9meHAuYworKysrIGIvY29udHJp Yi9tb2Rfc2Z0cC9meHAuYworQEAgLTI2NCwxMSArMjY0LDExIEBAIHN0cnVjdCBmeHBfYnVmZmVy IHsKKyAjZGVmaW5lCUZYUF9QQUNLRVRfSEFWRV9QQVlMT0FEX1NJWkUJMHgwMDA4CisgI2RlZmlu ZQlGWFBfUEFDS0VUX0hBVkVfUEFZTE9BRAkJMHgwMDEwCisgCistLyogQWZ0ZXIgMzJLIG9mIGFs bG9jYXRpb24gZnJvbSB0aGUgc2NyYXRjaCBTRlRQIHBheWxvYWQgcG9vbCwgZGVzdHJveSB0aGUK KysvKiBBZnRlciA2NEsgb2YgYWxsb2NhdGlvbiBmcm9tIHRoZSBzY3JhdGNoIFNGVFAgcGF5bG9h ZCBwb29sLCBkZXN0cm95IHRoZQorICAqIHBvb2wgYW5kIGNyZWF0ZSBhIG5ldyBvbmUuICBUaGlz IHdpbGwgcHJldmVudCB1bmJvdW5kZWQgYWxsb2NhdGlvbgorICAqIGZyb20gdGhlIHBvb2wuCisg ICovCistI2RlZmluZSBGWFBfUEFDS0VUX0RBVEFfQUxMT0NfTUFYX1NaCQkoMTAyNCAqIDMyKQor KyNkZWZpbmUgRlhQX1BBQ0tFVF9EQVRBX0FMTE9DX01BWF9TWgkJKDEwMjQgKiA2NCkKKyBzdGF0 aWMgc2l6ZV90IGZ4cF9wYWNrZXRfZGF0YV9hbGxvY3N6ID0gMDsKKyAKKyAjZGVmaW5lIEZYUF9Q QUNLRVRfREFUQV9ERUZBVUxUX1NaCQkoMTAyNCAqIDE2KQorQEAgLTMyODgsMzcgKzMyODgsNDUg QEAgc3RhdGljIHZvaWQgZnhwX3BhY2tldF9hZGRfY2FjaGUodW5zaWduZWQgY2hhciAqZGF0YSwg dWludDMyX3QgZGF0YWxlbikgeworIAorICAgICB9IGVsc2UgeworICAgICAgIC8qIFdlIG5lZWQg YSBsYXJnZXIgYnVmZmVyLiAgUm91bmQgdXAgdG8gdGhlIG5lYXJlc3QgMUsgc2l6ZS4gKi8KKysg ICAgICBwb29sICp0bXBfcG9vbDsKKysgICAgICBjaGFyICpjYWNoZWRfZGF0YTsKKysgICAgICB1 aW50MzJfdCBjYWNoZWRfZGF0YWxlbjsKKyAgICAgICBzaXplX3Qgc3o7CisgCistICAgICAgc3og PSBzZnRwX2NyeXB0b19nZXRfc2l6ZShjdXJyX2J1ZmxlbiArIGRhdGFsZW4gKyAxLCAxMDI0KTsK KysgICAgICBpZiAoY3Vycl9idWZsZW4gKyBkYXRhbGVuID4gRlhQX01BWF9QQUNLRVRfTEVOKSB7 CisrICAgICAgICAodm9pZCkgcHJfbG9nX3dyaXRlZmlsZShzZnRwX2xvZ2ZkLCBNT0RfU0ZUUF9W RVJTSU9OLAorKyAgICAgICAgICAicmVjZWl2ZWQgZXhjZXNzaXZlIFNGVFAgZGF0YSAobGVuICVs dSA+IG1heCAlbHUgYnl0ZXMpLCByZWplY3RpbmciLAorKyAgICAgICAgICAodW5zaWduZWQgbG9u ZykgY3Vycl9idWZsZW4gKyBkYXRhbGVuLAorKyAgICAgICAgICAodW5zaWduZWQgbG9uZykgRlhQ X01BWF9QQUNLRVRfTEVOKTsKKysgICAgICAgIFNGVFBfRElTQ09OTkVDVF9DT05OKFNGVFBfU1NI Ml9ESVNDT05ORUNUX0JZX0FQUExJQ0FUSU9OLCBOVUxMKTsKKysgICAgICB9CisgCistICAgICAg aWYgKGZ4cF9wYWNrZXRfZGF0YV9hbGxvY3N6ID4gRlhQX1BBQ0tFVF9EQVRBX0FMTE9DX01BWF9T WikgeworLSAgICAgICAgcG9vbCAqdG1wX3Bvb2w7CistICAgICAgICBjaGFyICp0bXBfZGF0YTsK Ky0gICAgICAgIHVpbnQzMl90IHRtcF9kYXRhbGVuOworKyAgICAgIC8qIEdldCB0aGUgZXhpc3Rp bmcgY2FjaGVkIGRhdGEgYmVmb3JlIGFsbG9jYXRpbmcgYSBsYXJnZXIgYnVmZmVyLiAqLworKyAg ICAgIHRtcF9wb29sID0gbWFrZV9zdWJfcG9vbChmeHBfcG9vbCk7CisrCisrICAgICAgY2FjaGVk X2RhdGFsZW4gPSBjdXJyX2J1ZmxlbjsKKysgICAgICBjYWNoZWRfZGF0YSA9IHBhbGxvYyh0bXBf cG9vbCwgY2FjaGVkX2RhdGFsZW4pOworKyAgICAgIG1lbWNweShjYWNoZWRfZGF0YSwgY3Vycl9i dWYsIGNhY2hlZF9kYXRhbGVuKTsKKyAKKysgICAgICBpZiAoZnhwX3BhY2tldF9kYXRhX2FsbG9j c3ogPiBGWFBfUEFDS0VUX0RBVEFfQUxMT0NfTUFYX1NaKSB7CisgICAgICAgICAodm9pZCkgcHJf bG9nX3dyaXRlZmlsZShzZnRwX2xvZ2ZkLCBNT0RfU0ZUUF9WRVJTSU9OLAorICAgICAgICAgICAi cmVuZXdpbmcgU0ZUUCBwYWNrZXQgZGF0YSBwb29sIik7CisgCistICAgICAgICB0bXBfcG9vbCA9 IG1ha2Vfc3ViX3Bvb2woZnhwX3Bvb2wpOworLSAgICAgICAgdG1wX2RhdGFsZW4gPSBjdXJyX2J1 ZmxlbjsKKy0gICAgICAgIHRtcF9kYXRhID0gcGFsbG9jKHRtcF9wb29sLCB0bXBfZGF0YWxlbik7 ICAgICAgICAgICAgICAgIAorLSAgICAgICAgbWVtY3B5KHRtcF9kYXRhLCBjdXJyX2J1ZiwgdG1w X2RhdGFsZW4pOworLSAgICAgICAgCisgICAgICAgICBkZXN0cm95X3Bvb2woY3Vycl9idWZfcG9v bCk7CisgCisgICAgICAgICBjdXJyX2J1Zl9wb29sID0gbWFrZV9zdWJfcG9vbChmeHBfcG9vbCk7 CisgICAgICAgICBwcl9wb29sX3RhZyhjdXJyX2J1Zl9wb29sLCAiU0ZUUCBwYWNrZXQgYnVmZmVy IHBvb2wiKTsKKysgICAgICB9CisgCistICAgICAgICBjdXJyX2J1ZnN6ID0gc3o7CistICAgICAg ICBjdXJyX2J1ZiA9IHBhbGxvYyhjdXJyX2J1Zl9wb29sLCBjdXJyX2J1ZnN6KTsKKy0gICAgICAg IGZ4cF9wYWNrZXRfZGF0YV9hbGxvY3N6ICs9IHN6OworKyAgICAgIHN6ID0gc2Z0cF9jcnlwdG9f Z2V0X3NpemUoY3Vycl9idWZsZW4gKyBkYXRhbGVuICsgMSwgMTAyNCk7CisrICAgICAgY3Vycl9i dWZzeiA9IHN6OworKyAgICAgIGN1cnJfYnVmID0gcGFsbG9jKGN1cnJfYnVmX3Bvb2wsIGN1cnJf YnVmc3opOworKyAgICAgIGZ4cF9wYWNrZXRfZGF0YV9hbGxvY3N6ICs9IHN6OworIAorLSAgICAg ICAgbWVtY3B5KGN1cnJfYnVmLCB0bXBfZGF0YSwgdG1wX2RhdGFsZW4pOworLSAgICAgICAgY3Vy cl9idWZsZW4gPSB0bXBfZGF0YWxlbjsKKysgICAgICBtZW1jcHkoY3Vycl9idWYsIGNhY2hlZF9k YXRhLCBjYWNoZWRfZGF0YWxlbik7CisrICAgICAgY3Vycl9idWZsZW4gPSBjYWNoZWRfZGF0YWxl bjsKKyAKKy0gICAgICAgIGRlc3Ryb3lfcG9vbCh0bXBfcG9vbCk7CistICAgICAgfQorKyAgICAg IGRlc3Ryb3lfcG9vbCh0bXBfcG9vbCk7CisgICAgIH0KKyAKKyAgICAgLyogQXBwZW5kIHRoZSBT U0gyIGRhdGEgdG8gdGhlIGN1cnJlbnQgdW5jb25zdW1lZCBidWZmZXIuCgpkaWZmIC0tZ2l0IGEv cHJvZnRwZC5zcGVjIGIvcHJvZnRwZC5zcGVjCmluZGV4IDkwYzdiZjMuLjZiNDYyZTMgMTAwNjQ0 Ci0tLSBhL3Byb2Z0cGQuc3BlYworKysgYi9wcm9mdHBkLnNwZWMKQEAgLTEwOSw2ICsxMDksNyBA QCBQYXRjaDEyMDoJCWh0dHBzOi8vZ2l0aHViLmNvbS9wcm9mdHBkL3Byb2Z0cGQvY29tbWl0LzVl MDZhY2M0LnBhdGNoCiBQYXRjaDEyMToJCWh0dHBzOi8vZ2l0aHViLmNvbS9wcm9mdHBkL3Byb2Z0 cGQvY29tbWl0LzFhNWNlNjQ2LnBhdGNoCiBQYXRjaDEyMjoJCWh0dHBzOi8vZ2l0aHViLmNvbS91 c2VyLWF0dGFjaG1lbnRzL2ZpbGVzLzMwMjA1NDEwL21vZF9zZnRwLTEuMy44ZC1pc3N1ZTIxMTUu cGF0Y2gKIFBhdGNoMTIzOgkJaHR0cHM6Ly9naXRodWIuY29tL3Byb2Z0cGQvcHJvZnRwZC9jb21t aXQvYmFmNGI3OTIucGF0Y2gKK1BhdGNoMTI0OgkJaHR0cHM6Ly9naXRodWIuY29tL3VzZXItYXR0 YWNobWVudHMvZmlsZXMvMzAyMDU1NDEvbW9kX3NmdHAtMS4zLjhkLWlzc3VlMjE5MC5wYXRjaAog CiBCdWlsZFJlcXVpcmVzOgkJY29yZXV0aWxzCiBCdWlsZFJlcXVpcmVzOgkJZ2NjCkBAIC0zOTYs NiArMzk3LDEwIEBAIHNlZCAtaSAtZSAnL15bWzpzcGFjZTpdXSpUTFNDaXBoZXJTdWl0ZVtbOnNw YWNlOl1dKlBST0ZJTEU9U1lTVEVNJC9kJyBtb2RfdGxzLmNvCiAjIGFzIGl0IGNvdWxkIHBvc3Np Ymx5IG92ZXJmbG93IG91ciBzaXplIHR5cGUgKENWRS0yMDI2LTYzMDkxKQogJXBhdGNoIC1QIDEy MyAtcDEKIAorIyBBdXRoZW50aWNhdGVkIFNGVFAgc2Vzc2lvbnMgY2FuIG92ZXJmbG93IHRoZSBT RlRQIHBhY2tldCBidWZmZXIKKyMgaHR0cHM6Ly9naXRodWIuY29tL3Byb2Z0cGQvcHJvZnRwZC9p c3N1ZXMvMjE5MCAoQ1ZFLTIwMjYtNjMwOTApCislcGF0Y2ggLVAgMTI0IC1wMQorCiAlaWYgJXt1 c2Vfc3lzdGVtZH0KICMgVHdlYWsgbG9ncm90YXRlIHNjcmlwdCBmb3Igc3lzdGVtZCBjb21wYXRp YmlsaXR5ICgjODAyMTc4KQogc2VkIC1pIC1lICcva2lsbGFsbC9zL3Rlc3QuKi9zeXN0ZW1jdGwg cmVsb2FkIHByb2Z0cGQuc2VydmljZS8nIFwKQEAgLTY4NSw2ICs2OTAsOCBAQCBmaQogICAoQ1ZF LTIwMjYtNTM5OTQsIGh0dHBzOi8vZ2l0aHViLmNvbS9wcm9mdHBkL3Byb2Z0cGQvaXNzdWVzLzIx MTUpCiAtIEV4ZXJjaXNlIGNhdXRpb24gd2hlbiByZWFkaW5nIHRoZSBjbGllbnQtcHJvdmlkZWQg ZmlsZSBzaXplIGZvciBTQ1AgdXBsb2FkcywKICAgYXMgaXQgY291bGQgcG9zc2libHkgb3ZlcmZs b3cgb3VyIHNpemUgdHlwZSAoQ1ZFLTIwMjYtNjMwOTEpCistIEF1dGhlbnRpY2F0ZWQgU0ZUUCBz ZXNzaW9ucyBjb3VsZCBvdmVyZmxvdyB0aGUgU0ZUUCBwYWNrZXQgYnVmZmVyCisgIChDVkUtMjAy Ni02MzA5MCwgaHR0cHM6Ly9naXRodWIuY29tL3Byb2Z0cGQvcHJvZnRwZC9pc3N1ZXMvMjE5MCkK IAogKiBNb24gTWF5IDExIDIwMjYgUGF1bCBIb3dhcnRoIDxwYXVsQGNpdHktZmFuLm9yZz4gLSAx LjMuNmUtMTAKIC0gRml4IGZvciBTUUwgSW5qZWN0aW9uIGluIG1vZF93cmFwMl9zcWwgdmlhIHJl dmVyc2UgRE5TIGhvc3RuYW1lCg==