From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Steve Cossette To: git-commits@fedoraproject.org Subject: [rpms/plasma-workspace] epel10: Fix for a sandbox escape flaw Date: Thu, 30 Jul 2026 16:12:46 GMT Message-ID: <178542796687.1.2918225803759622666.rpms-plasma-workspace-227c81ad6c57@fedoraproject.org> List-ID: X-Git-Repo: rpms/plasma-workspace X-Git-Branch: epel10 X-Git-Rev: 227c81ad6c57048aa76c4c524881b1b352509b28 QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvcGxhc21hLXdvcmtz cGFjZQpCcmFuY2ggOiBlcGVsMTAKQ29tbWl0IDogMjI3YzgxYWQ2YzU3MDQ4YWE3NmM0YzUyNDg4 MWIxYjM1MjUwOWIyOApBdXRob3IgOiBTdGV2ZSBDb3NzZXR0ZSA8ZmFyY2hvcmRAZ21haWwuY29t PgpEYXRlICAgOiAyMDI2LTA3LTA0VDA3OjQ1OjM0LTA0OjAwClN0YXRzICA6ICs4NC8tMSBpbiAy IGZpbGUocykKVVJMICAgIDogaHR0cHM6Ly9zcmMuZmVkb3JhcHJvamVjdC5vcmcvcnBtcy9wbGFz bWEtd29ya3NwYWNlL2MvMjI3YzgxYWQ2YzU3MDQ4YWE3NmM0YzUyNDg4MWIxYjM1MjUwOWIyOD9i cmFuY2g9ZXBlbDEwCgpMb2c6CkZpeCBmb3IgYSBzYW5kYm94IGVzY2FwZSBmbGF3CgotLS0KZGlm ZiAtLWdpdCBhLzY4MTkucGF0Y2ggYi82ODE5LnBhdGNoCm5ldyBmaWxlIG1vZGUgMTAwNjQ0Cmlu ZGV4IDAwMDAwMDAuLjFmMDljNjUKLS0tIC9kZXYvbnVsbAorKysgYi82ODE5LnBhdGNoCkBAIC0w LDAgKzEsODAgQEAKK0Zyb20gODNhNDM5ZjBiYzYxODExZTQ1MGJjMDBlZDI4ZDFiOTY0YTFlMTkw MSBNb24gU2VwIDE3IDAwOjAwOjAwIDIwMDEKK0Zyb206IERhdmlkIEVkbXVuZHNvbiA8a2RlQGRh dmlkZWRtdW5kc29uLmNvLnVrPgorRGF0ZTogRnJpLCAzIEp1bCAyMDI2IDExOjI5OjU5ICswMDAw CitTdWJqZWN0OiBbUEFUQ0hdIGxpYnRhc2ttYW5hZ2VyOiBMaW1pdCBsYXVuY2hpbmcgbmV3IGlu c3RhbmNlcyB3aGVyZSBzZXJ2aWNlCisgZmlsZXMgZG8gbm90IGV4aXN0CisKK0xpYnRhc2ttYW5h Z2VyIGlzIGZ1bGwgb2YgbGVnYWN5IGNvZGUgdG8gaGFuZGxlIGFwcGxpY2F0aW9ucyBub3QKK3By b3ZpZGluZyBhcHBsaWNhdGlvbiBJRHMgYW5kIGhhdmluZyB3b3JrYXJvdW5kcyBmb3IgdGhlbS4K KworVGhpcyBpbmNsdWRlcyBwcm92aWRpbmcgYSAiT3BlbiBhIE5ldyBXaW5kb3ciIGVudHJ5IGZv ciBtb3N0CithcHBsaWNhdGlvbnMgdW5sZXNzIGV4cGxpY2l0bHkgaW5oaWJpdGVkLiBXaGVyZSBh IG1hdGNoaW5nIC5kZXNrdG9wIGlzCitmb3VuZCB0aGUgRXhlYyBsaW5lIGZyb20gdGhlcmUgaXMg dXNlZCBvdGhlcndpc2UgdGhlcmUgaXMgYSBmYWxsYmFjayB0bworbGF1bmNoIHRoZSBzYW1lIGJp bmFyeSBhZ2Fpbi4KKworVGhpcyBsYXR0ZXIgZmFsbGJhY2sgaXMgbm90IHZlcnkgc2FuZGJveCBh d2FyZSBhbmQgY291bGQgYmUgZXhwbG9pdGVkIHRvCitsYXVuY2ggYSBkaWZmZXJlbnQgYmluYXJ5 IG9uIHRoZSBob3N0LiBJdCdzIG5vdCBlc3BlY2lhbGx5IGV4cGxvaXRhYmxlLAoraXQgcmVsaWVz IG9uIHRoZSB1c2VyIGNsaWNraW5nIGFuIGFjdGlvbiwgYnV0IHdlIHNob3VsZCBjbG9zZSBpdCBh bnl3YXkuCisKKworKGNoZXJyeSBwaWNrZWQgZnJvbSBjb21taXQgN2ZmMjA5ZmExNTExZGY2MTYx NDY2ZDA1NmQwYThkNjM5MzBjMmI2NikKKworQ28tYXV0aG9yZWQtYnk6IERhdmlkIEVkbXVuZHNv biA8a2RlQGRhdmlkZWRtdW5kc29uLmNvLnVrPgorLS0tCisgbGlidGFza21hbmFnZXIvdGFza3Rv b2xzLmNwcCB8IDI2ICsrKysrKysrKysrKysrKy0tLS0tLS0tLS0tCisgMSBmaWxlIGNoYW5nZWQs IDE1IGluc2VydGlvbnMoKyksIDExIGRlbGV0aW9ucygtKQorCitkaWZmIC0tZ2l0IGEvbGlidGFz a21hbmFnZXIvdGFza3Rvb2xzLmNwcCBiL2xpYnRhc2ttYW5hZ2VyL3Rhc2t0b29scy5jcHAKK2lu ZGV4IDYyNjgwYmMyNjMuLjU3Y2E4YzRmZTQgMTAwNjQ0CistLS0gYS9saWJ0YXNrbWFuYWdlci90 YXNrdG9vbHMuY3BwCisrKysgYi9saWJ0YXNrbWFuYWdlci90YXNrdG9vbHMuY3BwCitAQCAtNjMx LDE1ICs2MzEsNiBAQCB2b2lkIHJ1bkFwcChjb25zdCBBcHBEYXRhICZhcHBEYXRhLCBjb25zdCBR TGlzdDxRVXJsPiAmdXJscykKKyAgICAgICAgICAgICBqb2ItPnN0YXJ0KCk7CisgCisgICAgICAg ICAgICAgS0FjdGl2aXRpZXM6OlJlc291cmNlSW5zdGFuY2U6Om5vdGlmeUFjY2Vzc2VkKFFVcmwo UVN0cmluZyh1ImFwcGxpY2F0aW9uczoiICsgc2VydmljZS0+c3RvcmFnZUlkKCkpKSwgUVN0cmlu Z0xpdGVyYWwoIm9yZy5rZGUubGlidGFza21hbmFnZXIiKSk7CistICAgICAgICB9IGVsc2Ugewor LSAgICAgICAgICAgIGF1dG8gKmpvYiA9IG5ldyBLSU86Ok9wZW5VcmxKb2IoYXBwRGF0YS51cmwp OworLSAgICAgICAgICAgIGpvYi0+c2V0VWlEZWxlZ2F0ZShuZXcgS05vdGlmaWNhdGlvbkpvYlVp RGVsZWdhdGUoS0pvYlVpRGVsZWdhdGU6OkF1dG9FcnJvckhhbmRsaW5nRW5hYmxlZCkpOworLSAg ICAgICAgICAgIGpvYi0+c2V0UnVuRXhlY3V0YWJsZXModHJ1ZSk7CistICAgICAgICAgICAgam9i LT5zdGFydCgpOworLQorLSAgICAgICAgICAgIGlmICghYXBwRGF0YS5pZC5pc0VtcHR5KCkpIHsK Ky0gICAgICAgICAgICAgICAgS0FjdGl2aXRpZXM6OlJlc291cmNlSW5zdGFuY2U6Om5vdGlmeUFj Y2Vzc2VkKFFVcmwoUVN0cmluZyh1ImFwcGxpY2F0aW9uczoiICsgYXBwRGF0YS5pZCkpLCBRU3Ry aW5nTGl0ZXJhbCgib3JnLmtkZS5saWJ0YXNrbWFuYWdlciIpKTsKKy0gICAgICAgICAgICB9Cisg ICAgICAgICB9CisgICAgIH0KKyB9CitAQCAtNjU3LDcgKzY0OCwyMSBAQCBib29sIGNhbkxhdWNo TmV3SW5zdGFuY2UoY29uc3QgQXBwRGF0YSAmYXBwRGF0YSkKKyAgICAgICAgIGRlc2t0b3BFbnRy eS5jaG9wKDgpOworICAgICB9CisgCistICAgIGNvbnN0IEtTZXJ2aWNlOjpQdHIgc2VydmljZSA9 IEtTZXJ2aWNlOjpzZXJ2aWNlQnlEZXNrdG9wTmFtZShkZXNrdG9wRW50cnkpOworKyAgICBLU2Vy dmljZTo6UHRyIHNlcnZpY2U7CisrCisrICAgIC8vIGFwcGxpY2F0aW9uczogVVJMcyBhcmUgdXNl ZCB0byByZWZlciB0byBhcHBsaWNhdGlvbnMgYnkgdGhlaXIgS1NlcnZpY2U6Om1lbnVJZAorKyAg ICAvLyAoaS5lLiAuZGVza3RvcCBmaWxlIG5hbWUpIHJhdGhlciB0aGFuIHRoZSBhYnNvbHV0ZSBw YXRoIHRvIGEgLmRlc2t0b3AgZmlsZS4KKysgICAgaWYgKGFwcERhdGEudXJsLnNjaGVtZSgpID09 IFFMYXRpbjFTdHJpbmcoImFwcGxpY2F0aW9ucyIpKSB7CisrICAgICAgICBzZXJ2aWNlID0gS1Nl cnZpY2U6OnNlcnZpY2VCeU1lbnVJZChhcHBEYXRhLnVybC5wYXRoKCkpOworKyAgICB9IGVsc2Ug aWYgKGFwcERhdGEudXJsLnNjaGVtZSgpID09IFFMYXRpbjFTdHJpbmcoInByZWZlcnJlZCIpKSB7 CisrICAgICAgICBzZXJ2aWNlID0gS1NlcnZpY2U6OnNlcnZpY2VCeVN0b3JhZ2VJZChkZWZhdWx0 QXBwbGljYXRpb24oYXBwRGF0YS51cmwpKTsKKysgICAgfSBlbHNlIHsKKysgICAgICAgIHNlcnZp Y2UgPSBLU2VydmljZTo6c2VydmljZUJ5RGVza3RvcFBhdGgoYXBwRGF0YS51cmwudG9Mb2NhbEZp bGUoKSk7CisrICAgIH0KKysKKysgICAgaWYgKCFzZXJ2aWNlKSB7CisrICAgICAgICByZXR1cm4g ZmFsc2U7CisrICAgIH0KKyAKKyAgICAgaWYgKHNlcnZpY2UpIHsKKyAgICAgICAgIGlmIChzZXJ2 aWNlLT5ub0Rpc3BsYXkoKSkgeworQEAgLTY4Niw3ICs2OTEsNiBAQCBib29sIGNhbkxhdWNoTmV3 SW5zdGFuY2UoY29uc3QgQXBwRGF0YSAmYXBwRGF0YSkKKyAgICAgICAgICAgICB9CisgICAgICAg ICB9CisgICAgIH0KKy0KKyAgICAgcmV0dXJuIHRydWU7CisgfQorIH0KKy0tIAorR2l0TGFiCisK CmRpZmYgLS1naXQgYS9wbGFzbWEtd29ya3NwYWNlLnNwZWMgYi9wbGFzbWEtd29ya3NwYWNlLnNw ZWMKaW5kZXggMzFkNGExOS4uNDU4ZWRhMCAxMDA2NDQKLS0tIGEvcGxhc21hLXdvcmtzcGFjZS5z cGVjCisrKyBiL3BsYXNtYS13b3Jrc3BhY2Uuc3BlYwpAQCAtMyw3ICszLDcgQEAKIE5hbWU6ICAg IHBsYXNtYS13b3Jrc3BhY2UKIFN1bW1hcnk6IFBsYXNtYSB3b3Jrc3BhY2UsIGFwcGxpY2F0aW9u cyBhbmQgYXBwbGV0cwogVmVyc2lvbjogNi43LjIKLVJlbGVhc2U6IDElez9kaXN0fQorUmVsZWFz ZTogMiV7P2Rpc3R9CiAKICMgQXV0b21hdGljYWxseSBjb252ZXJ0ZWQgZnJvbSBvbGQgZm9ybWF0 OiBCU0QtMi1DbGF1c2UgQU5EIEJTRC0zLUNsYXVzZSBBTkQgQ0MwLTEuMCBBTkQgR1BMLTIuMC1v bmx5IEFORCBHUEwtMi4wLW9yLWxhdGVyIEFORCBHUEwtMy4wLW9ubHkgQU5EIExHUEwtMi4wLW9u bHkgQU5EIExHUEwtMi4wLW9yLWxhdGVyIEFORCBMR1BMLTIuMS1vbmx5IEFORCBMR1BMLTIuMS1v ci1sYXRlciBBTkQgTEdQTC0zLjAtb25seSBBTkQgTEdQTC0zLjAtb3ItbGF0ZXIgQU5EIChHUEwt Mi4wLW9ubHkgT1IgR1BMLTMuMC1vbmx5KSBBTkQgKExHUEwtMi4xLW9ubHkgT1IgTEdQTC0zLjAt b25seSkgQU5EIE1JVCAtIHJldmlldyBpcyBoaWdobHkgcmVjb21tZW5kZWQuCiBMaWNlbnNlOiBC U0QtMi1DbGF1c2UgQU5EIEJTRC0zLUNsYXVzZSBBTkQgQ0MwLTEuMCBBTkQgR1BMLTIuMC1vbmx5 IEFORCBHUEwtMi4wLW9yLWxhdGVyIEFORCBHUEwtMy4wLW9ubHkgQU5EIExHUEwtMi4wLW9ubHkg QU5EIExHUEwtMi4wLW9yLWxhdGVyIEFORCBMR1BMLTIuMS1vbmx5IEFORCBMR1BMLTIuMS1vci1s YXRlciBBTkQgTEdQTC0zLjAtb25seSBBTkQgTEdQTC0zLjAtb3ItbGF0ZXIgQU5EIChHUEwtMi4w LW9ubHkgT1IgR1BMLTMuMC1vbmx5KSBBTkQgKExHUEwtMi4xLW9ubHkgT1IgTEdQTC0zLjAtb25s eSkgQU5EIE1JVApAQCAtNjYzLDYgKzY2Myw5IEBAIGZpCiAKIAogJWNoYW5nZWxvZworKiBTYXQg SnVsIDA0IDIwMjYgU3RldmUgQ29zc2V0dGUgPGZhcmNob3JkQGdtYWlsLmNvbT4gLSA2LjcuMi0y CistIEZpeCBhbiBpc3N1ZSBmb3IgYSBzYW5kYm94IGVzY2FwZSB2dWxuCisKICogV2VkIEp1bCAw MSAyMDI2IFN0ZXZlIENvc3NldHRlIDxmYXJjaG9yZEBnbWFpbC5jb20+IC0gNi43LjItMQogLSA2 LjcuMgogCg==