From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Jan Macku To: git-commits@fedoraproject.org Subject: [rpms/curl] f44: Resolves: CVE-2026-8924 - trailing dot domain super cookie Date: Fri, 31 Jul 2026 10:22:16 GMT Message-ID: <178549333654.1.1744650055250470356.rpms-curl-ada9d32d775f@fedoraproject.org> List-ID: X-Git-Repo: rpms/curl X-Git-Branch: f44 X-Git-Rev: ada9d32d775f9cd1496b108caad210a7f183d23c QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvY3VybApCcmFuY2gg OiBmNDQKQ29tbWl0IDogYWRhOWQzMmQ3NzVmOWNkMTQ5NmIxMDhjYWFkMjEwYTdmMTgzZDIzYwpB dXRob3IgOiBKYW4gTWFja3UgPGphbWFja3VAcmVkaGF0LmNvbT4KRGF0ZSAgIDogMjAyNi0wNy0y OVQxMzowOToyNyswMjowMApTdGF0cyAgOiArMTI2Ly0xIGluIDIgZmlsZShzKQpVUkwgICAgOiBo dHRwczovL3NyYy5mZWRvcmFwcm9qZWN0Lm9yZy9ycG1zL2N1cmwvYy9hZGE5ZDMyZDc3NWY5Y2Qx NDk2YjEwOGNhYWQyMTBhN2YxODNkMjNjP2JyYW5jaD1mNDQKCkxvZzoKUmVzb2x2ZXM6IENWRS0y MDI2LTg5MjQgLSB0cmFpbGluZyBkb3QgZG9tYWluIHN1cGVyIGNvb2tpZQoKLS0tCmRpZmYgLS1n aXQgYS8wMDA3LWN1cmwtOC4xOC4wLUNWRS0yMDI2LTg5MjQucGF0Y2ggYi8wMDA3LWN1cmwtOC4x OC4wLUNWRS0yMDI2LTg5MjQucGF0Y2gKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXggMDAwMDAw MC4uODZiMDZiNAotLS0gL2Rldi9udWxsCisrKyBiLzAwMDctY3VybC04LjE4LjAtQ1ZFLTIwMjYt ODkyNC5wYXRjaApAQCAtMCwwICsxLDExOSBAQAorRnJvbSA2MDZlNDA2NTZjMzdlMDk4Y2VhZDIx NjcwY2UxMzc1ZjBlMGVmMTI5IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQorRnJvbTogRGFuaWVs IFN0ZW5iZXJnIDxkYW5pZWxAaGF4eC5zZT4KK0RhdGU6IFNhdCwgMTYgTWF5IDIwMjYgMDA6MTk6 MDkgKzAyMDAKK1N1YmplY3Q6IFtQQVRDSCAxLzJdIGNvb2tpZTogdHJpbSB0cmFpbGluZyBkb3Rz IHdoZW4gY2hlY2tpbmcgUFNMCisKK1ZlcmlmaWVkIHdpdGggdGVzdCAxNjI5CisKK0Nsb3NlcyAj MjE2MzYKKworKGNoZXJyeSBwaWNrZWQgZnJvbSBjb21taXQgNTFiZWVkMTc1ZGJmYzM3ZGEzMTEz ZjZhY2NlNjBjNjMwYzA3MGNlOCkKKy0tLQorIGxpYi9jb29raWUuYyAgICAgICAgICAgfCAxMyAr KysrKysrKystLQorIHRlc3RzL2RhdGEvTWFrZWZpbGUuYW0gfCAgMSArCisgdGVzdHMvZGF0YS90 ZXN0MTYyOSAgICB8IDUzICsrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysr KworIDMgZmlsZXMgY2hhbmdlZCwgNjUgaW5zZXJ0aW9ucygrKSwgMiBkZWxldGlvbnMoLSkKKyBj cmVhdGUgbW9kZSAxMDA2NDQgdGVzdHMvZGF0YS90ZXN0MTYyOQorCitkaWZmIC0tZ2l0IGEvbGli L2Nvb2tpZS5jIGIvbGliL2Nvb2tpZS5jCitpbmRleCBjODA3MjIyOGI5Li4zOGVkZjRhODYwIDEw MDY0NAorLS0tIGEvbGliL2Nvb2tpZS5jCisrKysgYi9saWIvY29va2llLmMKK0BAIC03OTAsMTIg Kzc5MCwyMSBAQCBzdGF0aWMgYm9vbCBpc19wdWJsaWNfc3VmZml4KHN0cnVjdCBDdXJsX2Vhc3kg KmRhdGEsCisgICAgIGNoYXIgbGNvb2tpZVsyNTZdOworICAgICBzaXplX3QgZGxlbiA9IHN0cmxl bihkb21haW4pOworICAgICBzaXplX3QgY2xlbiA9IHN0cmxlbihjby0+ZG9tYWluKTsKKysKKysg ICAgLyogdHJpbSB0cmFpbGluZyBkb3RzICovCisrICAgIGlmKGRsZW4gJiYgKGRvbWFpbltkbGVu IC0gMV0gPT0gJy4nKSkKKysgICAgICBkbGVuLS07CisrICAgIGlmKGNsZW4gJiYgKGNvLT5kb21h aW5bY2xlbiAtIDFdID09ICcuJykpCisrICAgICAgY2xlbi0tOworKworICAgICBpZigoZGxlbiA8 IHNpemVvZihsY2FzZSkpICYmIChjbGVuIDwgc2l6ZW9mKGxjb29raWUpKSkgeworICAgICAgIGNv bnN0IHBzbF9jdHhfdCAqcHNsID0gQ3VybF9wc2xfdXNlKGRhdGEpOworICAgICAgIGlmKHBzbCkg eworICAgICAgICAgLyogdGhlIFBTTCBjaGVjayByZXF1aXJlcyBsb3dlcmNhc2UgZG9tYWluIG5h bWUgYW5kIHBhdHRlcm4gKi8KKy0gICAgICAgIEN1cmxfc3RybnRvbG93ZXIobGNhc2UsIGRvbWFp biwgZGxlbiArIDEpOworLSAgICAgICAgQ3VybF9zdHJudG9sb3dlcihsY29va2llLCBjby0+ZG9t YWluLCBjbGVuICsgMSk7CisrICAgICAgICBDdXJsX3N0cm50b2xvd2VyKGxjYXNlLCBkb21haW4s IGRsZW4pOworKyAgICAgICAgbGNhc2VbZGxlbl0gPSAwOworKyAgICAgICAgQ3VybF9zdHJudG9s b3dlcihsY29va2llLCBjby0+ZG9tYWluLCBjbGVuKTsKKysgICAgICAgIGxjb29raWVbY2xlbl0g PSAwOworICAgICAgICAgYWNjZXB0YWJsZSA9IHBzbF9pc19jb29raWVfZG9tYWluX2FjY2VwdGFi bGUocHNsLCBsY2FzZSwgbGNvb2tpZSk7CisgICAgICAgICBDdXJsX3BzbF9yZWxlYXNlKGRhdGEp OworICAgICAgIH0KK2RpZmYgLS1naXQgYS90ZXN0cy9kYXRhL01ha2VmaWxlLmFtIGIvdGVzdHMv ZGF0YS9NYWtlZmlsZS5hbQoraW5kZXggODc5NzdlNjRhYS4uYmZmMTE4MjQwYyAxMDA2NDQKKy0t LSBhL3Rlc3RzL2RhdGEvTWFrZWZpbGUuYW0KKysrKyBiL3Rlc3RzL2RhdGEvTWFrZWZpbGUuYW0K K0BAIC0yMDksNiArMjA5LDcgQEAgdGVzdDE1NTYgdGVzdDE1NTcgdGVzdDE1NTggdGVzdDE1NTkg dGVzdDE1NjAgdGVzdDE1NjEgdGVzdDE1NjIgdGVzdDE1NjMgXAorIHRlc3QxNTY0IHRlc3QxNTY1 IHRlc3QxNTY2IHRlc3QxNTY3IHRlc3QxNTY4IHRlc3QxNTY5IHRlc3QxNTcwIHRlc3QxNTcxIFwK KyB0ZXN0MTU3MiB0ZXN0MTU3MyB0ZXN0MTU3NCB0ZXN0MTU3NSB0ZXN0MTU3NiB0ZXN0MTU3NyB0 ZXN0MTU3OCB0ZXN0MTU3OSBcCisgdGVzdDE1ODAgdGVzdDE1ODEgdGVzdDE1ODIgdGVzdDE1ODMg dGVzdDE1ODQgdGVzdDE1ODUgXAorK3Rlc3QxNjI5IFwKKyBcCisgdGVzdDE1OTAgdGVzdDE1OTEg dGVzdDE1OTIgdGVzdDE1OTMgdGVzdDE1OTQgdGVzdDE1OTUgdGVzdDE1OTYgdGVzdDE1OTcgXAor IHRlc3QxNTk4IHRlc3QxNTk5IHRlc3QxNjAwIHRlc3QxNjAxIHRlc3QxNjAyIHRlc3QxNjAzIHRl c3QxNjA0IHRlc3QxNjA1IFwKK2RpZmYgLS1naXQgYS90ZXN0cy9kYXRhL3Rlc3QxNjI5IGIvdGVz dHMvZGF0YS90ZXN0MTYyOQorbmV3IGZpbGUgbW9kZSAxMDA2NDQKK2luZGV4IDAwMDAwMDAwMDAu LjZlZTQ3OWJhMzEKKy0tLSAvZGV2L251bGwKKysrKyBiL3Rlc3RzL2RhdGEvdGVzdDE2MjkKK0BA IC0wLDAgKzEsNTMgQEAKKys8P3htbCB2ZXJzaW9uPSIxLjAiIGVuY29kaW5nPSJVUy1BU0NJSSI/ PgorKzx0ZXN0Y2FzZT4KKys8aW5mbz4KKys8a2V5d29yZHM+CisrSFRUUAorK0hUVFAgR0VUCisr PC9rZXl3b3Jkcz4KKys8L2luZm8+CisrCisrIyBTZXJ2ZXItc2lkZQorKzxyZXBseT4KKys8ZGF0 YSBjcmxmPSJoZWFkZXJzIj4KKytIVFRQLzEuMSAyMDAgT0sKKytDb250ZW50LUxlbmd0aDogNgor K1NldC1Db29raWU6IHNvbWV0aGluZz0xOyBEb21haW49Y28udWsuOyBQYXRoPS8KKysKKystZm9v LQorKzwvZGF0YT4KKys8L3JlcGx5PgorKworKyMgQ2xpZW50LXNpZGUKKys8Y2xpZW50PgorKzxm ZWF0dXJlcz4KKytQU0wKKytjb29raWVzCisrPC9mZWF0dXJlcz4KKys8c2VydmVyPgorK2h0dHAK Kys8L3NlcnZlcj4KKys8bmFtZT4KKytjb29raWVzIHdpdGggdHJhaWxpbmcgZG90IGFmdGVyIFBT TCBkb21haW4KKys8L25hbWU+CisrPGNvbW1hbmQ+CisraHR0cDovL2Zvby5jby51ay46JUhUVFBQ T1JULyBodHRwOi8vYmFyLmNvLnVrLjolSFRUUFBPUlQvIC1iICIiIC0tcmVzb2x2ZSBmb28uY28u dWsuOiVIVFRQUE9SVDolSE9TVElQIC0tcmVzb2x2ZSBiYXIuY28udWsuOiVIVFRQUE9SVDolSE9T VElQCisrPC9jb21tYW5kPgorKzwvY2xpZW50PgorKworKyMgVmVyaWZ5IGRhdGEgYWZ0ZXIgdGhl IHRlc3QgaGFzIGJlZW4gInNob3QiCisrPHZlcmlmeT4KKys8cHJvdG9jb2wgY3JsZj0iaGVhZGVy cyI+CisrR0VUIC8gSFRUUC8xLjEKKytIb3N0OiBmb28uY28udWsuOiVIVFRQUE9SVAorK1VzZXIt QWdlbnQ6IGN1cmwvJVZFUlNJT04KKytBY2NlcHQ6ICovKgorKworK0dFVCAvIEhUVFAvMS4xCisr SG9zdDogYmFyLmNvLnVrLjolSFRUUFBPUlQKKytVc2VyLUFnZW50OiBjdXJsLyVWRVJTSU9OCisr QWNjZXB0OiAqLyoKKysKKys8L3Byb3RvY29sPgorKzwvdmVyaWZ5PgorKzwvdGVzdGNhc2U+Cist LSAKKzIuNTUuMAorCgpkaWZmIC0tZ2l0IGEvY3VybC5zcGVjIGIvY3VybC5zcGVjCmluZGV4IDU2 MjBjMjQuLjgxYzAxOGIgMTAwNjQ0Ci0tLSBhL2N1cmwuc3BlYworKysgYi9jdXJsLnNwZWMKQEAg LTEyLDcgKzEyLDcgQEAKIFN1bW1hcnk6IEEgdXRpbGl0eSBmb3IgZ2V0dGluZyBmaWxlcyBmcm9t IHJlbW90ZSBzZXJ2ZXJzIChGVFAsIEhUVFAsIGFuZCBvdGhlcnMpCiBOYW1lOiBjdXJsCiBWZXJz aW9uOiA4LjE4LjAKLVJlbGVhc2U6IDclez9kaXN0fQorUmVsZWFzZTogOCV7P2Rpc3R9CiBMaWNl bnNlOiBjdXJsCiBTb3VyY2UwOiBodHRwczovL2N1cmwuc2UvZG93bmxvYWQvJXtuYW1lfS0le3Zl cnNpb25fbm9fdGlsZGV9LnRhci54egogU291cmNlMTogaHR0cHM6Ly9jdXJsLnNlL2Rvd25sb2Fk LyV7bmFtZX0tJXt2ZXJzaW9uX25vX3RpbGRlfS50YXIueHouYXNjCkBAIC00Miw2ICs0Miw5IEBA IFBhdGNoMDA1OiAwMDA1LWN1cmwtOC4xOC4wLUNWRS0yMDI2LTM3ODQucGF0Y2gKICMgRml4IHVz ZSBhZnRlciBmcmVlIGluIFNNQiBjb25uZWN0aW9uIHJldXNlIChDVkUtMjAyNi0zODA1KQogUGF0 Y2gwMDY6IDAwMDYtY3VybC04LjE4LjAtQ1ZFLTIwMjYtMzgwNS5wYXRjaAogCisjIEZpeCB0cmFp bGluZyBkb3QgZG9tYWluIHN1cGVyIGNvb2tpZSAoQ1ZFLTIwMjYtODkyNCkKK1BhdGNoMDA3OiAw MDA3LWN1cmwtOC4xOC4wLUNWRS0yMDI2LTg5MjQucGF0Y2gKKwogIyBwYXRjaCBtYWtpbmcgbGli Y3VybCBtdWx0aWxpYiByZWFkeQogUGF0Y2gxMDE6IDAxMDEtY3VybC03LjMyLjAtbXVsdGlsaWIu cGF0Y2gKIApAQCAtNDY1LDYgKzQ2OCw5IEBAIHJtIC1mICR7UlBNX0JVSUxEX1JPT1R9JXtfbWFu ZGlyfS9tYW4xL3djdXJsLjEqCiAle19saWJkaXJ9L2xpYmN1cmwuc28uNC5bMC05XS5bMC05XS5t aW5pbWFsCiAKICVjaGFuZ2Vsb2cKKyogV2VkIEp1bCAyOSAyMDI2IEphbiBNYWNrdSA8amFtYWNr dUByZWRoYXQuY29tPiAtIDguMTguMC04CistIEZpeCB0cmFpbGluZyBkb3QgZG9tYWluIHN1cGVy IGNvb2tpZSAoQ1ZFLTIwMjYtODkyNCkKKwogKiBNb24gSnVsIDIwIDIwMjYgSmFuIE1hY2t1IDxq YW1hY2t1QHJlZGhhdC5jb20+IC0gOC4xOC4wLTcKIC0gZXhwbGljaXRseSBkaXNhYmxlIEhUVFAv MyBzdXBwb3J0IGluIHRoZSBtaW5pbWFsIGJ1aWxkCiAK