From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Jan Macku To: git-commits@fedoraproject.org Subject: [rpms/curl] f44: Resolves: CVE-2026-9547 - SSH improper host validation Date: Fri, 31 Jul 2026 10:22:16 GMT Message-ID: <178549333699.1.5470227540730327244.rpms-curl-cfa8636a0a2c@fedoraproject.org> List-ID: X-Git-Repo: rpms/curl X-Git-Branch: f44 X-Git-Rev: cfa8636a0a2cf15c50ac39269a459ee0018dc66e QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvY3VybApCcmFuY2gg OiBmNDQKQ29tbWl0IDogY2ZhODYzNmEwYTJjZjE1YzUwYWMzOTI2OWE0NTllZTAwMThkYzY2ZQpB dXRob3IgOiBKYW4gTWFja3UgPGphbWFja3VAcmVkaGF0LmNvbT4KRGF0ZSAgIDogMjAyNi0wNy0y OVQxMzoxOTowNSswMjowMApTdGF0cyAgOiArMzYvLTAgaW4gMiBmaWxlKHMpClVSTCAgICA6IGh0 dHBzOi8vc3JjLmZlZG9yYXByb2plY3Qub3JnL3JwbXMvY3VybC9jL2NmYTg2MzZhMGEyY2YxNWM1 MGFjMzkyNjlhNDU5ZWUwMDE4ZGM2NmU/YnJhbmNoPWY0NAoKTG9nOgpSZXNvbHZlczogQ1ZFLTIw MjYtOTU0NyAtIFNTSCBpbXByb3BlciBob3N0IHZhbGlkYXRpb24KCi0tLQpkaWZmIC0tZ2l0IGEv MDAwOC1jdXJsLTguMTguMC1DVkUtMjAyNi05NTQ3LnBhdGNoIGIvMDAwOC1jdXJsLTguMTguMC1D VkUtMjAyNi05NTQ3LnBhdGNoCm5ldyBmaWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAwMDAwMDAuLjVi NGI2Y2MKLS0tIC9kZXYvbnVsbAorKysgYi8wMDA4LWN1cmwtOC4xOC4wLUNWRS0yMDI2LTk1NDcu cGF0Y2gKQEAgLTAsMCArMSwzMiBAQAorRnJvbSAyMTAwMDcyOTQxMGRmMmQ5YWIxMDVhMDVlZTM3 NTliMjVlZGUxZjFkIE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQorRnJvbTogSm9zaHVhIFJvZ2Vy cyA8TWVnYU1hblNlY0B1c2Vycy5ub3JlcGx5LmdpdGh1Yi5jb20+CitEYXRlOiBGcmksIDIyIE1h eSAyMDI2IDA5OjQ4OjE1ICswMjAwCitTdWJqZWN0OiBbUEFUQ0ggMi8yXSBsaWJzc2g6IG1hcCBT U0hfS05PV05fSE9TVFNfT1RIRVIgdG8gQ1VSTEtITUFUQ0hfTUlTTUFUQ0gKKworSG9zdCBrZXkg dHlwZSBtaXNtYXRjaCBmcm9tIGxpYnNzaCB3YXMgaW5jb3JyZWN0bHkgcmVwb3J0ZWQgYXMgbWlz c2luZywKK2NhdXNpbmcga2V5IGNhbGxiYWNrcyB0byBhY2NlcHQgaW5zdGVhZCBvZiByZWplY3Qu CisKK1JlcG9ydGVkIGJ5OiBKb3NodWEgUm9nZXJzIChBaXNsZSBSZXNlYXJjaCkKK0Nsb3NlcyAj MjE3MjQKKworKGNoZXJyeSBwaWNrZWQgZnJvbSBjb21taXQgMGI4ZGJiYzYzYzk4Nzc3ZTQ1ODRj YjlmYmQ3MWRmMzQ2NDAwOGFkMSkKKy0tLQorIGxpYi92c3NoL2xpYnNzaC5jIHwgMiArKworIDEg ZmlsZSBjaGFuZ2VkLCAyIGluc2VydGlvbnMoKykKKworZGlmZiAtLWdpdCBhL2xpYi92c3NoL2xp YnNzaC5jIGIvbGliL3Zzc2gvbGlic3NoLmMKK2luZGV4IDNlNmNiM2E4MzIuLjE5OWU5N2JkM2Yg MTAwNjQ0CistLS0gYS9saWIvdnNzaC9saWJzc2guYworKysrIGIvbGliL3Zzc2gvbGlic3NoLmMK K0BAIC00MDYsNiArNDA2LDggQEAgc3RhdGljIGludCBteXNzaF9pc19rbm93bihzdHJ1Y3QgQ3Vy bF9lYXN5ICpkYXRhLCBzdHJ1Y3Qgc3NoX2Nvbm4gKnNzaGMpCisgICAgICAga2V5bWF0Y2ggPSBD VVJMS0hNQVRDSF9PSzsKKyAgICAgICBicmVhazsKKyAgICAgY2FzZSBTU0hfS05PV05fSE9TVFNf T1RIRVI6CisrICAgICAga2V5bWF0Y2ggPSBDVVJMS0hNQVRDSF9NSVNNQVRDSDsKKysgICAgICBi cmVhazsKKyAgICAgY2FzZSBTU0hfS05PV05fSE9TVFNfTk9UX0ZPVU5EOgorICAgICBjYXNlIFNT SF9LTk9XTl9IT1NUU19VTktOT1dOOgorICAgICBjYXNlIFNTSF9LTk9XTl9IT1NUU19FUlJPUjoK Ky0tIAorMi41NS4wCisKCmRpZmYgLS1naXQgYS9jdXJsLnNwZWMgYi9jdXJsLnNwZWMKaW5kZXgg ODFjMDE4Yi4uOTRjNWUzYSAxMDA2NDQKLS0tIGEvY3VybC5zcGVjCisrKyBiL2N1cmwuc3BlYwpA QCAtNDUsNiArNDUsOSBAQCBQYXRjaDAwNjogMDAwNi1jdXJsLTguMTguMC1DVkUtMjAyNi0zODA1 LnBhdGNoCiAjIEZpeCB0cmFpbGluZyBkb3QgZG9tYWluIHN1cGVyIGNvb2tpZSAoQ1ZFLTIwMjYt ODkyNCkKIFBhdGNoMDA3OiAwMDA3LWN1cmwtOC4xOC4wLUNWRS0yMDI2LTg5MjQucGF0Y2gKIAor IyBGaXggU1NIIGltcHJvcGVyIGhvc3QgdmFsaWRhdGlvbiAoQ1ZFLTIwMjYtOTU0NykKK1BhdGNo MDA4OiAwMDA4LWN1cmwtOC4xOC4wLUNWRS0yMDI2LTk1NDcucGF0Y2gKKwogIyBwYXRjaCBtYWtp bmcgbGliY3VybCBtdWx0aWxpYiByZWFkeQogUGF0Y2gxMDE6IDAxMDEtY3VybC03LjMyLjAtbXVs dGlsaWIucGF0Y2gKIApAQCAtNDcwLDYgKzQ3Myw3IEBAIHJtIC1mICR7UlBNX0JVSUxEX1JPT1R9 JXtfbWFuZGlyfS9tYW4xL3djdXJsLjEqCiAlY2hhbmdlbG9nCiAqIFdlZCBKdWwgMjkgMjAyNiBK YW4gTWFja3UgPGphbWFja3VAcmVkaGF0LmNvbT4gLSA4LjE4LjAtOAogLSBGaXggdHJhaWxpbmcg ZG90IGRvbWFpbiBzdXBlciBjb29raWUgKENWRS0yMDI2LTg5MjQpCistIEZpeCBTU0ggaW1wcm9w ZXIgaG9zdCB2YWxpZGF0aW9uIChDVkUtMjAyNi05NTQ3KQogCiAqIE1vbiBKdWwgMjAgMjAyNiBK YW4gTWFja3UgPGphbWFja3VAcmVkaGF0LmNvbT4gLSA4LjE4LjAtNwogLSBleHBsaWNpdGx5IGRp c2FibGUgSFRUUC8zIHN1cHBvcnQgaW4gdGhlIG1pbmltYWwgYnVpbGQK