From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Sandro Mani To: git-commits@fedoraproject.org Subject: [rpms/mingw-gstreamer1-plugins-good] f43: Backport fix for CVE-2026-5056 Date: Sun, 02 Aug 2026 10:33:29 GMT Message-ID: <178566680909.1.416714150360389572.rpms-mingw-gstreamer1-plugins-good-2c42bbce9a46@fedoraproject.org> List-ID: X-Git-Repo: rpms/mingw-gstreamer1-plugins-good X-Git-Branch: f43 X-Git-Rev: 2c42bbce9a46aa11d2e2f740b232e186db762ac6 QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvbWluZ3ctZ3N0cmVh bWVyMS1wbHVnaW5zLWdvb2QKQnJhbmNoIDogZjQzCkNvbW1pdCA6IDJjNDJiYmNlOWE0NmFhMTFk MmUyZjc0MGIyMzJlMTg2ZGI3NjJhYzYKQXV0aG9yIDogU2FuZHJvIE1hbmkgPG1hbmlzYW5kcm9A Z21haWwuY29tPgpEYXRlICAgOiAyMDI2LTA4LTAyVDEyOjMzOjE1KzAyOjAwClN0YXRzICA6ICs5 Mi8tNCBpbiAzIGZpbGUocykKVVJMICAgIDogaHR0cHM6Ly9zcmMuZmVkb3JhcHJvamVjdC5vcmcv cnBtcy9taW5ndy1nc3RyZWFtZXIxLXBsdWdpbnMtZ29vZC9jLzJjNDJiYmNlOWE0NmFhMTFkMmUy Zjc0MGIyMzJlMTg2ZGI3NjJhYzY/YnJhbmNoPWY0MwoKTG9nOgpCYWNrcG9ydCBmaXggZm9yIENW RS0yMDI2LTUwNTYKCi0tLQpkaWZmIC0tZ2l0IGEvQ1ZFLTIwMjYtMzA4M18zMDg1LnBhdGNoIGIv Q1ZFLTIwMjYtMzA4M18zMDg1LnBhdGNoCmluZGV4IDYyYzdjYTguLmMwMDdjOTkgMTAwNjQ0Ci0t LSBhL0NWRS0yMDI2LTMwODNfMzA4NS5wYXRjaAorKysgYi9DVkUtMjAyNi0zMDgzXzMwODUucGF0 Y2gKQEAgLTEsNiArMSw2IEBACiBkaWZmIC1ydXBOIC0tbm8tZGVyZWZlcmVuY2UgZ3N0LXBsdWdp bnMtZ29vZC0xLjI2LjExL2RvY3MvZ3N0X3BsdWdpbnNfY2FjaGUuanNvbiBnc3QtcGx1Z2lucy1n b29kLTEuMjYuMTEtbmV3L2RvY3MvZ3N0X3BsdWdpbnNfY2FjaGUuanNvbgogLS0tIGdzdC1wbHVn aW5zLWdvb2QtMS4yNi4xMS9kb2NzL2dzdF9wbHVnaW5zX2NhY2hlLmpzb24JMjAyNi0wMy0xMCAx NDowODoyNS4wMDAwMDAwMDAgKzAxMDAKLSsrKyBnc3QtcGx1Z2lucy1nb29kLTEuMjYuMTEtbmV3 L2RvY3MvZ3N0X3BsdWdpbnNfY2FjaGUuanNvbgkyMDI2LTAzLTI3IDE5OjQyOjM1LjU0NzUwNzUw OSArMDEwMAorKysrIGdzdC1wbHVnaW5zLWdvb2QtMS4yNi4xMS1uZXcvZG9jcy9nc3RfcGx1Z2lu c19jYWNoZS5qc29uCTIwMjYtMDgtMDIgMTI6MzI6NTQuMjU3NDAyMzkxICswMjAwCiBAQCAtMTY4 MDksMzQgKzE2ODA5LDYgQEAKICAgICAgICAgICAgICAgICAgInByb3BlcnRpZXMiOiB7fSwKICAg ICAgICAgICAgICAgICAgInJhbmsiOiAic2Vjb25kYXJ5IgpAQCAtMzgsNyArMzgsNyBAQCBkaWZm IC1ydXBOIC0tbm8tZGVyZWZlcmVuY2UgZ3N0LXBsdWdpbnMtZ29vZC0xLjI2LjExL2RvY3MvZ3N0 X3BsdWdpbnNfY2FjaGUuanNvbgogICAgICAgICAgICAgICAgICAiZGVzY3JpcHRpb24iOiAiRGVj b2RlIFJlZHVuZGFudCBBdWRpbyBEYXRhIChSRUQpIiwKIGRpZmYgLXJ1cE4gLS1uby1kZXJlZmVy ZW5jZSBnc3QtcGx1Z2lucy1nb29kLTEuMjYuMTEvZ3N0L3J0cC9nc3RydHAuYyBnc3QtcGx1Z2lu cy1nb29kLTEuMjYuMTEtbmV3L2dzdC9ydHAvZ3N0cnRwLmMKIC0tLSBnc3QtcGx1Z2lucy1nb29k LTEuMjYuMTEvZ3N0L3J0cC9nc3RydHAuYwkyMDI2LTAzLTEwIDE0OjA4OjI1LjAwMDAwMDAwMCAr MDEwMAotKysrIGdzdC1wbHVnaW5zLWdvb2QtMS4yNi4xMS1uZXcvZ3N0L3J0cC9nc3RydHAuYwky MDI2LTAzLTI3IDE5OjQyOjM1LjU0ODYyMzY1MCArMDEwMAorKysrIGdzdC1wbHVnaW5zLWdvb2Qt MS4yNi4xMS1uZXcvZ3N0L3J0cC9nc3RydHAuYwkyMDI2LTA4LTAyIDEyOjMyOjU0LjI1OTI5Mzcx MyArMDIwMAogQEAgLTEwMSw3ICsxMDEsNiBAQCBwbHVnaW5faW5pdCAoR3N0UGx1Z2luICogcGx1 Z2luKQogICAgcmV0IHw9IEdTVF9FTEVNRU5UX1JFR0lTVEVSIChydHBtcDRnZGVwYXksIHBsdWdp bik7CiAgICByZXQgfD0gR1NUX0VMRU1FTlRfUkVHSVNURVIgKHJ0cG1wNGdwYXksIHBsdWdpbik7 CkBAIC01NzQsNyArNTc0LDcgQEAgZGlmZiAtcnVwTiAtLW5vLWRlcmVmZXJlbmNlIGdzdC1wbHVn aW5zLWdvb2QtMS4yNi4xMS9nc3QvcnRwL2dzdHJ0cHFkbWRlcGF5LmggZ3MKIC0jZW5kaWYgLyog X19HU1RfUlRQX1FETTJfREVQQVlfSF9fICovCiBkaWZmIC1ydXBOIC0tbm8tZGVyZWZlcmVuY2Ug Z3N0LXBsdWdpbnMtZ29vZC0xLjI2LjExL2dzdC9ydHAvbWVzb24uYnVpbGQgZ3N0LXBsdWdpbnMt Z29vZC0xLjI2LjExLW5ldy9nc3QvcnRwL21lc29uLmJ1aWxkCiAtLS0gZ3N0LXBsdWdpbnMtZ29v ZC0xLjI2LjExL2dzdC9ydHAvbWVzb24uYnVpbGQJMjAyNi0wMy0xMCAxNDowODoyNS4wMDAwMDAw MDAgKzAxMDAKLSsrKyBnc3QtcGx1Z2lucy1nb29kLTEuMjYuMTEtbmV3L2dzdC9ydHAvbWVzb24u YnVpbGQJMjAyNi0wMy0yNyAxOTo0MjozNS41NDkzNTYzOTMgKzAxMDAKKysrKyBnc3QtcGx1Z2lu cy1nb29kLTEuMjYuMTEtbmV3L2dzdC9ydHAvbWVzb24uYnVpbGQJMjAyNi0wOC0wMiAxMjozMjo1 NC4yNTk5NzQ5NzYgKzAyMDAKIEBAIC03Niw3ICs3Niw2IEBAIHJ0cF9zb3VyY2VzID0gWwogICAg J2dzdHJ0cG1wNGFkZXBheS5jJywKICAgICdnc3RydHBtcDRhcGF5LmMnLAoKZGlmZiAtLWdpdCBh L0NWRS0yMDI2LTUwNTYucGF0Y2ggYi9DVkUtMjAyNi01MDU2LnBhdGNoCm5ldyBmaWxlIG1vZGUg MTAwNjQ0CmluZGV4IDAwMDAwMDAuLmViY2JjZTAKLS0tIC9kZXYvbnVsbAorKysgYi9DVkUtMjAy Ni01MDU2LnBhdGNoCkBAIC0wLDAgKzEsODIgQEAKK2RpZmYgLXJ1cE4gLS1uby1kZXJlZmVyZW5j ZSBnc3QtcGx1Z2lucy1nb29kLTEuMjYuMTEvZ3N0L2lzb21wNC9xdGRlbXV4LmMgZ3N0LXBsdWdp bnMtZ29vZC0xLjI2LjExLW5ldy9nc3QvaXNvbXA0L3F0ZGVtdXguYworLS0tIGdzdC1wbHVnaW5z LWdvb2QtMS4yNi4xMS9nc3QvaXNvbXA0L3F0ZGVtdXguYwkyMDI2LTAzLTEwIDE0OjA4OjI1LjAw MDAwMDAwMCArMDEwMAorKysrIGdzdC1wbHVnaW5zLWdvb2QtMS4yNi4xMS1uZXcvZ3N0L2lzb21w NC9xdGRlbXV4LmMJMjAyNi0wOC0wMiAxMjozMjo1NC4zODk0MDEyMjcgKzAyMDAKK0BAIC0xMjE2 MCw2ICsxMjE2MCwxNCBAQCBxdGRlbXV4X3BhcnNlX2NtcGQgKEdzdFFURGVtdXggKiBxdGRlbXV4 CisgCisgICBjbXBkLT5jb21wb25lbnRfY291bnQgPSBnc3RfYnl0ZV9yZWFkZXJfZ2V0X3VpbnQz Ml9iZV91bmNoZWNrZWQgKHJlYWRlcik7CisgCisrICAvKiBMZXQncyB1c2UgMTYgYXMgYSB1cHBl ciBib3VuZCBoZXJlIGZvciBub3cgdG8gYXZvaWQgb3ZlcmZsb3dzIGFuZAorKyAgICogYWxsb2Nh dGluZyBsb3RzIG9mIG1lbW9yeSAqLworKyAgaWYgKGNtcGQtPmNvbXBvbmVudF9jb3VudCA+IDE2 KSB7CisrICAgIEdTVF9FUlJPUl9PQkpFQ1QgKHF0ZGVtdXgsICJVbnN1cHBvcnRlZCBudW1iZXIg b2YgY21wZCBjb21wb25lbnRzICV1IiwKKysgICAgICAgIGNtcGQtPmNvbXBvbmVudF9jb3VudCk7 CisrICAgIGdvdG8gZXJyb3I7CisrICB9CisrCisgICBndWludDMyIG1pbmltdW1fc2l6ZSA9IGNt cGQtPmNvbXBvbmVudF9jb3VudCAqIDIgKyA0OyAvLyBhc3N1bWluZyB0eXBlX3VyaXMgYXJlIG5v dCB1c2VkCisgICBpZiAoZ3N0X2J5dGVfcmVhZGVyX2dldF9zaXplIChyZWFkZXIpIDwgbWluaW11 bV9zaXplKSB7CisgICAgIEdTVF9FUlJPUl9PQkpFQ1QgKHF0ZGVtdXgsICJjbXBkIHNpemUgaXMg dG9vIHNob3J0Iik7CitAQCAtMTIyMTgsNiArMTIyMjYsMTQgQEAgcXRkZW11eF9wYXJzZV91bmND IChHc3RRVERlbXV4ICogcXRkZW11eAorICAgICBnb3RvIGVycm9yOworICAgfQorIAorKyAgLyog TGV0J3MgdXNlIDE2IGFzIGEgdXBwZXIgYm91bmQgaGVyZSBmb3Igbm93IHRvIGF2b2lkIG92ZXJm bG93cyBhbmQKKysgICAqIGFsbG9jYXRpbmcgbG90cyBvZiBtZW1vcnkgKi8KKysgIGlmICh1bmND LT5jb21wb25lbnRfY291bnQgPiAxNikgeworKyAgICBHU1RfRVJST1JfT0JKRUNUIChxdGRlbXV4 LCAiVW5zdXBwb3J0ZWQgbnVtYmVyIG9mIHVuY0MgY29tcG9uZW50cyAldSIsCisrICAgICAgICB1 bmNDLT5jb21wb25lbnRfY291bnQpOworKyAgICBnb3RvIGVycm9yOworKyAgfQorKworICAgZ3Vp bnQzMiBleHBlY3RlZF9zaXplID0gdW5jQy0+Y29tcG9uZW50X2NvdW50ICogNSArIDM2OworICAg aWYgKGdzdF9ieXRlX3JlYWRlcl9nZXRfc2l6ZSAocmVhZGVyKSAhPSBleHBlY3RlZF9zaXplKSB7 CisgICAgIEdTVF9FUlJPUl9PQkpFQ1QgKHF0ZGVtdXgsICJ1bmNDIHNpemUgaXMgaW5jb3JyZWN0 Iik7CitAQCAtMTI0NzEsNyArMTI0ODcsNiBAQCBxdGRlbXV4X2dldF9mb3JtYXRfZnJvbV91bmN2 IChHc3RRVERlbXV4CisgICBndWludDMyIG51bV9jb21wb25lbnRzID0gdW5jQy0+Y29tcG9uZW50 X2NvdW50OworICAgZ3VpbnQxNiBjb21wb25lbnRfdHlwZXNbNF07CisgCistCisgICBpZiAodW5j Qy0+dmVyc2lvbiA9PSAxKSB7CisgICAgIC8vIERldGVybWluZSBmb3JtYXQgd2l0aCBwcm9maWxl CisgICAgIC8vIFRoZSBvbmx5IHBlcm1pdHRlZCBwcm9maWxlcyBmb3IgdmVyc2lvbiAxIGFyZSBg cmdiM2AsIGByZ2JhYCwgYW5kIGBhYmdyYAorQEAgLTEyNDk5LDYgKzEyNTE0LDExIEBAIHF0ZGVt dXhfZ2V0X2Zvcm1hdF9mcm9tX3VuY3YgKEdzdFFURGVtdXgKKyAgICAgZ290byB1bnN1cHBvcnRl ZF9mZWF0dXJlOworICAgfQorIAorKyAgaWYgKG51bV9jb21wb25lbnRzID4gNCB8fCBudW1fY29t cG9uZW50cyA9PSAwKSB7CisrICAgIEdTVF9XQVJOSU5HX09CSkVDVCAocXRkZW11eCwKKysgICAg ICAgICJVbnN1cHBvcnRlZCBudW1iZXIgb2YgY29tcG9uZW50cyBmb3IgdW5jQzogJXUiLCBudW1f Y29tcG9uZW50cyk7CisrICAgIGdvdG8gdW5zdXBwb3J0ZWRfZmVhdHVyZTsKKysgIH0KKyAKKyAg IC8qIEFzc2VydCB0aGF0IGNvbXBvbmVudHMgYXJlIHNpbWlsYXIgKi8KKyAgIFVuY29tcHJlc3Nl ZEZyYW1lQ29uZmlnQ29tcG9uZW50ICpmaXJzdF9jb21wID0gJnVuY0MtPmNvbXBvbmVudHNbMF07 CitAQCAtMTI1NDAsNiArMTI1NjAsMTEgQEAgcXRkZW11eF9nZXRfZm9ybWF0X2Zyb21fdW5jdiAo R3N0UVREZW11eAorICAgLy8gR2V0IENvbXBvbmVudCBUeXBlcworICAgZm9yIChndWludDMyIGkg PSAwOyBpIDwgbnVtX2NvbXBvbmVudHM7IGkrKykgeworICAgICBndWludDE2IGNvbXBvbmVudF9p bmRleCA9IHVuY0MtPmNvbXBvbmVudHNbaV0uaW5kZXg7CisrICAgIGlmIChjb21wb25lbnRfaW5k ZXggPj0gY21wZC0+Y29tcG9uZW50X2NvdW50KSB7CisrICAgICAgR1NUX1dBUk5JTkdfT0JKRUNU IChxdGRlbXV4LAorKyAgICAgICAgICAiSW52YWxpZCBjb21wb25lbnQgaW5kZXggJXUgZm9yIGNv bXBvbmVudCAldSIsIGNvbXBvbmVudF9pbmRleCwgaSk7CisrICAgICAgZ290byB1bnN1cHBvcnRl ZF9mZWF0dXJlOworKyAgICB9CisgICAgIGNvbXBvbmVudF90eXBlc1tpXSA9IGNtcGQtPnR5cGVz W2NvbXBvbmVudF9pbmRleF07CisgICB9CisgCitAQCAtMTg5NjEsMTAgKzE4OTg2LDEyIEBAIHF0 ZGVtdXhfdmlkZW9fY2FwcyAoR3N0UVREZW11eCAqIHF0ZGVtdXgKKyAgICAgICB9CisgCisgICAg ICAgZm9ybWF0ID0gcXRkZW11eF9nZXRfZm9ybWF0X2Zyb21fdW5jdiAocXRkZW11eCwgJnVuY0Ms ICZjbXBkKTsKKy0gICAgICBnc3RfdmlkZW9faW5mb19zZXRfZm9ybWF0ICgmc3RyZWFtLT5wcmVf aW5mbywgZm9ybWF0LCBlbnRyeS0+d2lkdGgsCistICAgICAgICAgIGVudHJ5LT5oZWlnaHQpOwor LSAgICAgIHF0ZGVtdXhfc2V0X2luZm9fZnJvbV91bmN2IChxdGRlbXV4LCBlbnRyeSwgJnVuY0Ms ICZzdHJlYW0tPnByZV9pbmZvKTsKKy0gICAgICBzdHJlYW0tPmFsaWdubWVudCA9IDMyOworKyAg ICAgIGlmIChmb3JtYXQgIT0gR1NUX1ZJREVPX0ZPUk1BVF9VTktOT1dOKSB7CisrICAgICAgICBn c3RfdmlkZW9faW5mb19zZXRfZm9ybWF0ICgmc3RyZWFtLT5wcmVfaW5mbywgZm9ybWF0LCBlbnRy eS0+d2lkdGgsCisrICAgICAgICAgICAgZW50cnktPmhlaWdodCk7CisrICAgICAgICBxdGRlbXV4 X3NldF9pbmZvX2Zyb21fdW5jdiAocXRkZW11eCwgZW50cnksICZ1bmNDLCAmc3RyZWFtLT5wcmVf aW5mbyk7CisrICAgICAgICBzdHJlYW0tPmFsaWdubWVudCA9IDMyOworKyAgICAgIH0KKyAKKyAg ICAgICAvKiBGcmVlIE1lbW9yeSAqLworICAgICAgIHF0ZGVtdXhfY2xlYXJfdW5jQyAoJnVuY0Mp OwoKZGlmZiAtLWdpdCBhL21pbmd3LWdzdHJlYW1lcjEtcGx1Z2lucy1nb29kLnNwZWMgYi9taW5n dy1nc3RyZWFtZXIxLXBsdWdpbnMtZ29vZC5zcGVjCmluZGV4IDY2YzE5YzMuLjg3Y2QwNWUgMTAw NjQ0Ci0tLSBhL21pbmd3LWdzdHJlYW1lcjEtcGx1Z2lucy1nb29kLnNwZWMKKysrIGIvbWluZ3ct Z3N0cmVhbWVyMS1wbHVnaW5zLWdvb2Quc3BlYwpAQCAtNCw3ICs0LDcgQEAKIAogTmFtZTogICAg ICAgICAgIG1pbmd3LWdzdHJlYW1lcjEtcGx1Z2lucy1nb29kCiBWZXJzaW9uOiAgICAgICAgMS4y Ni4xMQotUmVsZWFzZTogICAgICAgIDElez9kaXN0fQorUmVsZWFzZTogICAgICAgIDIlez9kaXN0 fQogU3VtbWFyeTogICAgICAgIENyb3NzIGNvbXBpbGVkIEdTdHJlYW1lcjEgcGx1Zy1pbnMgZ29v ZAogCiBMaWNlbnNlOiAgICAgICAgTEdQTC0yLjAtb3ItbGF0ZXIKQEAgLTEzLDYgKzEzLDkgQEAg U291cmNlOiAgICAgICAgIGh0dHA6Ly9nc3RyZWFtZXIuZnJlZWRlc2t0b3Aub3JnL3NyYy9nc3Qt cGx1Z2lucy1nb29kL2dzdC1wbHVnaW4KICMgQmFja3BvcnQgZml4IGZvciBDVkUtMjAyNi0zMDgz LCBDVkUtMjAyNi0zMDg1CiAjIGh0dHBzOi8vZ2l0bGFiLmZyZWVkZXNrdG9wLm9yZy9nc3RyZWFt ZXIvZ3N0cmVhbWVyLy0vY29tbWl0LzgzNDljZGQzNWY4NTI0NmUxMTNiMThlNTVmZDExYWJmOWNi MjQ4YmYKIFBhdGNoMDogICAgICAgICBDVkUtMjAyNi0zMDgzXzMwODUucGF0Y2gKKyMgQmFja3Bv cnQgZml4IGZvciBDVkUtMjAyNi01MDU2CisjIGh0dHBzOi8vZ2l0bGFiLmZyZWVkZXNrdG9wLm9y Zy9nc3RyZWFtZXIvZ3N0cmVhbWVyLy0vY29tbWl0L2JhZDY3MjFjYTQ5MDExMjNlNWNiNTdlZWM5 ZDhlODRkNjljMDg1OTcKK1BhdGNoMTogICAgICAgICBDVkUtMjAyNi01MDU2LnBhdGNoCiAKIEJ1 aWxkQXJjaDogICAgICBub2FyY2gKIApAQCAtMjgwLDYgKzI4Myw5IEBAIHJtIC1yZiAle2J1aWxk cm9vdH0le21pbmd3NjRfbGliZGlyfS9nc3RyZWFtZXItJXthcGlfdmVyc2lvbn0vKi5kbGwuYQog CiAKICVjaGFuZ2Vsb2cKKyogU3VuIEF1ZyAwMiAyMDI2IFNhbmRybyBNYW5pIDxtYW5pc2FuZHJv QGdtYWlsLmNvbT4gLSAxLjI2LjExLTIKKy0gQmFja3BvcnQgZml4IGZvciBDVkUtMjAyNi01MDU2 CisKICogRnJpIE1hciAyNyAyMDI2IFNhbmRybyBNYW5pIDxtYW5pc2FuZHJvQGdtYWlsLmNvbT4g LSAxLjI2LjExLTEKIC0gVXBkYXRlIHRvIDEuMjYuMTEKIC0gQmFja3BvcnQgZml4IGZvciBDVkUt MjAyNi0zMDgzLCBDVkUtMjAyNi0zMDg1Cg==