From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Jan Macku To: git-commits@fedoraproject.org Subject: [rpms/curl] f43: Resolves: CVE-2026-8924 - trailing dot domain super cookie Date: Tue, 04 Aug 2026 07:09:05 GMT Message-ID: <178582734538.1.8695653102305328794.rpms-curl-c85981589263@fedoraproject.org> List-ID: X-Git-Repo: rpms/curl X-Git-Branch: f43 X-Git-Rev: c85981589263d66d9410372cfc0f684b0288ddd5 QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvY3VybApCcmFuY2gg OiBmNDMKQ29tbWl0IDogYzg1OTgxNTg5MjYzZDY2ZDk0MTAzNzJjZmMwZjY4NGIwMjg4ZGRkNQpB dXRob3IgOiBKYW4gTWFja3UgPGphbWFja3VAcmVkaGF0LmNvbT4KRGF0ZSAgIDogMjAyNi0wOC0w M1QxNDo1MDo0MiswMjowMApTdGF0cyAgOiArMTMxLy0wIGluIDIgZmlsZShzKQpVUkwgICAgOiBo dHRwczovL3NyYy5mZWRvcmFwcm9qZWN0Lm9yZy9ycG1zL2N1cmwvYy9jODU5ODE1ODkyNjNkNjZk OTQxMDM3MmNmYzBmNjg0YjAyODhkZGQ1P2JyYW5jaD1mNDMKCkxvZzoKUmVzb2x2ZXM6IENWRS0y MDI2LTg5MjQgLSB0cmFpbGluZyBkb3QgZG9tYWluIHN1cGVyIGNvb2tpZQoKLS0tCmRpZmYgLS1n aXQgYS8wMDEyLWN1cmwtOC4xNS4wLUNWRS0yMDI2LTg5MjQucGF0Y2ggYi8wMDEyLWN1cmwtOC4x NS4wLUNWRS0yMDI2LTg5MjQucGF0Y2gKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXggMDAwMDAw MC4uODY1MGMwMAotLS0gL2Rldi9udWxsCisrKyBiLzAwMTItY3VybC04LjE1LjAtQ1ZFLTIwMjYt ODkyNC5wYXRjaApAQCAtMCwwICsxLDEyNyBAQAorRnJvbSA4OWYyZTJhNzk4MjNmNDFmOTkzOTEx YTYxMjk3MDRhYThkNTlkMGIxIE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQorRnJvbTogRGFuaWVs IFN0ZW5iZXJnIDxkYW5pZWxAaGF4eC5zZT4KK0RhdGU6IE1vbiwgMyBBdWcgMjAyNiAxMzowMDox NiArMDIwMAorU3ViamVjdDogW1BBVENIIDUvNV0gY29va2llOiB0cmltIHRyYWlsaW5nIGRvdHMg d2hlbiBjaGVja2luZyBQU0wKKworVmVyaWZpZWQgd2l0aCB0ZXN0IDE2MjkKKworQ2xvc2VzICMy MTYzNgorCisoY2hlcnJ5IHBpY2tlZCBmcm9tIGNvbW1pdCA1MWJlZWQxNzVkYmZjMzdkYTMxMTNm NmFjY2U2MGM2MzBjMDcwY2U4KQorLS0tCisgbGliL2Nvb2tpZS5jICAgICAgICAgICB8IDEzICsr KysrKysrKy0tCisgdGVzdHMvZGF0YS9NYWtlZmlsZS5hbSB8ICAxICsKKyB0ZXN0cy9kYXRhL3Rl c3QxNjI5ICAgIHwgNjEgKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysrKysr KysrKysrKysrCisgMyBmaWxlcyBjaGFuZ2VkLCA3MyBpbnNlcnRpb25zKCspLCAyIGRlbGV0aW9u cygtKQorIGNyZWF0ZSBtb2RlIDEwMDY0NCB0ZXN0cy9kYXRhL3Rlc3QxNjI5CisKK2RpZmYgLS1n aXQgYS9saWIvY29va2llLmMgYi9saWIvY29va2llLmMKK2luZGV4IDJhMWU1OWQ5YzYuLjE3YTZi YWJhMGMgMTAwNjQ0CistLS0gYS9saWIvY29va2llLmMKKysrKyBiL2xpYi9jb29raWUuYworQEAg LTkwNywxMiArOTA3LDIxIEBAIGlzX3B1YmxpY19zdWZmaXgoc3RydWN0IEN1cmxfZWFzeSAqZGF0 YSwKKyAgICAgY2hhciBsY29va2llWzI1Nl07CisgICAgIHNpemVfdCBkbGVuID0gc3RybGVuKGRv bWFpbik7CisgICAgIHNpemVfdCBjbGVuID0gc3RybGVuKGNvLT5kb21haW4pOworKworKyAgICAv KiB0cmltIHRyYWlsaW5nIGRvdHMgKi8KKysgICAgaWYoZGxlbiAmJiAoZG9tYWluW2RsZW4gLSAx XSA9PSAnLicpKQorKyAgICAgIGRsZW4tLTsKKysgICAgaWYoY2xlbiAmJiAoY28tPmRvbWFpbltj bGVuIC0gMV0gPT0gJy4nKSkKKysgICAgICBjbGVuLS07CisrCisgICAgIGlmKChkbGVuIDwgc2l6 ZW9mKGxjYXNlKSkgJiYgKGNsZW4gPCBzaXplb2YobGNvb2tpZSkpKSB7CisgICAgICAgY29uc3Qg cHNsX2N0eF90ICpwc2wgPSBDdXJsX3BzbF91c2UoZGF0YSk7CisgICAgICAgaWYocHNsKSB7Cisg ICAgICAgICAvKiB0aGUgUFNMIGNoZWNrIHJlcXVpcmVzIGxvd2VyY2FzZSBkb21haW4gbmFtZSBh bmQgcGF0dGVybiAqLworLSAgICAgICAgQ3VybF9zdHJudG9sb3dlcihsY2FzZSwgZG9tYWluLCBk bGVuICsgMSk7CistICAgICAgICBDdXJsX3N0cm50b2xvd2VyKGxjb29raWUsIGNvLT5kb21haW4s IGNsZW4gKyAxKTsKKysgICAgICAgIEN1cmxfc3RybnRvbG93ZXIobGNhc2UsIGRvbWFpbiwgZGxl bik7CisrICAgICAgICBsY2FzZVtkbGVuXSA9IDA7CisrICAgICAgICBDdXJsX3N0cm50b2xvd2Vy KGxjb29raWUsIGNvLT5kb21haW4sIGNsZW4pOworKyAgICAgICAgbGNvb2tpZVtjbGVuXSA9IDA7 CisgICAgICAgICBhY2NlcHRhYmxlID0gcHNsX2lzX2Nvb2tpZV9kb21haW5fYWNjZXB0YWJsZShw c2wsIGxjYXNlLCBsY29va2llKTsKKyAgICAgICAgIEN1cmxfcHNsX3JlbGVhc2UoZGF0YSk7Cisg ICAgICAgfQorZGlmZiAtLWdpdCBhL3Rlc3RzL2RhdGEvTWFrZWZpbGUuYW0gYi90ZXN0cy9kYXRh L01ha2VmaWxlLmFtCitpbmRleCA0OTY4NGZiNzM1Li5iNzg5YzlmMDA5IDEwMDY0NAorLS0tIGEv dGVzdHMvZGF0YS9NYWtlZmlsZS5hbQorKysrIGIvdGVzdHMvZGF0YS9NYWtlZmlsZS5hbQorQEAg LTIxNSw2ICsyMTUsNyBAQCB0ZXN0MTU5OCB0ZXN0MTU5OSB0ZXN0MTYwMCB0ZXN0MTYwMSB0ZXN0 MTYwMiB0ZXN0MTYwMyB0ZXN0MTYwNCB0ZXN0MTYwNSBcCisgdGVzdDE2MDYgdGVzdDE2MDcgdGVz dDE2MDggdGVzdDE2MDkgdGVzdDE2MTAgdGVzdDE2MTEgdGVzdDE2MTIgdGVzdDE2MTMgXAorIHRl c3QxNjE0IHRlc3QxNjE1IHRlc3QxNjE2IFwKKyB0ZXN0MTYyMCB0ZXN0MTYyMSBcCisrdGVzdDE2 MjkgXAorIFwKKyB0ZXN0MTYzMCB0ZXN0MTYzMSB0ZXN0MTYzMiB0ZXN0MTYzMyB0ZXN0MTYzNCB0 ZXN0MTYzNSBcCisgXAorZGlmZiAtLWdpdCBhL3Rlc3RzL2RhdGEvdGVzdDE2MjkgYi90ZXN0cy9k YXRhL3Rlc3QxNjI5CituZXcgZmlsZSBtb2RlIDEwMDY0NAoraW5kZXggMDAwMDAwMDAwMC4uNmVl NDc5YmEzMQorLS0tIC9kZXYvbnVsbAorKysrIGIvdGVzdHMvZGF0YS90ZXN0MTYyOQorQEAgLTAs MCArMSw2MSBAQAorKzw/eG1sIHZlcnNpb249IjEuMCIgZW5jb2Rpbmc9IlVTLUFTQ0lJIj8+Cisr PHRlc3RjYXNlPgorKzxpbmZvPgorKzxrZXl3b3Jkcz4KKytIVFRQCisrSFRUUCBHRVQKKys8L2tl eXdvcmRzPgorKzwvaW5mbz4KKysKKysjIFNlcnZlci1zaWRlCisrPHJlcGx5PgorKzxkYXRhIGNy bGY9ImhlYWRlcnMiPgorK0hUVFAvMS4xIDIwMCBPSworK0NvbnRlbnQtTGVuZ3RoOiA2CisrU2V0 LUNvb2tpZTogc29tZXRoaW5nPTE7IERvbWFpbj1jby51ay47IFBhdGg9LworKworKy1mb28tCisr PC9kYXRhPgorKworKzxkYXRhY2hlY2s+CisrSFRUUC8xLjEgMjAwIE9LCisrQ29udGVudC1MZW5n dGg6IDYKKytTZXQtQ29va2llOiBzb21ldGhpbmc9MTsgRG9tYWluPWNvLnVrLjsgUGF0aD0vCisr CisrLWZvby0KKys8L2RhdGFjaGVjaz4KKys8L3JlcGx5PgorKworKyMgQ2xpZW50LXNpZGUKKys8 Y2xpZW50PgorKzxmZWF0dXJlcz4KKytQU0wKKytjb29raWVzCisrPC9mZWF0dXJlcz4KKys8c2Vy dmVyPgorK2h0dHAKKys8L3NlcnZlcj4KKys8bmFtZT4KKytjb29raWVzIHdpdGggdHJhaWxpbmcg ZG90IGFmdGVyIFBTTCBkb21haW4KKys8L25hbWU+CisrPGNvbW1hbmQ+CisraHR0cDovL2Zvby5j by51ay46JUhUVFBQT1JULyBodHRwOi8vYmFyLmNvLnVrLjolSFRUUFBPUlQvIC1iICIiIC0tcmVz b2x2ZSBmb28uY28udWsuOiVIVFRQUE9SVDolSE9TVElQIC0tcmVzb2x2ZSBiYXIuY28udWsuOiVI VFRQUE9SVDolSE9TVElQCisrPC9jb21tYW5kPgorKzwvY2xpZW50PgorKworKyMgVmVyaWZ5IGRh dGEgYWZ0ZXIgdGhlIHRlc3QgaGFzIGJlZW4gInNob3QiCisrPHZlcmlmeT4KKys8cHJvdG9jb2wg Y3JsZj0iaGVhZGVycyI+CisrR0VUIC8gSFRUUC8xLjEKKytIb3N0OiBmb28uY28udWsuOiVIVFRQ UE9SVAorK1VzZXItQWdlbnQ6IGN1cmwvJVZFUlNJT04KKytBY2NlcHQ6ICovKgorKworK0dFVCAv IEhUVFAvMS4xCisrSG9zdDogYmFyLmNvLnVrLjolSFRUUFBPUlQKKytVc2VyLUFnZW50OiBjdXJs LyVWRVJTSU9OCisrQWNjZXB0OiAqLyoKKysKKys8L3Byb3RvY29sPgorKzwvdmVyaWZ5PgorKzwv dGVzdGNhc2U+CistLSAKKzIuNTUuMAorCgpkaWZmIC0tZ2l0IGEvY3VybC5zcGVjIGIvY3VybC5z cGVjCmluZGV4IDE0MGJjNDkuLjYxYTM5ZWUgMTAwNjQ0Ci0tLSBhL2N1cmwuc3BlYworKysgYi9j dXJsLnNwZWMKQEAgLTQ5LDYgKzQ5LDkgQEAgUGF0Y2gwMTA6IDAwMTAtY3VybC04LjE1LjAtQ1ZF LTIwMjYtODkyNi5wYXRjaAogIyBmaXggU1NIIGltcHJvcGVyIGhvc3QgdmFsaWRhdGlvbiAoQ1ZF LTIwMjYtOTU0NykKIFBhdGNoMDExOiAwMDExLWN1cmwtOC4xNS4wLUNWRS0yMDI2LTk1NDcucGF0 Y2gKIAorIyBmaXggdHJhaWxpbmcgZG90IGRvbWFpbiBzdXBlciBjb29raWUgKENWRS0yMDI2LTg5 MjQpCitQYXRjaDAxMjogMDAxMi1jdXJsLTguMTUuMC1DVkUtMjAyNi04OTI0LnBhdGNoCisKICMg cGF0Y2ggbWFraW5nIGxpYmN1cmwgbXVsdGlsaWIgcmVhZHkKIFBhdGNoMTAxOiAwMTAxLWN1cmwt Ny4zMi4wLW11bHRpbGliLnBhdGNoCiAKQEAgLTQ1Myw2ICs0NTYsNyBAQCBybSAtZiAke1JQTV9C VUlMRF9ST09UfSV7X21hbmRpcn0vbWFuMS93Y3VybC4xKgogLSBmaXggY3Jvc3Mtb3JpZ2luIERp Z2VzdCBhdXRoIHN0YXRlIGxlYWsgKENWRS0yMDI2LTExODU2KQogLSBmaXggcGFzc3dvcmQgbGVh ayB3aXRoIG5ldHJjIGFuZCB1c2VyIGluIFVSTCAoQ1ZFLTIwMjYtODkyNikKIC0gZml4IFNTSCBp bXByb3BlciBob3N0IHZhbGlkYXRpb24gKENWRS0yMDI2LTk1NDcpCistIGZpeCB0cmFpbGluZyBk b3QgZG9tYWluIHN1cGVyIGNvb2tpZSAoQ1ZFLTIwMjYtODkyNCkKIAogKiBNb24gTWF5IDExIDIw MjYgSmFuIE1hY2t1IDxqYW1hY2t1QHJlZGhhdC5jb20+IC0gOC4xNS4wLTcKIC0gZml4IE91dCBv ZiBib3VuZHMgcmVhZCBmb3IgY29va2llIHBhdGggKENWRS0yMDI1LTkwODYpCg==