From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Peter Lemenkov To: git-commits@fedoraproject.org Subject: [rpms/libgsasl] rawhide: Fix CVE-2026-48829 Date: Fri, 07 Aug 2026 11:07:32 GMT Message-ID: <178610085292.1.8126897114459225409.rpms-libgsasl-957322061f85@fedoraproject.org> List-ID: X-Git-Repo: rpms/libgsasl X-Git-Branch: rawhide X-Git-Rev: 957322061f857452d462c3711d719b6f8d79d1a8 ICAgICAgICAgICAgQSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KCiAgICAgICAgICAgIFJl cG8gICA6IHJwbXMvbGliZ3Nhc2wKICAgICAgICAgICAgQnJhbmNoIDogcmF3aGlkZQogICAgICAg ICAgICBDb21taXQgOiA5NTczMjIwNjFmODU3NDUyZDQ2MmMzNzExZDcxOWI2ZjhkNzlkMWE4CiAg ICAgICAgICAgIEF1dGhvciA6IFBldGVyIExlbWVua292IDxsZW1lbmtvdkBnbWFpbC5jb20+CiAg ICAgICAgICAgIERhdGUgICA6IDIwMjYtMDgtMDdUMTI6NTc6MjkrMDI6MDAKICAgICAgICAgICAg U3RhdHMgIDogKzQ4Ly0yOCBpbiA0IGZpbGUocykKICAgICAgICAgICAgVVJMICAgIDogaHR0cHM6 Ly9zcmMuZmVkb3JhcHJvamVjdC5vcmcvcnBtcy9saWJnc2FzbC9jLzk1NzMyMjA2MWY4NTc0NTJk NDYyYzM3MTFkNzE5YjZmOGQ3OWQxYTg/YnJhbmNoPXJhd2hpZGUKCiAgICAgICAgICAgIExvZzoK ICAgICAgICAgICAgRml4IENWRS0yMDI2LTQ4ODI5CgpTaWduZWQtb2ZmLWJ5OiBQZXRlciBMZW1l bmtvdiA8bGVtZW5rb3ZAZ21haWwuY29tPgoKLS0tCmRpZmYgLS1naXQgYS8wMDAxLUdTU0FQSS1z ZXJ2ZXItQm91bmRhcnktY2hlY2stZ3NzX3dyYXAtdG9rZW4tcmVhZC1PT0IucGF0Y2ggYi8wMDAx LUdTU0FQSS1zZXJ2ZXItQm91bmRhcnktY2hlY2stZ3NzX3dyYXAtdG9rZW4tcmVhZC1PT0IucGF0 Y2gKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXggMDAwMDAwMC4uODU5Y2Y1NgotLS0gL2Rldi9u dWxsCisrKyBiLzAwMDEtR1NTQVBJLXNlcnZlci1Cb3VuZGFyeS1jaGVjay1nc3Nfd3JhcC10b2tl bi1yZWFkLU9PQi5wYXRjaApAQCAtMCwwICsxLDIwIEBACitGcm9tIDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAgTW9uIFNlcCAxNyAwMDowMDowMCAyMDAxCitGcm9tOiBT aW1vbiBKb3NlZnNzb24gPHNpbW9uQGpvc2Vmc3Nvbi5vcmc+CitEYXRlOiBGcmksIDE1IEp1bCAy MDIyIDE2OjIzOjU4ICswMjAwCitTdWJqZWN0OiBbUEFUQ0hdIEdTU0FQSSBzZXJ2ZXI6IEJvdW5k YXJ5IGNoZWNrIGdzc193cmFwIHRva2VuIChyZWFkIE9PQikuCisKKworZGlmZiAtLWdpdCBhL2xp Yi9nc3NhcGkvc2VydmVyLmMgYi9saWIvZ3NzYXBpL3NlcnZlci5jCitpbmRleCA0YTVkZmQ3Yi4u YTkzZTQ1NGEgMTAwNjQ0CistLS0gYS9saWIvZ3NzYXBpL3NlcnZlci5jCisrKysgYi9saWIvZ3Nz YXBpL3NlcnZlci5jCitAQCAtMjI1LDYgKzIyNSw5IEBAIF9nc2FzbF9nc3NhcGlfc2VydmVyX3N0 ZXAgKEdzYXNsX3Nlc3Npb24gKiBzY3R4LAorICAgICAgICAgIEZBTFNFLCBhbmQgcmVzcG9uZHMg d2l0aCB0aGUgZ2VuZXJhdGVkIG91dHB1dF9tZXNzYWdlLiAgVGhlCisgICAgICAgICAgY2xpZW50 IGNhbiB0aGVuIGNvbnNpZGVyIHRoZSBzZXJ2ZXIgYXV0aGVudGljYXRlZC4gKi8KKyAKKysgICAg ICBpZiAoYnVmZGVzYzIubGVuZ3RoIDwgNCkKKysJcmV0dXJuIEdTQVNMX0FVVEhFTlRJQ0FUSU9O X0VSUk9SOworKworICAgICAgIGlmICgoKChjaGFyICopIGJ1ZmRlc2MyLnZhbHVlKVswXSAmIEdT QVNMX1FPUF9BVVRIKSA9PSAwKQorIAl7CisgCSAgLyogSW50ZWdyaXR5IG9yIHByaXZhY3kgdW5z dXBwb3J0ZWQgKi8KCmRpZmYgLS1naXQgYS8wMDAxLWZpeC1nc3NhcGktc2VydmVyLW9vYi5wYXRj aCBiLzAwMDEtZml4LWdzc2FwaS1zZXJ2ZXItb29iLnBhdGNoCmRlbGV0ZWQgZmlsZSBtb2RlIDEw MDY0NAppbmRleCA4NTBmMzkyLi4wMDAwMDAwCi0tLSBhLzAwMDEtZml4LWdzc2FwaS1zZXJ2ZXIt b29iLnBhdGNoCisrKyAvZGV2L251bGwKQEAgLTEsMjYgKzAsMCBAQAotRnJvbTogU2ltb24gSm9z ZWZzc29uIDxzaW1vbkBqb3NlZnNzb24ub3JnPgotRGF0ZTogRnJpLCAxNSBKdWwgMjAyMiAxNjoy Mzo1OCArMDIwMAotU3ViamVjdDogW1BBVENIXSBHU1NBUEkgc2VydmVyOiBCb3VuZGFyeSBjaGVj ayBnc3Nfd3JhcCB0b2tlbiAocmVhZCBPT0IpLgotT3JpZ2luOiB1cHN0cmVhbSwgaHR0cHM6Ly9n aXRsYWIuY29tL2dzYXNsL2dzYXNsLy0vY29tbWl0Lzc5NmU0MTk3ZjY5NjI2MWMxZjg3MmQ3NTc2 MzcxMjMyMzMwYmNjMzAKLQotLS0tCi0gbGliL2dzc2FwaS9zZXJ2ZXIuYyB8IDMgKysrCi0gMSBm aWxlIGNoYW5nZWQsIDMgaW5zZXJ0aW9ucygrKQotCi1kaWZmIC0tZ2l0IGEvbGliL2dzc2FwaS9z ZXJ2ZXIuYyBiL2xpYi9nc3NhcGkvc2VydmVyLmMKLWluZGV4IDU0MTAzNjBiLi40ZWJmZGE0NyAx MDA2NDQKLS0tLSBhL2xpYi9nc3NhcGkvc2VydmVyLmMKLSsrKyBiL2xpYi9nc3NhcGkvc2VydmVy LmMKLUBAIC0yMTgsNiArMjE4LDkgQEAgX2dzYXNsX2dzc2FwaV9zZXJ2ZXJfc3RlcCAoR3Nhc2xf c2Vzc2lvbiAqIHNjdHgsCi0gICAgICAgICAgRkFMU0UsIGFuZCByZXNwb25kcyB3aXRoIHRoZSBn ZW5lcmF0ZWQgb3V0cHV0X21lc3NhZ2UuICBUaGUKLSAgICAgICAgICBjbGllbnQgY2FuIHRoZW4g Y29uc2lkZXIgdGhlIHNlcnZlciBhdXRoZW50aWNhdGVkLiAqLwotIAotKyAgICAgIGlmIChidWZk ZXNjMi5sZW5ndGggPCA0KQotKwlyZXR1cm4gR1NBU0xfQVVUSEVOVElDQVRJT05fRVJST1I7Ci0r Ci0gICAgICAgaWYgKCgoKGNoYXIgKikgYnVmZGVzYzIudmFsdWUpWzBdICYgR1NBU0xfUU9QX0FV VEgpID09IDApCi0gCXsKLSAJICAvKiBJbnRlZ3JpdHkgb3IgcHJpdmFjeSB1bnN1cHBvcnRlZCAq LwotLS0gCi0yLjMwLjIKLQoKZGlmZiAtLWdpdCBhLzAwMDItRml4LU5VTEwtcG9pbnRlci1kZXJl ZmVyZW5jZS1pbi1ESUdFU1QtTUQ1LXBhcnNlci5wYXRjaCBiLzAwMDItRml4LU5VTEwtcG9pbnRl ci1kZXJlZmVyZW5jZS1pbi1ESUdFU1QtTUQ1LXBhcnNlci5wYXRjaApuZXcgZmlsZSBtb2RlIDEw MDY0NAppbmRleCAwMDAwMDAwLi5hOWVkZDY2Ci0tLSAvZGV2L251bGwKKysrIGIvMDAwMi1GaXgt TlVMTC1wb2ludGVyLWRlcmVmZXJlbmNlLWluLURJR0VTVC1NRDUtcGFyc2VyLnBhdGNoCkBAIC0w LDAgKzEsMjIgQEAKK0Zyb20gMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MCBNb24gU2VwIDE3IDAwOjAwOjAwIDIwMDEKK0Zyb206IHpoYW5ncGggPHpoYW5ncGgxMjEzOEAx NjMuY29tPgorRGF0ZTogV2VkLCAxMyBNYXkgMjAyNiAwOToyMDozMSArMDIwMAorU3ViamVjdDog W1BBVENIXSBGaXggTlVMTCBwb2ludGVyIGRlcmVmZXJlbmNlIGluIERJR0VTVC1NRDUgcGFyc2Vy CisKK2h0dHBzOi8vbGlzdHMuZ251Lm9yZy9hcmNoaXZlL2h0bWwvaGVscC1nc2FzbC8yMDI2LTA1 L21zZzAwMDAwLmh0bWwKKworU2lnbmVkLW9mZi1ieTogU2ltb24gSm9zZWZzc29uIDxzaW1vbkBq b3NlZnNzb24ub3JnPgorCitkaWZmIC0tZ2l0IGEvbGliL2RpZ2VzdC1tZDUvZ2V0c3Vib3B0LmMg Yi9saWIvZGlnZXN0LW1kNS9nZXRzdWJvcHQuYworaW5kZXggMWE2N2VjOGIuLmIxYTRjZTM1IDEw MDY0NAorLS0tIGEvbGliL2RpZ2VzdC1tZDUvZ2V0c3Vib3B0LmMKKysrKyBiL2xpYi9kaWdlc3Qt bWQ1L2dldHN1Ym9wdC5jCitAQCAtNzQsNyArNzQsNyBAQCBkaWdlc3RfbWQ1X2dldHN1Ym9wdCAo Y2hhciAqKm9wdGlvbnAsCisgCSYmIHRva2Vuc1tjbnRdW3ZzdGFydCAtICpvcHRpb25wXSA9PSAn XDAnKQorICAgICAgIHsKKyAJLyogV2UgZm91bmQgdGhlIGN1cnJlbnQgb3B0aW9uIGluIFRPS0VO Uy4gICovCistCSp2YWx1ZXAgPSB2c3RhcnQgIT0gZW5kcCA/IHZzdGFydCArIDEgOiBOVUxMOwor KwkqdmFsdWVwID0gdnN0YXJ0ICE9IGVuZHAgPyB2c3RhcnQgKyAxIDogKGNoYXIgKikgIiI7Cisg CisgCXdoaWxlICgqdmFsdWVwICYmICgqKnZhbHVlcCA9PSAnICcgfHwKKyAJCQkgICAqKnZhbHVl cCA9PSAnXHQnIHx8CgpkaWZmIC0tZ2l0IGEvbGliZ3Nhc2wuc3BlYyBiL2xpYmdzYXNsLnNwZWMK aW5kZXggZDc0YzM4ZS4uMjAzOWI1NCAxMDA2NDQKLS0tIGEvbGliZ3Nhc2wuc3BlYworKysgYi9s aWJnc2FzbC5zcGVjCkBAIC0xLDEzICsxLDE0IEBACiBOYW1lOiAgICAgICAgICAgbGliZ3Nhc2wK IFZlcnNpb246ICAgICAgICAxLjEwLjAKLVJlbGVhc2U6ICAgICAgICAxNiV7P2Rpc3R9CitSZWxl YXNlOiAgICAgICAgMTclez9kaXN0fQogU3VtbWFyeTogICAgICAgIEdOVSBTQVNMIGxpYnJhcnkK IExpY2Vuc2U6ICAgICAgICBMR1BMLTIuMS1vci1sYXRlcgogVVJMOiAgICAgICAgICAgIGh0dHBz Oi8vd3d3LmdudS5vcmcvc29mdHdhcmUvZ3Nhc2wvCiBTb3VyY2UwOiAgICAgICAgaHR0cHM6Ly9m dHAuZ251Lm9yZy9nbnUvZ3Nhc2wvJXtuYW1lfS0le3ZlcnNpb259LnRhci5negogU291cmNlMTog ICAgICAgIGh0dHBzOi8vZnRwLmdudS5vcmcvZ251L2dzYXNsLyV7bmFtZX0tJXt2ZXJzaW9ufS50 YXIuZ3ouc2lnCiBTb3VyY2UyOiAgICAgICAgaHR0cHM6Ly9qb3NlZnNzb24ub3JnLzU0MjY1ZThj LnR4dAotUGF0Y2g6ICAgICAgICAgIDAwMDEtZml4LWdzc2FwaS1zZXJ2ZXItb29iLnBhdGNoCitQ YXRjaDogICAgICAgICAgMDAwMS1HU1NBUEktc2VydmVyLUJvdW5kYXJ5LWNoZWNrLWdzc193cmFw LXRva2VuLXJlYWQtT09CLnBhdGNoCitQYXRjaDogICAgICAgICAgMDAwMi1GaXgtTlVMTC1wb2lu dGVyLWRlcmVmZXJlbmNlLWluLURJR0VTVC1NRDUtcGFyc2VyLnBhdGNoCiBCdWlsZFJlcXVpcmVz OiAgZ2NjCiAjIGZvciAlJWdwZ3ZlcmlmeQogQnVpbGRSZXF1aXJlczogIGdudXBnMgpAQCAtNjAs NiArNjEsOSBAQCBmaW5kICV7YnVpbGRyb290fSAtbmFtZSAnKi5sYScgLWV4ZWMgcm0gLWYge30g JzsnCiAle19saWJkaXJ9L3BrZ2NvbmZpZy9saWJnc2FzbC5wYwogCiAlY2hhbmdlbG9nCisqIEZy aSBBdWcgIDcgMjAyNiBQZXRlciBMZW1lbmtvdiA8bGVtZW5rb3ZAZ21haWwuY29tPiAtIDEuMTAu MC0xNworLSBGaXggQ1ZFLTIwMjYtNDg4MjkKKwogKiBUaHUgSnVsIDE2IDIwMjYgRmVkb3JhIFJl bGVhc2UgRW5naW5lZXJpbmcgPHJlbGVuZ0BmZWRvcmFwcm9qZWN0Lm9yZz4gLSAxLjEwLjAtMTYK IC0gUmVidWlsdCBmb3IgaHR0cHM6Ly9mZWRvcmFwcm9qZWN0Lm9yZy93aWtpL0ZlZG9yYV80NV9N YXNzX1JlYnVpbGQKIAo=