From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Peter Lemenkov To: git-commits@fedoraproject.org Subject: [rpms/libgsasl] f43: Fix CVE-2026-48829 Date: Fri, 07 Aug 2026 11:08:16 GMT Message-ID: <178610089618.1.2026318983645572504.rpms-libgsasl-957322061f85@fedoraproject.org> List-ID: X-Git-Repo: rpms/libgsasl X-Git-Branch: f43 X-Git-Rev: 957322061f857452d462c3711d719b6f8d79d1a8 ICAgICAgICAgICAgQSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KCiAgICAgICAgICAgIFJl cG8gICA6IHJwbXMvbGliZ3Nhc2wKICAgICAgICAgICAgQnJhbmNoIDogZjQzCiAgICAgICAgICAg IENvbW1pdCA6IDk1NzMyMjA2MWY4NTc0NTJkNDYyYzM3MTFkNzE5YjZmOGQ3OWQxYTgKICAgICAg ICAgICAgQXV0aG9yIDogUGV0ZXIgTGVtZW5rb3YgPGxlbWVua292QGdtYWlsLmNvbT4KICAgICAg ICAgICAgRGF0ZSAgIDogMjAyNi0wOC0wN1QxMjo1NzoyOSswMjowMAogICAgICAgICAgICBTdGF0 cyAgOiArNDgvLTI4IGluIDQgZmlsZShzKQogICAgICAgICAgICBVUkwgICAgOiBodHRwczovL3Ny Yy5mZWRvcmFwcm9qZWN0Lm9yZy9ycG1zL2xpYmdzYXNsL2MvOTU3MzIyMDYxZjg1NzQ1MmQ0NjJj MzcxMWQ3MTliNmY4ZDc5ZDFhOD9icmFuY2g9ZjQzCgogICAgICAgICAgICBMb2c6CiAgICAgICAg ICAgIEZpeCBDVkUtMjAyNi00ODgyOQoKU2lnbmVkLW9mZi1ieTogUGV0ZXIgTGVtZW5rb3YgPGxl bWVua292QGdtYWlsLmNvbT4KCi0tLQpkaWZmIC0tZ2l0IGEvMDAwMS1HU1NBUEktc2VydmVyLUJv dW5kYXJ5LWNoZWNrLWdzc193cmFwLXRva2VuLXJlYWQtT09CLnBhdGNoIGIvMDAwMS1HU1NBUEkt c2VydmVyLUJvdW5kYXJ5LWNoZWNrLWdzc193cmFwLXRva2VuLXJlYWQtT09CLnBhdGNoCm5ldyBm aWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAwMDAwMDAuLjg1OWNmNTYKLS0tIC9kZXYvbnVsbAorKysg Yi8wMDAxLUdTU0FQSS1zZXJ2ZXItQm91bmRhcnktY2hlY2stZ3NzX3dyYXAtdG9rZW4tcmVhZC1P T0IucGF0Y2gKQEAgLTAsMCArMSwyMCBAQAorRnJvbSAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwIE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQorRnJvbTogU2ltb24gSm9z ZWZzc29uIDxzaW1vbkBqb3NlZnNzb24ub3JnPgorRGF0ZTogRnJpLCAxNSBKdWwgMjAyMiAxNjoy Mzo1OCArMDIwMAorU3ViamVjdDogW1BBVENIXSBHU1NBUEkgc2VydmVyOiBCb3VuZGFyeSBjaGVj ayBnc3Nfd3JhcCB0b2tlbiAocmVhZCBPT0IpLgorCisKK2RpZmYgLS1naXQgYS9saWIvZ3NzYXBp L3NlcnZlci5jIGIvbGliL2dzc2FwaS9zZXJ2ZXIuYworaW5kZXggNGE1ZGZkN2IuLmE5M2U0NTRh IDEwMDY0NAorLS0tIGEvbGliL2dzc2FwaS9zZXJ2ZXIuYworKysrIGIvbGliL2dzc2FwaS9zZXJ2 ZXIuYworQEAgLTIyNSw2ICsyMjUsOSBAQCBfZ3Nhc2xfZ3NzYXBpX3NlcnZlcl9zdGVwIChHc2Fz bF9zZXNzaW9uICogc2N0eCwKKyAgICAgICAgICBGQUxTRSwgYW5kIHJlc3BvbmRzIHdpdGggdGhl IGdlbmVyYXRlZCBvdXRwdXRfbWVzc2FnZS4gIFRoZQorICAgICAgICAgIGNsaWVudCBjYW4gdGhl biBjb25zaWRlciB0aGUgc2VydmVyIGF1dGhlbnRpY2F0ZWQuICovCisgCisrICAgICAgaWYgKGJ1 ZmRlc2MyLmxlbmd0aCA8IDQpCisrCXJldHVybiBHU0FTTF9BVVRIRU5USUNBVElPTl9FUlJPUjsK KysKKyAgICAgICBpZiAoKCgoY2hhciAqKSBidWZkZXNjMi52YWx1ZSlbMF0gJiBHU0FTTF9RT1Bf QVVUSCkgPT0gMCkKKyAJeworIAkgIC8qIEludGVncml0eSBvciBwcml2YWN5IHVuc3VwcG9ydGVk ICovCgpkaWZmIC0tZ2l0IGEvMDAwMS1maXgtZ3NzYXBpLXNlcnZlci1vb2IucGF0Y2ggYi8wMDAx LWZpeC1nc3NhcGktc2VydmVyLW9vYi5wYXRjaApkZWxldGVkIGZpbGUgbW9kZSAxMDA2NDQKaW5k ZXggODUwZjM5Mi4uMDAwMDAwMAotLS0gYS8wMDAxLWZpeC1nc3NhcGktc2VydmVyLW9vYi5wYXRj aAorKysgL2Rldi9udWxsCkBAIC0xLDI2ICswLDAgQEAKLUZyb206IFNpbW9uIEpvc2Vmc3NvbiA8 c2ltb25Aam9zZWZzc29uLm9yZz4KLURhdGU6IEZyaSwgMTUgSnVsIDIwMjIgMTY6MjM6NTggKzAy MDAKLVN1YmplY3Q6IFtQQVRDSF0gR1NTQVBJIHNlcnZlcjogQm91bmRhcnkgY2hlY2sgZ3NzX3dy YXAgdG9rZW4gKHJlYWQgT09CKS4KLU9yaWdpbjogdXBzdHJlYW0sIGh0dHBzOi8vZ2l0bGFiLmNv bS9nc2FzbC9nc2FzbC8tL2NvbW1pdC83OTZlNDE5N2Y2OTYyNjFjMWY4NzJkNzU3NjM3MTIzMjMz MGJjYzMwCi0KLS0tLQotIGxpYi9nc3NhcGkvc2VydmVyLmMgfCAzICsrKwotIDEgZmlsZSBjaGFu Z2VkLCAzIGluc2VydGlvbnMoKykKLQotZGlmZiAtLWdpdCBhL2xpYi9nc3NhcGkvc2VydmVyLmMg Yi9saWIvZ3NzYXBpL3NlcnZlci5jCi1pbmRleCA1NDEwMzYwYi4uNGViZmRhNDcgMTAwNjQ0Ci0t LS0gYS9saWIvZ3NzYXBpL3NlcnZlci5jCi0rKysgYi9saWIvZ3NzYXBpL3NlcnZlci5jCi1AQCAt MjE4LDYgKzIxOCw5IEBAIF9nc2FzbF9nc3NhcGlfc2VydmVyX3N0ZXAgKEdzYXNsX3Nlc3Npb24g KiBzY3R4LAotICAgICAgICAgIEZBTFNFLCBhbmQgcmVzcG9uZHMgd2l0aCB0aGUgZ2VuZXJhdGVk IG91dHB1dF9tZXNzYWdlLiAgVGhlCi0gICAgICAgICAgY2xpZW50IGNhbiB0aGVuIGNvbnNpZGVy IHRoZSBzZXJ2ZXIgYXV0aGVudGljYXRlZC4gKi8KLSAKLSsgICAgICBpZiAoYnVmZGVzYzIubGVu Z3RoIDwgNCkKLSsJcmV0dXJuIEdTQVNMX0FVVEhFTlRJQ0FUSU9OX0VSUk9SOwotKwotICAgICAg IGlmICgoKChjaGFyICopIGJ1ZmRlc2MyLnZhbHVlKVswXSAmIEdTQVNMX1FPUF9BVVRIKSA9PSAw KQotIAl7Ci0gCSAgLyogSW50ZWdyaXR5IG9yIHByaXZhY3kgdW5zdXBwb3J0ZWQgKi8KLS0tIAot Mi4zMC4yCi0KCmRpZmYgLS1naXQgYS8wMDAyLUZpeC1OVUxMLXBvaW50ZXItZGVyZWZlcmVuY2Ut aW4tRElHRVNULU1ENS1wYXJzZXIucGF0Y2ggYi8wMDAyLUZpeC1OVUxMLXBvaW50ZXItZGVyZWZl cmVuY2UtaW4tRElHRVNULU1ENS1wYXJzZXIucGF0Y2gKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5k ZXggMDAwMDAwMC4uYTllZGQ2NgotLS0gL2Rldi9udWxsCisrKyBiLzAwMDItRml4LU5VTEwtcG9p bnRlci1kZXJlZmVyZW5jZS1pbi1ESUdFU1QtTUQ1LXBhcnNlci5wYXRjaApAQCAtMCwwICsxLDIy IEBACitGcm9tIDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAgTW9uIFNl cCAxNyAwMDowMDowMCAyMDAxCitGcm9tOiB6aGFuZ3BoIDx6aGFuZ3BoMTIxMzhAMTYzLmNvbT4K K0RhdGU6IFdlZCwgMTMgTWF5IDIwMjYgMDk6MjA6MzEgKzAyMDAKK1N1YmplY3Q6IFtQQVRDSF0g Rml4IE5VTEwgcG9pbnRlciBkZXJlZmVyZW5jZSBpbiBESUdFU1QtTUQ1IHBhcnNlcgorCitodHRw czovL2xpc3RzLmdudS5vcmcvYXJjaGl2ZS9odG1sL2hlbHAtZ3Nhc2wvMjAyNi0wNS9tc2cwMDAw MC5odG1sCisKK1NpZ25lZC1vZmYtYnk6IFNpbW9uIEpvc2Vmc3NvbiA8c2ltb25Aam9zZWZzc29u Lm9yZz4KKworZGlmZiAtLWdpdCBhL2xpYi9kaWdlc3QtbWQ1L2dldHN1Ym9wdC5jIGIvbGliL2Rp Z2VzdC1tZDUvZ2V0c3Vib3B0LmMKK2luZGV4IDFhNjdlYzhiLi5iMWE0Y2UzNSAxMDA2NDQKKy0t LSBhL2xpYi9kaWdlc3QtbWQ1L2dldHN1Ym9wdC5jCisrKysgYi9saWIvZGlnZXN0LW1kNS9nZXRz dWJvcHQuYworQEAgLTc0LDcgKzc0LDcgQEAgZGlnZXN0X21kNV9nZXRzdWJvcHQgKGNoYXIgKipv cHRpb25wLAorIAkmJiB0b2tlbnNbY250XVt2c3RhcnQgLSAqb3B0aW9ucF0gPT0gJ1wwJykKKyAg ICAgICB7CisgCS8qIFdlIGZvdW5kIHRoZSBjdXJyZW50IG9wdGlvbiBpbiBUT0tFTlMuICAqLwor LQkqdmFsdWVwID0gdnN0YXJ0ICE9IGVuZHAgPyB2c3RhcnQgKyAxIDogTlVMTDsKKysJKnZhbHVl cCA9IHZzdGFydCAhPSBlbmRwID8gdnN0YXJ0ICsgMSA6IChjaGFyICopICIiOworIAorIAl3aGls ZSAoKnZhbHVlcCAmJiAoKip2YWx1ZXAgPT0gJyAnIHx8CisgCQkJICAgKip2YWx1ZXAgPT0gJ1x0 JyB8fAoKZGlmZiAtLWdpdCBhL2xpYmdzYXNsLnNwZWMgYi9saWJnc2FzbC5zcGVjCmluZGV4IGQ3 NGMzOGUuLjIwMzliNTQgMTAwNjQ0Ci0tLSBhL2xpYmdzYXNsLnNwZWMKKysrIGIvbGliZ3Nhc2wu c3BlYwpAQCAtMSwxMyArMSwxNCBAQAogTmFtZTogICAgICAgICAgIGxpYmdzYXNsCiBWZXJzaW9u OiAgICAgICAgMS4xMC4wCi1SZWxlYXNlOiAgICAgICAgMTYlez9kaXN0fQorUmVsZWFzZTogICAg ICAgIDE3JXs/ZGlzdH0KIFN1bW1hcnk6ICAgICAgICBHTlUgU0FTTCBsaWJyYXJ5CiBMaWNlbnNl OiAgICAgICAgTEdQTC0yLjEtb3ItbGF0ZXIKIFVSTDogICAgICAgICAgICBodHRwczovL3d3dy5n bnUub3JnL3NvZnR3YXJlL2dzYXNsLwogU291cmNlMDogICAgICAgIGh0dHBzOi8vZnRwLmdudS5v cmcvZ251L2dzYXNsLyV7bmFtZX0tJXt2ZXJzaW9ufS50YXIuZ3oKIFNvdXJjZTE6ICAgICAgICBo dHRwczovL2Z0cC5nbnUub3JnL2dudS9nc2FzbC8le25hbWV9LSV7dmVyc2lvbn0udGFyLmd6LnNp ZwogU291cmNlMjogICAgICAgIGh0dHBzOi8vam9zZWZzc29uLm9yZy81NDI2NWU4Yy50eHQKLVBh dGNoOiAgICAgICAgICAwMDAxLWZpeC1nc3NhcGktc2VydmVyLW9vYi5wYXRjaAorUGF0Y2g6ICAg ICAgICAgIDAwMDEtR1NTQVBJLXNlcnZlci1Cb3VuZGFyeS1jaGVjay1nc3Nfd3JhcC10b2tlbi1y ZWFkLU9PQi5wYXRjaAorUGF0Y2g6ICAgICAgICAgIDAwMDItRml4LU5VTEwtcG9pbnRlci1kZXJl ZmVyZW5jZS1pbi1ESUdFU1QtTUQ1LXBhcnNlci5wYXRjaAogQnVpbGRSZXF1aXJlczogIGdjYwog IyBmb3IgJSVncGd2ZXJpZnkKIEJ1aWxkUmVxdWlyZXM6ICBnbnVwZzIKQEAgLTYwLDYgKzYxLDkg QEAgZmluZCAle2J1aWxkcm9vdH0gLW5hbWUgJyoubGEnIC1leGVjIHJtIC1mIHt9ICc7JwogJXtf bGliZGlyfS9wa2djb25maWcvbGliZ3Nhc2wucGMKIAogJWNoYW5nZWxvZworKiBGcmkgQXVnICA3 IDIwMjYgUGV0ZXIgTGVtZW5rb3YgPGxlbWVua292QGdtYWlsLmNvbT4gLSAxLjEwLjAtMTcKKy0g Rml4IENWRS0yMDI2LTQ4ODI5CisKICogVGh1IEp1bCAxNiAyMDI2IEZlZG9yYSBSZWxlYXNlIEVu Z2luZWVyaW5nIDxyZWxlbmdAZmVkb3JhcHJvamVjdC5vcmc+IC0gMS4xMC4wLTE2CiAtIFJlYnVp bHQgZm9yIGh0dHBzOi8vZmVkb3JhcHJvamVjdC5vcmcvd2lraS9GZWRvcmFfNDVfTWFzc19SZWJ1 aWxkCiAK