From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Peter Lemenkov To: git-commits@fedoraproject.org Subject: [rpms/libgsasl] epel8: Fix CVE-2026-48829 Date: Fri, 07 Aug 2026 11:31:08 GMT Message-ID: <178610226831.1.14069390069242608203.rpms-libgsasl-fda6a28949fa@fedoraproject.org> List-ID: X-Git-Repo: rpms/libgsasl X-Git-Branch: epel8 X-Git-Rev: fda6a28949fac978c0a9ec064b1889c367462e61 ICAgICAgICAgICAgQSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KCiAgICAgICAgICAgIFJl cG8gICA6IHJwbXMvbGliZ3Nhc2wKICAgICAgICAgICAgQnJhbmNoIDogZXBlbDgKICAgICAgICAg ICAgQ29tbWl0IDogZmRhNmEyODk0OWZhYzk3OGMwYTllYzA2NGIxODg5YzM2NzQ2MmU2MQogICAg ICAgICAgICBBdXRob3IgOiBQZXRlciBMZW1lbmtvdiA8bGVtZW5rb3ZAZ21haWwuY29tPgogICAg ICAgICAgICBEYXRlICAgOiAyMDI2LTA4LTA3VDEzOjMwOjI1KzAyOjAwCiAgICAgICAgICAgIFN0 YXRzICA6ICs0OS8tMjggaW4gNCBmaWxlKHMpCiAgICAgICAgICAgIFVSTCAgICA6IGh0dHBzOi8v c3JjLmZlZG9yYXByb2plY3Qub3JnL3JwbXMvbGliZ3Nhc2wvYy9mZGE2YTI4OTQ5ZmFjOTc4YzBh OWVjMDY0YjE4ODljMzY3NDYyZTYxP2JyYW5jaD1lcGVsOAoKICAgICAgICAgICAgTG9nOgogICAg ICAgICAgICBGaXggQ1ZFLTIwMjYtNDg4MjkKClNpZ25lZC1vZmYtYnk6IFBldGVyIExlbWVua292 IDxsZW1lbmtvdkBnbWFpbC5jb20+CgotLS0KZGlmZiAtLWdpdCBhLzAwMDEtR1NTQVBJLXNlcnZl ci1Cb3VuZGFyeS1jaGVjay1nc3Nfd3JhcC10b2tlbi1yZWFkLU9PQi5wYXRjaCBiLzAwMDEtR1NT QVBJLXNlcnZlci1Cb3VuZGFyeS1jaGVjay1nc3Nfd3JhcC10b2tlbi1yZWFkLU9PQi5wYXRjaApu ZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwLi42OWExNGNiCi0tLSAvZGV2L251bGwK KysrIGIvMDAwMS1HU1NBUEktc2VydmVyLUJvdW5kYXJ5LWNoZWNrLWdzc193cmFwLXRva2VuLXJl YWQtT09CLnBhdGNoCkBAIC0wLDAgKzEsMjAgQEAKK0Zyb20gMDAwMDAwMDAwMDAwMDAwMDAwMDAw MDAwMDAwMDAwMDAwMDAwMDAwMCBNb24gU2VwIDE3IDAwOjAwOjAwIDIwMDEKK0Zyb206IFNpbW9u IEpvc2Vmc3NvbiA8c2ltb25Aam9zZWZzc29uLm9yZz4KK0RhdGU6IEZyaSwgMTUgSnVsIDIwMjIg MTY6MjM6NTggKzAyMDAKK1N1YmplY3Q6IFtQQVRDSF0gR1NTQVBJIHNlcnZlcjogQm91bmRhcnkg Y2hlY2sgZ3NzX3dyYXAgdG9rZW4gKHJlYWQgT09CKS4KKworCitkaWZmIC0tZ2l0IGEvbGliL2dz c2FwaS9zZXJ2ZXIuYyBiL2xpYi9nc3NhcGkvc2VydmVyLmMKK2luZGV4IDVkY2E1ZGMzLi40ZDg2 MWM2ZSAxMDA2NDQKKy0tLSBhL2xpYi9nc3NhcGkvc2VydmVyLmMKKysrKyBiL2xpYi9nc3NhcGkv c2VydmVyLmMKK0BAIC0yMzIsNiArMjMyLDkgQEAgX2dzYXNsX2dzc2FwaV9zZXJ2ZXJfc3RlcCAo R3Nhc2xfc2Vzc2lvbiAqIHNjdHgsCisgICAgICAgICAgRkFMU0UsIGFuZCByZXNwb25kcyB3aXRo IHRoZSBnZW5lcmF0ZWQgb3V0cHV0X21lc3NhZ2UuICBUaGUKKyAgICAgICAgICBjbGllbnQgY2Fu IHRoZW4gY29uc2lkZXIgdGhlIHNlcnZlciBhdXRoZW50aWNhdGVkLiAqLworIAorKyAgICAgIGlm IChidWZkZXNjMi5sZW5ndGggPCA0KQorKwlyZXR1cm4gR1NBU0xfQVVUSEVOVElDQVRJT05fRVJS T1I7CisrCisgICAgICAgaWYgKCgoKGNoYXIgKikgYnVmZGVzYzIudmFsdWUpWzBdICYgR1NBU0xf UU9QX0FVVEgpID09IDApCisgCXsKKyAJICAvKiBJbnRlZ3JpdHkgb3IgcHJpdmFjeSB1bnN1cHBv cnRlZCAqLwoKZGlmZiAtLWdpdCBhLzAwMDEtZml4LWdzc2FwaS1zZXJ2ZXItb29iLnBhdGNoIGIv MDAwMS1maXgtZ3NzYXBpLXNlcnZlci1vb2IucGF0Y2gKZGVsZXRlZCBmaWxlIG1vZGUgMTAwNjQ0 CmluZGV4IDg1MGYzOTIuLjAwMDAwMDAKLS0tIGEvMDAwMS1maXgtZ3NzYXBpLXNlcnZlci1vb2Iu cGF0Y2gKKysrIC9kZXYvbnVsbApAQCAtMSwyNiArMCwwIEBACi1Gcm9tOiBTaW1vbiBKb3NlZnNz b24gPHNpbW9uQGpvc2Vmc3Nvbi5vcmc+Ci1EYXRlOiBGcmksIDE1IEp1bCAyMDIyIDE2OjIzOjU4 ICswMjAwCi1TdWJqZWN0OiBbUEFUQ0hdIEdTU0FQSSBzZXJ2ZXI6IEJvdW5kYXJ5IGNoZWNrIGdz c193cmFwIHRva2VuIChyZWFkIE9PQikuCi1PcmlnaW46IHVwc3RyZWFtLCBodHRwczovL2dpdGxh Yi5jb20vZ3Nhc2wvZ3Nhc2wvLS9jb21taXQvNzk2ZTQxOTdmNjk2MjYxYzFmODcyZDc1NzYzNzEy MzIzMzBiY2MzMAotCi0tLS0KLSBsaWIvZ3NzYXBpL3NlcnZlci5jIHwgMyArKysKLSAxIGZpbGUg Y2hhbmdlZCwgMyBpbnNlcnRpb25zKCspCi0KLWRpZmYgLS1naXQgYS9saWIvZ3NzYXBpL3NlcnZl ci5jIGIvbGliL2dzc2FwaS9zZXJ2ZXIuYwotaW5kZXggNTQxMDM2MGIuLjRlYmZkYTQ3IDEwMDY0 NAotLS0tIGEvbGliL2dzc2FwaS9zZXJ2ZXIuYwotKysrIGIvbGliL2dzc2FwaS9zZXJ2ZXIuYwot QEAgLTIxOCw2ICsyMTgsOSBAQCBfZ3Nhc2xfZ3NzYXBpX3NlcnZlcl9zdGVwIChHc2FzbF9zZXNz aW9uICogc2N0eCwKLSAgICAgICAgICBGQUxTRSwgYW5kIHJlc3BvbmRzIHdpdGggdGhlIGdlbmVy YXRlZCBvdXRwdXRfbWVzc2FnZS4gIFRoZQotICAgICAgICAgIGNsaWVudCBjYW4gdGhlbiBjb25z aWRlciB0aGUgc2VydmVyIGF1dGhlbnRpY2F0ZWQuICovCi0gCi0rICAgICAgaWYgKGJ1ZmRlc2My Lmxlbmd0aCA8IDQpCi0rCXJldHVybiBHU0FTTF9BVVRIRU5USUNBVElPTl9FUlJPUjsKLSsKLSAg ICAgICBpZiAoKCgoY2hhciAqKSBidWZkZXNjMi52YWx1ZSlbMF0gJiBHU0FTTF9RT1BfQVVUSCkg PT0gMCkKLSAJewotIAkgIC8qIEludGVncml0eSBvciBwcml2YWN5IHVuc3VwcG9ydGVkICovCi0t LSAKLTIuMzAuMgotCgpkaWZmIC0tZ2l0IGEvMDAwMi1GaXgtTlVMTC1wb2ludGVyLWRlcmVmZXJl bmNlLWluLURJR0VTVC1NRDUtcGFyc2VyLnBhdGNoIGIvMDAwMi1GaXgtTlVMTC1wb2ludGVyLWRl cmVmZXJlbmNlLWluLURJR0VTVC1NRDUtcGFyc2VyLnBhdGNoCm5ldyBmaWxlIG1vZGUgMTAwNjQ0 CmluZGV4IDAwMDAwMDAuLjA2OWFlYjkKLS0tIC9kZXYvbnVsbAorKysgYi8wMDAyLUZpeC1OVUxM LXBvaW50ZXItZGVyZWZlcmVuY2UtaW4tRElHRVNULU1ENS1wYXJzZXIucGF0Y2gKQEAgLTAsMCAr MSwyMiBAQAorRnJvbSAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwIE1v biBTZXAgMTcgMDA6MDA6MDAgMjAwMQorRnJvbTogemhhbmdwaCA8emhhbmdwaDEyMTM4QDE2My5j b20+CitEYXRlOiBXZWQsIDEzIE1heSAyMDI2IDA5OjIwOjMxICswMjAwCitTdWJqZWN0OiBbUEFU Q0hdIEZpeCBOVUxMIHBvaW50ZXIgZGVyZWZlcmVuY2UgaW4gRElHRVNULU1ENSBwYXJzZXIKKwor aHR0cHM6Ly9saXN0cy5nbnUub3JnL2FyY2hpdmUvaHRtbC9oZWxwLWdzYXNsLzIwMjYtMDUvbXNn MDAwMDAuaHRtbAorCitTaWduZWQtb2ZmLWJ5OiBTaW1vbiBKb3NlZnNzb24gPHNpbW9uQGpvc2Vm c3Nvbi5vcmc+CisKK2RpZmYgLS1naXQgYS9saWIvZGlnZXN0LW1kNS9nZXRzdWJvcHQuYyBiL2xp Yi9kaWdlc3QtbWQ1L2dldHN1Ym9wdC5jCitpbmRleCBjNzIxMGNhNC4uYzhiMmNjODkgMTAwNjQ0 CistLS0gYS9saWIvZGlnZXN0LW1kNS9nZXRzdWJvcHQuYworKysrIGIvbGliL2RpZ2VzdC1tZDUv Z2V0c3Vib3B0LmMKK0BAIC03NCw3ICs3NCw3IEBAIGRpZ2VzdF9tZDVfZ2V0c3Vib3B0IChjaGFy ICoqb3B0aW9ucCwKKyAJJiYgdG9rZW5zW2NudF1bdnN0YXJ0IC0gKm9wdGlvbnBdID09ICdcMCcp CisgICAgICAgeworIAkvKiBXZSBmb3VuZCB0aGUgY3VycmVudCBvcHRpb24gaW4gVE9LRU5TLiAg Ki8KKy0JKnZhbHVlcCA9IHZzdGFydCAhPSBlbmRwID8gdnN0YXJ0ICsgMSA6IE5VTEw7CisrCSp2 YWx1ZXAgPSB2c3RhcnQgIT0gZW5kcCA/IHZzdGFydCArIDEgOiAoY2hhciAqKSAiIjsKKyAKKyAJ d2hpbGUgKCp2YWx1ZXAgJiYgKCoqdmFsdWVwID09ICcgJyB8fAorIAkJCSAgICoqdmFsdWVwID09 ICdcdCcgfHwKCmRpZmYgLS1naXQgYS9saWJnc2FzbC5zcGVjIGIvbGliZ3Nhc2wuc3BlYwppbmRl eCA0YTE4MDU0Li41ODQ1M2QyIDEwMDY0NAotLS0gYS9saWJnc2FzbC5zcGVjCisrKyBiL2xpYmdz YXNsLnNwZWMKQEAgLTEsMTIgKzEsMTMgQEAKIE5hbWU6ICAgICAgICAgICBsaWJnc2FzbAogVmVy c2lvbjogICAgICAgIDEuOC4wIAotUmVsZWFzZTogICAgICAgIDklez9kaXN0fQorUmVsZWFzZTog ICAgICAgIDEwJXs/ZGlzdH0KIFN1bW1hcnk6ICAgICAgICBHTlUgU0FTTCBsaWJyYXJ5IAogR3Jv dXA6ICAgICAgICAgIFN5c3RlbSBFbnZpcm9ubWVudC9MaWJyYXJpZXMKIExpY2Vuc2U6ICAgICAg ICBMR1BMdjIrIAogVVJMOiAgICAgICAgICAgIGh0dHA6Ly93d3cuZ251Lm9yZy9zb2Z0d2FyZS9n c2FzbC8KIFNvdXJjZTA6ICAgICAgICBmdHA6Ly9mdHAuZ251Lm9yZy9nbnUvZ3Nhc2wvJXtuYW1l fS0le3ZlcnNpb259LnRhci5negotUGF0Y2gxOiAgICAgICAgIDAwMDEtZml4LWdzc2FwaS1zZXJ2 ZXItb29iLnBhdGNoCitQYXRjaDE6ICAgICAgICAgMDAwMS1HU1NBUEktc2VydmVyLUJvdW5kYXJ5 LWNoZWNrLWdzc193cmFwLXRva2VuLXJlYWQtT09CLnBhdGNoCitQYXRjaDI6ICAgICAgICAgMDAw Mi1GaXgtTlVMTC1wb2ludGVyLWRlcmVmZXJlbmNlLWluLURJR0VTVC1NRDUtcGFyc2VyLnBhdGNo CiBCdWlsZFJlcXVpcmVzOiAgbGliaWRuLWRldmVsCiBCdWlsZFJlcXVpcmVzOiAga3JiNS1kZXZl bAogQnVpbGRSZXF1aXJlczogIGxpYm50bG0tZGV2ZWwKQEAgLTMxLDYgKzMyLDcgQEAgZGV2ZWxv cGluZyBhcHBsaWNhdGlvbnMgdGhhdCB1c2UgJXtuYW1lfS4KICVwcmVwCiAlc2V0dXAgLXEKICVw YXRjaCAtUCAxIC1wIDIKKyVwYXRjaCAtUCAyIC1wIDIKIAogJWJ1aWxkCiAlY29uZmlndXJlIC0t ZGlzYWJsZS1zdGF0aWMgLS1kaXNhYmxlLXJwYXRoIC0td2l0aC1nc3NhcGktaW1wbD1taXQKQEAg LTU2LDYgKzU4LDkgQEAgZmluZCAle2J1aWxkcm9vdH0gLW5hbWUgJyoubGEnIC1leGVjIHJtIC1m IHt9ICc7JwogJXtfbGliZGlyfS9wa2djb25maWcvbGliZ3Nhc2wucGMKIAogJWNoYW5nZWxvZwor KiBGcmkgQXVnICA3IDIwMjYgUGV0ZXIgTGVtZW5rb3YgPGxlbWVua292QGdtYWlsLmNvbT4gLSAx LjguMC0xMAorLSBGaXggQ1ZFLTIwMjYtNDg4MjkKKwogKiBUaHUgTWFyIDI2IDIwMjYgUGV0ZXIg TGVtZW5rb3YgPGxlbWVua292QGdtYWlsLmNvbT4gLSAxLjguMC05CiAtIEZpeCBDVkUtMjAyMi0y NDY5CiAK