From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Xavier Bachelot To: git-commits@fedoraproject.org Subject: [rpms/libnfs] rawhide: Add upstream patches for CVE-2026-53689 and CVE-2026-57918 Date: Mon, 10 Aug 2026 22:05:01 GMT Message-ID: <178639950138.1.10411687361856269213.rpms-libnfs-5dcb158c2f5a@fedoraproject.org> List-ID: X-Git-Repo: rpms/libnfs X-Git-Branch: rawhide X-Git-Rev: 5dcb158c2f5aac857e6543ebdfbc7442937fd4c8 QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvbGlibmZzCkJyYW5j aCA6IHJhd2hpZGUKQ29tbWl0IDogNWRjYjE1OGMyZjVhYWM4NTdlNjU0M2ViZGZiYzc0NDI5Mzdm ZDRjOApBdXRob3IgOiBYYXZpZXIgQmFjaGVsb3QgPHhhdmllckBiYWNoZWxvdC5vcmc+CkRhdGUg ICA6IDIwMjYtMDgtMTBUMjM6NTk6NTkrMDI6MDAKU3RhdHMgIDogKzY2Ly0xIGluIDMgZmlsZShz KQpVUkwgICAgOiBodHRwczovL3NyYy5mZWRvcmFwcm9qZWN0Lm9yZy9ycG1zL2xpYm5mcy9jLzVk Y2IxNThjMmY1YWFjODU3ZTY1NDNlYmRmYmM3NDQyOTM3ZmQ0Yzg/YnJhbmNoPXJhd2hpZGUKCkxv ZzoKQWRkIHVwc3RyZWFtIHBhdGNoZXMgZm9yIENWRS0yMDI2LTUzNjg5IGFuZCBDVkUtMjAyNi01 NzkxOAoKLS0tCmRpZmYgLS1naXQgYS9saWJuZnMtNi4wLjItQ1ZFLTIwMjYtNTM2ODkucGF0Y2gg Yi9saWJuZnMtNi4wLjItQ1ZFLTIwMjYtNTM2ODkucGF0Y2gKbmV3IGZpbGUgbW9kZSAxMDA2NDQK aW5kZXggMDAwMDAwMC4uN2ZiMzY4YgotLS0gL2Rldi9udWxsCisrKyBiL2xpYm5mcy02LjAuMi1D VkUtMjAyNi01MzY4OS5wYXRjaApAQCAtMCwwICsxLDI4IEBACitGcm9tIDU1YzE4ZWEzM2E4M2Q2 NjdmNzlmMGVmMjA5Yzk2ODk1Nzk1YzcyOWYgTW9uIFNlcCAxNyAwMDowMDowMCAyMDAxCitGcm9t OiBSb25uaWUgU2FobGJlcmcgPHJvbm5pZXNhaGxiZXJnQGdtYWlsLmNvbT4KK0RhdGU6IFdlZCwg MTAgSnVuIDIwMjYgMTE6NDM6MjggKzEwMDAKK1N1YmplY3Q6IFtQQVRDSF0gWkRSOiBjaGVjayB0 aGUgc3RyaW5nIHNpemUgZm9yIHNhbml0eQorCitJdCBjb3VsZCBvdGhlcndpc2UgY2F1c2UgYW4g b3ZlcmZsb3cgaW4gdGhlIGJvdW5kcyBjaGVjayBsYXRlci4KKworUmVwb3J0ZWQtYnk6IE5pY2sg SHVtbWVsIDxuaWNraHVtbWVsQGdvb2dsZS5jb20+CitTaWduZWQtb2ZmLWJ5OiBSb25uaWUgU2Fo bGJlcmcgPHJvbm5pZXNhaGxiZXJnQGdtYWlsLmNvbT4KKy0tLQorIGxpYi9saWJuZnMtemRyLmMg fCA0ICsrKy0KKyAxIGZpbGUgY2hhbmdlZCwgMyBpbnNlcnRpb25zKCspLCAxIGRlbGV0aW9uKC0p CisKK2RpZmYgLS1naXQgYS9saWIvbGlibmZzLXpkci5jIGIvbGliL2xpYm5mcy16ZHIuYworaW5k ZXggMjk0NWRjNDkuLjM1N2IyNzQ2IDEwMDY0NAorLS0tIGEvbGliL2xpYm5mcy16ZHIuYworKysr IGIvbGliL2xpYm5mcy16ZHIuYworQEAgLTMxOCw3ICszMTgsOSBAQCBib29sX3QgbGlibmZzX3pk cl9zdHJpbmcoWkRSICp6ZHJzLCBjaGFyICoqc3RycCwgdWludDMyX3QgbWF4c2l6ZSkKKyAJaWYg KCFsaWJuZnNfemRyX3VfaW50KHpkcnMsICZzaXplKSkgeworIAkJcmV0dXJuIEZBTFNFOworIAl9 CistCisrCWlmIChzaXplID4gemRycy0+c2l6ZSkgeworKwkJcmV0dXJuIEZBTFNFOworKwl9Cisg CWlmICh6ZHJzLT5wb3MgKyAoaW50KXNpemUgPiB6ZHJzLT5zaXplKSB7CisgCQlyZXR1cm4gRkFM U0U7CisgCX0KCmRpZmYgLS1naXQgYS9saWJuZnMtNi4wLjItQ1ZFLTIwMjYtNTc5MTgucGF0Y2gg Yi9saWJuZnMtNi4wLjItQ1ZFLTIwMjYtNTc5MTgucGF0Y2gKbmV3IGZpbGUgbW9kZSAxMDA2NDQK aW5kZXggMDAwMDAwMC4uZDcyZTg2ZgotLS0gL2Rldi9udWxsCisrKyBiL2xpYm5mcy02LjAuMi1D VkUtMjAyNi01NzkxOC5wYXRjaApAQCAtMCwwICsxLDI4IEBACitGcm9tIDkzNWI4ZGI3MTJiM2M2 NjQ5YmM1N2RkYzI3NjUyNmM0YTMxNjgwZGUgTW9uIFNlcCAxNyAwMDowMDowMCAyMDAxCitGcm9t OiBSb25uaWUgU2FobGJlcmcgPHJvbm5pZXNhaGxiZXJnQGdtYWlsLmNvbT4KK0RhdGU6IFdlZCwg MTAgSnVuIDIwMjYgMTI6MjE6NTggKzEwMDAKK1N1YmplY3Q6IFtQQVRDSF0gc29ja2V0OiBwcmV2 ZW50IGFuIHVuZGVyZmxvdyBpbiB4aWQKKworaWYgdGhlIGV4cGVjdGVkIHBkdS1zaXplIGlzIGxh cmdlciB0aGFuIHRoZSBhYnNvbHV0ZSBwZHUgc2l6ZQorZnJvbSB0aGUgeGlkL3JlY29yZC1tYXJr ZXIuCisKK1JlcG9ydGVkLWJ5OiBOaWNrIEh1bW1lbCA8bmlja2h1bW1lbEBnb29nbGUuY29tPgor U2lnbmVkLW9mZi1ieTogUm9ubmllIFNhaGxiZXJnIDxyb25uaWVzYWhsYmVyZ0BnbWFpbC5jb20+ CistLS0KKyBsaWIvc29ja2V0LmMgfCAzICsrKworIDEgZmlsZSBjaGFuZ2VkLCAzIGluc2VydGlv bnMoKykKKworZGlmZiAtLWdpdCBhL2xpYi9zb2NrZXQuYyBiL2xpYi9zb2NrZXQuYworaW5kZXgg NTdmZmRiNTEuLmZlYTA0NzkwIDEwMDY0NAorLS0tIGEvbGliL3NvY2tldC5jCisrKysgYi9saWIv c29ja2V0LmMKK0BAIC05ODAsNiArOTgwLDkgQEAgcnBjX3JlYWRfZnJvbV9zb2NrZXQoc3RydWN0 IHJwY19jb250ZXh0ICpycGMpCisgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBicmVh azsKKyAgICAgICAgICAgICAgICAgICAgICAgICBjYXNlIFJFQURfSU9WRUM6CisgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICBycGMtPnBkdS0+cmVhZF9jb3VudCAtPSBycGMtPnBkdV9z aXplOworKyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgaWYgKHJwYy0+cm1feGlkWzBd IDwgcnBjLT5wZHVfc2l6ZSkgeworKyAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICByZXR1cm4gLTE7CisrICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICB9CisgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBycGMtPnJtX3hpZFswXSAtPSBycGMtPnBkdV9z aXplOworICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgaWYgKCFycGMtPnJtX3hpZFsw XSkgeworICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBycGNfZmluaXNo ZWRfcGR1KHJwYyk7CgpkaWZmIC0tZ2l0IGEvbGlibmZzLnNwZWMgYi9saWJuZnMuc3BlYwppbmRl eCBhMjUwNDc0Li5hOWVjOTcwIDEwMDY0NAotLS0gYS9saWJuZnMuc3BlYworKysgYi9saWJuZnMu c3BlYwpAQCAtMSw2ICsxLDYgQEAKIE5hbWU6CQlsaWJuZnMKIFZlcnNpb246CTYuMC4yCi1SZWxl YXNlOgk4JXs/ZGlzdH0KK1JlbGVhc2U6CTklez9kaXN0fQogU3VtbWFyeToJQ2xpZW50IGxpYnJh cnkgZm9yIGFjY2Vzc2luZyBORlMgc2hhcmVzIG92ZXIgYSBuZXR3b3JrCiAjIFRoZSBsaWJyYXJ5 IGlzIGxpY2Vuc2VkIGFzIExHUEwtMi4xLW9yLWxhdGVyCiAjIFRoZSBwcm90b2NvbCBkZWZpbml0 aW9uIGlzIEJTRC0yLUNsYXVzZQpAQCAtMTMsNiArMTMsMTAgQEAgU291cmNlMDoJJXt1cmx9L2Fy Y2hpdmUvJXtuYW1lfS0le3ZlcnNpb259LyV7bmFtZX0tJXt2ZXJzaW9ufS50YXIuZ3oKIFBhdGNo MDogICAgICAgICBsaWJuZnMtNi4wLjItZml4X2dudXRsc191bmRlZmluZWRfc3ltYm9scy5wYXRj aAogIyBodHRwczovL2dpdGh1Yi5jb20vc2FobGJlcmcvbGlibmZzL2NvbW1pdC8yY2RmZWRhYmEz NzljYmI1MTJkM2MyMDNhMWI5ZWFlNzk1ZjRmYjIzCiBQYXRjaDE6ICAgICAgICAgbGlibmZzLTYu MC4yLWZpeF9taXNzaW5nX2luY2x1ZGUucGF0Y2gKKyMgaHR0cHM6Ly9naXRodWIuY29tL3NhaGxi ZXJnL2xpYm5mcy9jb21taXQvNTVjMThlYTMzYTgzZDY2N2Y3OWYwZWYyMDljOTY4OTU3OTVjNzI5 ZgorUGF0Y2gyOiAgICAgICAgIGxpYm5mcy02LjAuMi1DVkUtMjAyNi01MzY4OS5wYXRjaAorIyBo dHRwczovL2dpdGh1Yi5jb20vc2FobGJlcmcvbGlibmZzL2NvbW1pdC85MzViOGRiNzEyYjNjNjY0 OWJjNTdkZGMyNzY1MjZjNGEzMTY4MGRlCitQYXRjaDM6ICAgICAgICAgbGlibmZzLTYuMC4yLUNW RS0yMDI2LTU3OTE4LnBhdGNoCiAKIEJ1aWxkUmVxdWlyZXM6CWF1dG9tYWtlCiBCdWlsZFJlcXVp cmVzOglnY2MKQEAgLTU3LDYgKzYxLDggQEAgTkZTIHNlcnZlcnMgdXNpbmcgbGlibmZzLgogJXNl dHVwIC1xIC1uICV7bmFtZX0tJXtuYW1lfS0le3ZlcnNpb259CiAlcGF0Y2ggLVAwIC1wMQogJXBh dGNoIC1QMSAtcDEKKyVwYXRjaCAtUDIgLXAxCislcGF0Y2ggLVAzIC1wMQogYXV0b3JlY29uZiAt dmlmCiAKICVidWlsZApAQCAtOTEsNiArOTcsOSBAQCBybSAtZiAle2J1aWxkcm9vdH0le19saWJk aXJ9LyoubGEKICV7X21hbmRpcn0vbWFuMS9uZnMtKi4xKgogCiAlY2hhbmdlbG9nCisqIE1vbiBB dWcgMTAgMjAyNiBYYXZpZXIgQmFjaGVsb3QgPHhhdmllckBiYWNoZWxvdC5vcmc+IC0gNi4wLjIt OQorLSBBZGQgdXBzdHJlYW0gcGF0Y2hlcyBmb3IgQ1ZFLTIwMjYtNTM2ODkgYW5kIENWRS0yMDI2 LTU3OTE4CisKICogVGh1IEp1bCAxNiAyMDI2IEZlZG9yYSBSZWxlYXNlIEVuZ2luZWVyaW5nIDxy ZWxlbmdAZmVkb3JhcHJvamVjdC5vcmc+IC0gNi4wLjItOAogLSBSZWJ1aWx0IGZvciBodHRwczov L2ZlZG9yYXByb2plY3Qub3JnL3dpa2kvRmVkb3JhXzQ1X01hc3NfUmVidWlsZAogCg==