From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Bastien Nocera To: git-commits@fedoraproject.org Subject: [rpms/bluez] rawhide: Fix CVE-2026-75032 (Closes: #2517877) Date: Wed, 19 Aug 2026 13:37:20 GMT Message-ID: <178714664086.1.7930990984854979623.rpms-bluez-418434e5bf64@fedoraproject.org> List-ID: X-Git-Repo: rpms/bluez X-Git-Branch: rawhide X-Git-Rev: 418434e5bf64c0543eac2dd0230c7996d107659c QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvYmx1ZXoKQnJhbmNo IDogcmF3aGlkZQpDb21taXQgOiA0MTg0MzRlNWJmNjRjMDU0M2VhYzJkZDAyMzBjNzk5NmQxMDc2 NTljCkF1dGhvciA6IEJhc3RpZW4gTm9jZXJhIDxoYWRlc3NAaGFkZXNzLm5ldD4KRGF0ZSAgIDog MjAyNi0wOC0xOVQxNTozNzoxMiswMjowMApTdGF0cyAgOiArMTU0Ly0xIGluIDIgZmlsZShzKQpV UkwgICAgOiBodHRwczovL3NyYy5mZWRvcmFwcm9qZWN0Lm9yZy9ycG1zL2JsdWV6L2MvNDE4NDM0 ZTViZjY0YzA1NDNlYWMyZGQwMjMwYzc5OTZkMTA3NjU5Yz9icmFuY2g9cmF3aGlkZQoKTG9nOgpG aXggQ1ZFLTIwMjYtNzUwMzIgKENsb3NlczogIzI1MTc4NzcpCgotLS0KZGlmZiAtLWdpdCBhL2F2 cmNwLWdldGZvbGRlcml0ZW1zLnBhdGNoIGIvYXZyY3AtZ2V0Zm9sZGVyaXRlbXMucGF0Y2gKbmV3 IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXggMDAwMDAwMC4uNjY2ODI1ZAotLS0gL2Rldi9udWxsCisr KyBiL2F2cmNwLWdldGZvbGRlcml0ZW1zLnBhdGNoCkBAIC0wLDAgKzEsMTQ4IEBACitGcm9tIGJk ODk4OTYyMGVkNmU4MDc1NWYwNmNmZGIxOGY1YjRhMzkxMzQ5M2MgTW9uIFNlcCAxNyAwMDowMDow MCAyMDAxCitGcm9tOiBCYXN0aWVuIE5vY2VyYSA8aGFkZXNzQGhhZGVzcy5uZXQ+CitEYXRlOiBG cmksIDE0IEF1ZyAyMDI2IDE2OjAxOjE4ICswMjAwCitTdWJqZWN0OiBbUEFUQ0hdIGF2cmNwOiBG aXggT3V0LW9mLUJvdW5kcyBSZWFkIGluIEFWUkNQIEdldEZvbGRlckl0ZW1zIHBhcnNpbmcKKwor SWYgdGhlICJEaXNwbGF5YWJsZSBOYW1lIExlbmd0aCIgaXMgbXVjaCBsb25nZXIgdGhhbiB0aGUg c2l6ZSBvZiB0aGUgUERVCitwYWNrZXQgd2UgcmVjZWl2ZSwgdGhlbiB3ZSBtaWdodCB0cnkgdG8g bWVtY3B5KCkgcGFzdCB0aGUgZW5kIG9mIHRoZSBQRFUKK3BhY2tldC4KKworQmUgY2FyZWZ1bCBh Ym91dCBjbGFtcGluZyB0aGUgbmFtZSBjb3B5aW5nIHRvIHRoZSBzbWFsbGVzdCBvZjoKKy0gbGVu Z3RoIHNwZWNpZmllZCBpbiB0aGUgUERVCistIGxlZnQtb3ZlciBwYWNrZXQgYWZ0ZXIgdGhlIGxl bmd0aCBmaWVsZAorLSBzaXplIG9mIHRoZSBzdHJpbmcgd2UnbGwgY29weSBpdCBpbnRvCisKK1Jl cG9ydGVkLWJ5OiBFbG1hbiBTaGFoYmF6b3YgPHNoYWhiYXpvdmVsbWFuOTdAZ21haWwuY29tPgor LS0tCisgcHJvZmlsZXMvYXVkaW8vYXZyY3AuYyB8IDUxICsrKysrKysrKysrKysrKysrKysrKysr KystLS0tLS0tLS0tLS0tLS0tLQorIDEgZmlsZSBjaGFuZ2VkLCAzMSBpbnNlcnRpb25zKCspLCAy MCBkZWxldGlvbnMoLSkKKworZGlmZiAtLWdpdCBhL3Byb2ZpbGVzL2F1ZGlvL2F2cmNwLmMgYi9w cm9maWxlcy9hdWRpby9hdnJjcC5jCitpbmRleCAyMTk0YTkxMzU4MGYuLjIzZTk1OWM3NjkxNyAx MDA2NDQKKy0tLSBhL3Byb2ZpbGVzL2F1ZGlvL2F2cmNwLmMKKysrKyBiL3Byb2ZpbGVzL2F1ZGlv L2F2cmNwLmMKK0BAIC0xNDUsNiArMTQ1LDggQEAKKyAjZGVmaW5lIEFWUkNQX1NDT1BFX1NFQVJD SAkJCQkweDAyCisgI2RlZmluZSBBVlJDUF9TQ09QRV9OT1dfUExBWUlORwkJCTB4MDMKKyAKKysj ZGVmaW5lIE5BTUVfTUFYX0xFTiAyNTUKKysKKyAjaWYgX19CWVRFX09SREVSID09IF9fTElUVExF X0VORElBTgorIAorIHN0cnVjdCBhdnJjcF9oZWFkZXIgeworQEAgLTI2MDgsMzAgKzI2MTAsNDUg QEAgc3RhdGljIGNvbnN0IGNoYXIgKnN1YnR5cGVfdG9fc3RyaW5nKHVpbnQzMl90IHN1YnR5cGUp CisgCXJldHVybiAiTm9uZSI7CisgfQorIAorK3N0YXRpYyBnYm9vbGVhbiBwYXJzZV9tZWRpYV9u YW1lKHVpbnQ4X3QgKm9wZXJhbmRzLCB1aW50MTZfdCBsZW4sCisrCQkJCXNpemVfdCBuYW1lX2xl bl9vZmZzZXQsCisrCQkJCWNoYXIgKm5hbWUsIHVpbnQxNl90ICpuYW1lbGVuKQorK3sKKysJdWlu dDE2X3QgbmFtZXNpemU7CisrCisrCWlmIChsZW4gPCBuYW1lX2xlbl9vZmZzZXQgKyAyKQorKwkJ cmV0dXJuIEZBTFNFOworKworKwltZW1zZXQobmFtZSwgMCwgTkFNRV9NQVhfTEVOKTsKKysJbmFt ZXNpemUgPSBNSU4oZ2V0X2JlMTYoJm9wZXJhbmRzW25hbWVfbGVuX29mZnNldF0pLAorKwkJCWxl biAtIG5hbWVfbGVuX29mZnNldCAtIDIpOworKwluYW1lc2l6ZSA9IE1JTihuYW1lc2l6ZSwgTkFN RV9NQVhfTEVOIC0gMSk7CisrCWlmICgqbmFtZWxlbiA+IDApIHsKKysJCWlmIChsZW4gPCBuYW1l X2xlbl9vZmZzZXQgKyAyICsgbmFtZXNpemUpCisrCQkJcmV0dXJuIEZBTFNFOworKwkJbWVtY3B5 KG5hbWUsICZvcGVyYW5kc1tuYW1lX2xlbl9vZmZzZXQgKyAyXSwgbmFtZXNpemUpOworKwkJc3Ry dG91dGY4KG5hbWUsIG5hbWVzaXplKTsKKysJfQorKwlpZiAobmFtZWxlbikKKysJCSpuYW1lbGVu ID0gbmFtZXNpemU7CisrCXJldHVybiBUUlVFOworK30KKysKKyBzdGF0aWMgc3RydWN0IG1lZGlh X2l0ZW0gKnBhcnNlX21lZGlhX2VsZW1lbnQoc3RydWN0IGF2cmNwICpzZXNzaW9uLAorIAkJCQkJ dWludDhfdCAqb3BlcmFuZHMsIHVpbnQxNl90IGxlbikKKyB7CisgCXN0cnVjdCBhdnJjcF9wbGF5 ZXIgKnBsYXllcjsKKyAJc3RydWN0IG1lZGlhX3BsYXllciAqbXA7CisgCXN0cnVjdCBtZWRpYV9p dGVtICppdGVtOworLQl1aW50MTZfdCBuYW1lbGVuLCBuYW1lc2l6ZTsKKy0JY2hhciBuYW1lWzI1 NV07CisrCXVpbnQxNl90IG5hbWVzaXplOworKwljaGFyIG5hbWVbTkFNRV9NQVhfTEVOXTsKKyAJ dWludDY0X3QgdWlkOworIAl1aW50OF90IGNvdW50OworIAorLQlpZiAobGVuIDwgMTMpCisrCWlm ICghcGFyc2VfbWVkaWFfbmFtZShvcGVyYW5kcywgbGVuLCAxMSwgbmFtZSwgJm5hbWVzaXplKSkK KyAJCXJldHVybiBOVUxMOworIAorIAl1aWQgPSBnZXRfYmU2NCgmb3BlcmFuZHNbMF0pOworLQor LQltZW1zZXQobmFtZSwgMCwgc2l6ZW9mKG5hbWUpKTsKKy0JbmFtZXNpemUgPSBnZXRfYmUxNigm b3BlcmFuZHNbMTFdKTsKKy0JbmFtZWxlbiA9IE1JTihuYW1lc2l6ZSwgc2l6ZW9mKG5hbWUpIC0g MSk7CistCWlmIChuYW1lbGVuID4gMCkgeworLQkJbWVtY3B5KG5hbWUsICZvcGVyYW5kc1sxM10s IG5hbWVsZW4pOworLQkJc3RydG91dGY4KG5hbWUsIG5hbWVsZW4pOworLQl9CistCisgCWNvdW50 ID0gb3BlcmFuZHNbMTMgKyBuYW1lc2l6ZV07CisgCisgCXBsYXllciA9IHNlc3Npb24tPmNvbnRy b2xsZXItPnBsYXllcjsKK0BAIC0yNjU1LDI0ICsyNjcyLDE4IEBAIHN0YXRpYyBzdHJ1Y3QgbWVk aWFfaXRlbSAqcGFyc2VfbWVkaWFfZm9sZGVyKHN0cnVjdCBhdnJjcCAqc2Vzc2lvbiwKKyAJc3Ry dWN0IGF2cmNwX3BsYXllciAqcGxheWVyID0gc2Vzc2lvbi0+Y29udHJvbGxlci0+cGxheWVyOwor IAlzdHJ1Y3QgbWVkaWFfcGxheWVyICptcCA9IHBsYXllci0+dXNlcl9kYXRhOworIAlzdHJ1Y3Qg bWVkaWFfaXRlbSAqaXRlbTsKKy0JdWludDE2X3QgbmFtZWxlbjsKKy0JY2hhciBuYW1lWzI1NV07 CisrCWNoYXIgbmFtZVtOQU1FX01BWF9MRU5dOworIAl1aW50NjRfdCB1aWQ7CisgCXVpbnQ4X3Qg dHlwZTsKKyAJdWludDhfdCBwbGF5YWJsZTsKKyAKKy0JaWYgKGxlbiA8IDEyKQorKwlpZiAoIXBh cnNlX21lZGlhX25hbWUob3BlcmFuZHMsIGxlbiwgMTIsIG5hbWUsIE5VTEwpKQorIAkJcmV0dXJu IE5VTEw7CisgCisgCXVpZCA9IGdldF9iZTY0KCZvcGVyYW5kc1swXSk7CisgCXR5cGUgPSBvcGVy YW5kc1s4XTsKKyAJcGxheWFibGUgPSBvcGVyYW5kc1s5XTsKKyAKKy0JbWVtc2V0KG5hbWUsIDAs IHNpemVvZihuYW1lKSk7CistCW5hbWVsZW4gPSBNSU4oZ2V0X2JlMTYoJm9wZXJhbmRzWzEyXSks IHNpemVvZihuYW1lKSAtIDEpOworLQlpZiAobmFtZWxlbiA+IDApCistCQltZW1jcHkobmFtZSwg Jm9wZXJhbmRzWzE0XSwgbmFtZWxlbik7CistCisgCWl0ZW0gPSBtZWRpYV9wbGF5ZXJfY3JlYXRl X2ZvbGRlcihtcCwgbmFtZSwgdHlwZSwgdWlkKTsKKyAJaWYgKCFpdGVtKQorIAkJcmV0dXJuIE5V TEw7CistLSAKKzIuNTUuMAorCitGcm9tIDhiZjdmZTQ4NDc4MzNhNzZiZDdlNTFkNGQyNjliNGIz MzYzODkxOTMgTW9uIFNlcCAxNyAwMDowMDowMCAyMDAxCitGcm9tOiBCYXN0aWVuIE5vY2VyYSA8 aGFkZXNzQGhhZGVzcy5uZXQ+CitEYXRlOiBNb24sIDE3IEF1ZyAyMDI2IDEwOjExOjE5ICswMjAw CitTdWJqZWN0OiBbUEFUQ0hdIGF2cmNwOiBGaXggbWVkaWEvZm9sZGVyIG5hbWUgbm90IGJlaW5n IHNldAorCisqbmFtZWxlbiB3YXMgdXNlZCBiZWZvcmUgYmVpbmcgc2V0LgorCitGaXhlczogYmQ4 OTg5NjIwZWQ2ICgiYXZyY3A6IEZpeCBPdXQtb2YtQm91bmRzIFJlYWQgaW4gQVZSQ1AgR2V0Rm9s ZGVySXRlbXMgcGFyc2luZyIpCistLS0KKyBwcm9maWxlcy9hdWRpby9hdnJjcC5jIHwgMiArLQor IDEgZmlsZSBjaGFuZ2VkLCAxIGluc2VydGlvbigrKSwgMSBkZWxldGlvbigtKQorCitkaWZmIC0t Z2l0IGEvcHJvZmlsZXMvYXVkaW8vYXZyY3AuYyBiL3Byb2ZpbGVzL2F1ZGlvL2F2cmNwLmMKK2lu ZGV4IDIzZTk1OWM3NjkxNy4uMDI4YzFjMjU0YjgyIDEwMDY0NAorLS0tIGEvcHJvZmlsZXMvYXVk aW8vYXZyY3AuYworKysrIGIvcHJvZmlsZXMvYXVkaW8vYXZyY3AuYworQEAgLTI2MjMsNyArMjYy Myw3IEBAIHN0YXRpYyBnYm9vbGVhbiBwYXJzZV9tZWRpYV9uYW1lKHVpbnQ4X3QgKm9wZXJhbmRz LCB1aW50MTZfdCBsZW4sCisgCW5hbWVzaXplID0gTUlOKGdldF9iZTE2KCZvcGVyYW5kc1tuYW1l X2xlbl9vZmZzZXRdKSwKKyAJCQlsZW4gLSBuYW1lX2xlbl9vZmZzZXQgLSAyKTsKKyAJbmFtZXNp emUgPSBNSU4obmFtZXNpemUsIE5BTUVfTUFYX0xFTiAtIDEpOworLQlpZiAoKm5hbWVsZW4gPiAw KSB7CisrCWlmIChuYW1lc2l6ZSA+IDApIHsKKyAJCWlmIChsZW4gPCBuYW1lX2xlbl9vZmZzZXQg KyAyICsgbmFtZXNpemUpCisgCQkJcmV0dXJuIEZBTFNFOworIAkJbWVtY3B5KG5hbWUsICZvcGVy YW5kc1tuYW1lX2xlbl9vZmZzZXQgKyAyXSwgbmFtZXNpemUpOworLS0gCisyLjU1LjAKKwoKZGlm ZiAtLWdpdCBhL2JsdWV6LnNwZWMgYi9ibHVlei5zcGVjCmluZGV4IDVhYTBhZDUuLjUxNDEwMWQg MTAwNjQ0Ci0tLSBhL2JsdWV6LnNwZWMKKysrIGIvYmx1ZXouc3BlYwpAQCAtNiw3ICs2LDcgQEAK IAogTmFtZTogICAgYmx1ZXoKIFZlcnNpb246IDUuODcKLVJlbGVhc2U6IDQlez9kaXN0fQorUmVs ZWFzZTogNSV7P2Rpc3R9CiBTdW1tYXJ5OiBCbHVldG9vdGggdXRpbGl0aWVzCiBMaWNlbnNlOiBH UEwtMi4wLW9yLWxhdGVyCiBVUkw6ICAgICBodHRwOi8vd3d3LmJsdWV6Lm9yZy8KQEAgLTE1LDYg KzE1LDggQEAgU291cmNlMDogaHR0cHM6Ly93d3cua2VybmVsLm9yZy9wdWIvbGludXgvYmx1ZXRv b3RoLyV7bmFtZX0tJXt2ZXJzaW9ufS50YXIueHoKIAogIyBnaXQgZm9ybWF0LXBhdGNoIC0tc3Rk b3V0IDUuODcuLi4zMGRiNjZkYzk3MWJkMWNkOTVkNGE3YjBlZWEyOTYzNjdhYjY1YjNiCiBQYXRj aDE6IDUuODctYnVnLWZpeGVzLTEucGF0Y2gKKyMgQ1ZFLTIwMjYtNzUwMzIKK1BhdGNoMjogYXZy Y3AtZ2V0Zm9sZGVyaXRlbXMucGF0Y2gKIAogQnVpbGRSZXF1aXJlczogZGJ1cy1kZXZlbCA+PSAx LjYKIEJ1aWxkUmVxdWlyZXM6IGdsaWIyLWRldmVsCkBAIC0zNDAsNiArMzQyLDkgQEAgaW5zdGFs bCBlbXVsYXRvci9idHZpcnQgJHtSUE1fQlVJTERfUk9PVH0vJXtfbGliZXhlY2Rpcn0vYmx1ZXRv b3RoLwogJXtfdXNlcnVuaXRkaXJ9L29iZXguc2VydmljZQogCiAlY2hhbmdlbG9nCisqIFdlZCBB dWcgMTkgMjAyNiBCYXN0aWVuIE5vY2VyYSA8Ym5vY2VyYUByZWRoYXQuY29tPiAtIDUuODctNQor LSBGaXggQ1ZFLTIwMjYtNzUwMzIgKENsb3NlczogIzI1MTc4NzcpCisKICogRnJpIEp1bCAxNyAy MDI2IEJhc3RpZW4gTm9jZXJhIDxibm9jZXJhQHJlZGhhdC5jb20+IC0gNS44Ny00CiAtIFVwZGF0 ZSB0byBsYXRlc3QgdXBzdHJlYW0gSEVBRCB0byBmaXggYSBudW1iZXIgb2YgcG9zc2libGUgY3Jh c2hlcwogCg==