From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Bastien Nocera To: git-commits@fedoraproject.org Subject: [rpms/bluez] f44: Fix CVE-2026-75032 (Closes: #2517877) Date: Wed, 19 Aug 2026 13:46:52 GMT Message-ID: <178714721221.1.2175643744505733158.rpms-bluez-5f61886ce86f@fedoraproject.org> List-ID: X-Git-Repo: rpms/bluez X-Git-Branch: f44 X-Git-Rev: 5f61886ce86f5dd9ab69fcdb785a51bce7e3365b QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvYmx1ZXoKQnJhbmNo IDogZjQ0CkNvbW1pdCA6IDVmNjE4ODZjZTg2ZjVkZDlhYjY5ZmNkYjc4NWE1MWJjZTdlMzM2NWIK QXV0aG9yIDogQmFzdGllbiBOb2NlcmEgPGhhZGVzc0BoYWRlc3MubmV0PgpEYXRlICAgOiAyMDI2 LTA4LTE5VDE1OjQ2OjA4KzAyOjAwClN0YXRzICA6ICsxNTQvLTEgaW4gMiBmaWxlKHMpClVSTCAg ICA6IGh0dHBzOi8vc3JjLmZlZG9yYXByb2plY3Qub3JnL3JwbXMvYmx1ZXovYy81ZjYxODg2Y2U4 NmY1ZGQ5YWI2OWZjZGI3ODVhNTFiY2U3ZTMzNjViP2JyYW5jaD1mNDQKCkxvZzoKRml4IENWRS0y MDI2LTc1MDMyIChDbG9zZXM6ICMyNTE3ODc3KQoKLS0tCmRpZmYgLS1naXQgYS9hdnJjcC1nZXRm b2xkZXJpdGVtcy5wYXRjaCBiL2F2cmNwLWdldGZvbGRlcml0ZW1zLnBhdGNoCm5ldyBmaWxlIG1v ZGUgMTAwNjQ0CmluZGV4IDAwMDAwMDAuLjY2NjgyNWQKLS0tIC9kZXYvbnVsbAorKysgYi9hdnJj cC1nZXRmb2xkZXJpdGVtcy5wYXRjaApAQCAtMCwwICsxLDE0OCBAQAorRnJvbSBiZDg5ODk2MjBl ZDZlODA3NTVmMDZjZmRiMThmNWI0YTM5MTM0OTNjIE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQor RnJvbTogQmFzdGllbiBOb2NlcmEgPGhhZGVzc0BoYWRlc3MubmV0PgorRGF0ZTogRnJpLCAxNCBB dWcgMjAyNiAxNjowMToxOCArMDIwMAorU3ViamVjdDogW1BBVENIXSBhdnJjcDogRml4IE91dC1v Zi1Cb3VuZHMgUmVhZCBpbiBBVlJDUCBHZXRGb2xkZXJJdGVtcyBwYXJzaW5nCisKK0lmIHRoZSAi RGlzcGxheWFibGUgTmFtZSBMZW5ndGgiIGlzIG11Y2ggbG9uZ2VyIHRoYW4gdGhlIHNpemUgb2Yg dGhlIFBEVQorcGFja2V0IHdlIHJlY2VpdmUsIHRoZW4gd2UgbWlnaHQgdHJ5IHRvIG1lbWNweSgp IHBhc3QgdGhlIGVuZCBvZiB0aGUgUERVCitwYWNrZXQuCisKK0JlIGNhcmVmdWwgYWJvdXQgY2xh bXBpbmcgdGhlIG5hbWUgY29weWluZyB0byB0aGUgc21hbGxlc3Qgb2Y6CistIGxlbmd0aCBzcGVj aWZpZWQgaW4gdGhlIFBEVQorLSBsZWZ0LW92ZXIgcGFja2V0IGFmdGVyIHRoZSBsZW5ndGggZmll bGQKKy0gc2l6ZSBvZiB0aGUgc3RyaW5nIHdlJ2xsIGNvcHkgaXQgaW50bworCitSZXBvcnRlZC1i eTogRWxtYW4gU2hhaGJhem92IDxzaGFoYmF6b3ZlbG1hbjk3QGdtYWlsLmNvbT4KKy0tLQorIHBy b2ZpbGVzL2F1ZGlvL2F2cmNwLmMgfCA1MSArKysrKysrKysrKysrKysrKysrKysrKysrLS0tLS0t LS0tLS0tLS0tLS0KKyAxIGZpbGUgY2hhbmdlZCwgMzEgaW5zZXJ0aW9ucygrKSwgMjAgZGVsZXRp b25zKC0pCisKK2RpZmYgLS1naXQgYS9wcm9maWxlcy9hdWRpby9hdnJjcC5jIGIvcHJvZmlsZXMv YXVkaW8vYXZyY3AuYworaW5kZXggMjE5NGE5MTM1ODBmLi4yM2U5NTljNzY5MTcgMTAwNjQ0Cist LS0gYS9wcm9maWxlcy9hdWRpby9hdnJjcC5jCisrKysgYi9wcm9maWxlcy9hdWRpby9hdnJjcC5j CitAQCAtMTQ1LDYgKzE0NSw4IEBACisgI2RlZmluZSBBVlJDUF9TQ09QRV9TRUFSQ0gJCQkJMHgw MgorICNkZWZpbmUgQVZSQ1BfU0NPUEVfTk9XX1BMQVlJTkcJCQkweDAzCisgCisrI2RlZmluZSBO QU1FX01BWF9MRU4gMjU1CisrCisgI2lmIF9fQllURV9PUkRFUiA9PSBfX0xJVFRMRV9FTkRJQU4K KyAKKyBzdHJ1Y3QgYXZyY3BfaGVhZGVyIHsKK0BAIC0yNjA4LDMwICsyNjEwLDQ1IEBAIHN0YXRp YyBjb25zdCBjaGFyICpzdWJ0eXBlX3RvX3N0cmluZyh1aW50MzJfdCBzdWJ0eXBlKQorIAlyZXR1 cm4gIk5vbmUiOworIH0KKyAKKytzdGF0aWMgZ2Jvb2xlYW4gcGFyc2VfbWVkaWFfbmFtZSh1aW50 OF90ICpvcGVyYW5kcywgdWludDE2X3QgbGVuLAorKwkJCQlzaXplX3QgbmFtZV9sZW5fb2Zmc2V0 LAorKwkJCQljaGFyICpuYW1lLCB1aW50MTZfdCAqbmFtZWxlbikKKyt7CisrCXVpbnQxNl90IG5h bWVzaXplOworKworKwlpZiAobGVuIDwgbmFtZV9sZW5fb2Zmc2V0ICsgMikKKysJCXJldHVybiBG QUxTRTsKKysKKysJbWVtc2V0KG5hbWUsIDAsIE5BTUVfTUFYX0xFTik7CisrCW5hbWVzaXplID0g TUlOKGdldF9iZTE2KCZvcGVyYW5kc1tuYW1lX2xlbl9vZmZzZXRdKSwKKysJCQlsZW4gLSBuYW1l X2xlbl9vZmZzZXQgLSAyKTsKKysJbmFtZXNpemUgPSBNSU4obmFtZXNpemUsIE5BTUVfTUFYX0xF TiAtIDEpOworKwlpZiAoKm5hbWVsZW4gPiAwKSB7CisrCQlpZiAobGVuIDwgbmFtZV9sZW5fb2Zm c2V0ICsgMiArIG5hbWVzaXplKQorKwkJCXJldHVybiBGQUxTRTsKKysJCW1lbWNweShuYW1lLCAm b3BlcmFuZHNbbmFtZV9sZW5fb2Zmc2V0ICsgMl0sIG5hbWVzaXplKTsKKysJCXN0cnRvdXRmOChu YW1lLCBuYW1lc2l6ZSk7CisrCX0KKysJaWYgKG5hbWVsZW4pCisrCQkqbmFtZWxlbiA9IG5hbWVz aXplOworKwlyZXR1cm4gVFJVRTsKKyt9CisrCisgc3RhdGljIHN0cnVjdCBtZWRpYV9pdGVtICpw YXJzZV9tZWRpYV9lbGVtZW50KHN0cnVjdCBhdnJjcCAqc2Vzc2lvbiwKKyAJCQkJCXVpbnQ4X3Qg Km9wZXJhbmRzLCB1aW50MTZfdCBsZW4pCisgeworIAlzdHJ1Y3QgYXZyY3BfcGxheWVyICpwbGF5 ZXI7CisgCXN0cnVjdCBtZWRpYV9wbGF5ZXIgKm1wOworIAlzdHJ1Y3QgbWVkaWFfaXRlbSAqaXRl bTsKKy0JdWludDE2X3QgbmFtZWxlbiwgbmFtZXNpemU7CistCWNoYXIgbmFtZVsyNTVdOworKwl1 aW50MTZfdCBuYW1lc2l6ZTsKKysJY2hhciBuYW1lW05BTUVfTUFYX0xFTl07CisgCXVpbnQ2NF90 IHVpZDsKKyAJdWludDhfdCBjb3VudDsKKyAKKy0JaWYgKGxlbiA8IDEzKQorKwlpZiAoIXBhcnNl X21lZGlhX25hbWUob3BlcmFuZHMsIGxlbiwgMTEsIG5hbWUsICZuYW1lc2l6ZSkpCisgCQlyZXR1 cm4gTlVMTDsKKyAKKyAJdWlkID0gZ2V0X2JlNjQoJm9wZXJhbmRzWzBdKTsKKy0KKy0JbWVtc2V0 KG5hbWUsIDAsIHNpemVvZihuYW1lKSk7CistCW5hbWVzaXplID0gZ2V0X2JlMTYoJm9wZXJhbmRz WzExXSk7CistCW5hbWVsZW4gPSBNSU4obmFtZXNpemUsIHNpemVvZihuYW1lKSAtIDEpOworLQlp ZiAobmFtZWxlbiA+IDApIHsKKy0JCW1lbWNweShuYW1lLCAmb3BlcmFuZHNbMTNdLCBuYW1lbGVu KTsKKy0JCXN0cnRvdXRmOChuYW1lLCBuYW1lbGVuKTsKKy0JfQorLQorIAljb3VudCA9IG9wZXJh bmRzWzEzICsgbmFtZXNpemVdOworIAorIAlwbGF5ZXIgPSBzZXNzaW9uLT5jb250cm9sbGVyLT5w bGF5ZXI7CitAQCAtMjY1NSwyNCArMjY3MiwxOCBAQCBzdGF0aWMgc3RydWN0IG1lZGlhX2l0ZW0g KnBhcnNlX21lZGlhX2ZvbGRlcihzdHJ1Y3QgYXZyY3AgKnNlc3Npb24sCisgCXN0cnVjdCBhdnJj cF9wbGF5ZXIgKnBsYXllciA9IHNlc3Npb24tPmNvbnRyb2xsZXItPnBsYXllcjsKKyAJc3RydWN0 IG1lZGlhX3BsYXllciAqbXAgPSBwbGF5ZXItPnVzZXJfZGF0YTsKKyAJc3RydWN0IG1lZGlhX2l0 ZW0gKml0ZW07CistCXVpbnQxNl90IG5hbWVsZW47CistCWNoYXIgbmFtZVsyNTVdOworKwljaGFy IG5hbWVbTkFNRV9NQVhfTEVOXTsKKyAJdWludDY0X3QgdWlkOworIAl1aW50OF90IHR5cGU7Cisg CXVpbnQ4X3QgcGxheWFibGU7CisgCistCWlmIChsZW4gPCAxMikKKysJaWYgKCFwYXJzZV9tZWRp YV9uYW1lKG9wZXJhbmRzLCBsZW4sIDEyLCBuYW1lLCBOVUxMKSkKKyAJCXJldHVybiBOVUxMOwor IAorIAl1aWQgPSBnZXRfYmU2NCgmb3BlcmFuZHNbMF0pOworIAl0eXBlID0gb3BlcmFuZHNbOF07 CisgCXBsYXlhYmxlID0gb3BlcmFuZHNbOV07CisgCistCW1lbXNldChuYW1lLCAwLCBzaXplb2Yo bmFtZSkpOworLQluYW1lbGVuID0gTUlOKGdldF9iZTE2KCZvcGVyYW5kc1sxMl0pLCBzaXplb2Yo bmFtZSkgLSAxKTsKKy0JaWYgKG5hbWVsZW4gPiAwKQorLQkJbWVtY3B5KG5hbWUsICZvcGVyYW5k c1sxNF0sIG5hbWVsZW4pOworLQorIAlpdGVtID0gbWVkaWFfcGxheWVyX2NyZWF0ZV9mb2xkZXIo bXAsIG5hbWUsIHR5cGUsIHVpZCk7CisgCWlmICghaXRlbSkKKyAJCXJldHVybiBOVUxMOworLS0g CisyLjU1LjAKKworRnJvbSA4YmY3ZmU0ODQ3ODMzYTc2YmQ3ZTUxZDRkMjY5YjRiMzM2Mzg5MTkz IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQorRnJvbTogQmFzdGllbiBOb2NlcmEgPGhhZGVzc0Bo YWRlc3MubmV0PgorRGF0ZTogTW9uLCAxNyBBdWcgMjAyNiAxMDoxMToxOSArMDIwMAorU3ViamVj dDogW1BBVENIXSBhdnJjcDogRml4IG1lZGlhL2ZvbGRlciBuYW1lIG5vdCBiZWluZyBzZXQKKwor Km5hbWVsZW4gd2FzIHVzZWQgYmVmb3JlIGJlaW5nIHNldC4KKworRml4ZXM6IGJkODk4OTYyMGVk NiAoImF2cmNwOiBGaXggT3V0LW9mLUJvdW5kcyBSZWFkIGluIEFWUkNQIEdldEZvbGRlckl0ZW1z IHBhcnNpbmciKQorLS0tCisgcHJvZmlsZXMvYXVkaW8vYXZyY3AuYyB8IDIgKy0KKyAxIGZpbGUg Y2hhbmdlZCwgMSBpbnNlcnRpb24oKyksIDEgZGVsZXRpb24oLSkKKworZGlmZiAtLWdpdCBhL3By b2ZpbGVzL2F1ZGlvL2F2cmNwLmMgYi9wcm9maWxlcy9hdWRpby9hdnJjcC5jCitpbmRleCAyM2U5 NTljNzY5MTcuLjAyOGMxYzI1NGI4MiAxMDA2NDQKKy0tLSBhL3Byb2ZpbGVzL2F1ZGlvL2F2cmNw LmMKKysrKyBiL3Byb2ZpbGVzL2F1ZGlvL2F2cmNwLmMKK0BAIC0yNjIzLDcgKzI2MjMsNyBAQCBz dGF0aWMgZ2Jvb2xlYW4gcGFyc2VfbWVkaWFfbmFtZSh1aW50OF90ICpvcGVyYW5kcywgdWludDE2 X3QgbGVuLAorIAluYW1lc2l6ZSA9IE1JTihnZXRfYmUxNigmb3BlcmFuZHNbbmFtZV9sZW5fb2Zm c2V0XSksCisgCQkJbGVuIC0gbmFtZV9sZW5fb2Zmc2V0IC0gMik7CisgCW5hbWVzaXplID0gTUlO KG5hbWVzaXplLCBOQU1FX01BWF9MRU4gLSAxKTsKKy0JaWYgKCpuYW1lbGVuID4gMCkgeworKwlp ZiAobmFtZXNpemUgPiAwKSB7CisgCQlpZiAobGVuIDwgbmFtZV9sZW5fb2Zmc2V0ICsgMiArIG5h bWVzaXplKQorIAkJCXJldHVybiBGQUxTRTsKKyAJCW1lbWNweShuYW1lLCAmb3BlcmFuZHNbbmFt ZV9sZW5fb2Zmc2V0ICsgMl0sIG5hbWVzaXplKTsKKy0tIAorMi41NS4wCisKCmRpZmYgLS1naXQg YS9ibHVlei5zcGVjIGIvYmx1ZXouc3BlYwppbmRleCA1ZTkxMDdmLi5iNzMzNDRlIDEwMDY0NAot LS0gYS9ibHVlei5zcGVjCisrKyBiL2JsdWV6LnNwZWMKQEAgLTYsNyArNiw3IEBACiAKIE5hbWU6 ICAgIGJsdWV6CiBWZXJzaW9uOiA1Ljg3Ci1SZWxlYXNlOiAzJXs/ZGlzdH0KK1JlbGVhc2U6IDQl ez9kaXN0fQogU3VtbWFyeTogQmx1ZXRvb3RoIHV0aWxpdGllcwogTGljZW5zZTogR1BMLTIuMC1v ci1sYXRlcgogVVJMOiAgICAgaHR0cDovL3d3dy5ibHVlei5vcmcvCkBAIC0xNSw2ICsxNSw4IEBA IFNvdXJjZTA6IGh0dHBzOi8vd3d3Lmtlcm5lbC5vcmcvcHViL2xpbnV4L2JsdWV0b290aC8le25h bWV9LSV7dmVyc2lvbn0udGFyLnh6CiAKICMgZ2l0IGZvcm1hdC1wYXRjaCAtLXN0ZG91dCA1Ljg3 Li4uMzBkYjY2ZGM5NzFiZDFjZDk1ZDRhN2IwZWVhMjk2MzY3YWI2NWIzYgogUGF0Y2gxOiA1Ljg3 LWJ1Zy1maXhlcy0xLnBhdGNoCisjIENWRS0yMDI2LTc1MDMyCitQYXRjaDI6IGF2cmNwLWdldGZv bGRlcml0ZW1zLnBhdGNoCiAKIEJ1aWxkUmVxdWlyZXM6IGRidXMtZGV2ZWwgPj0gMS42CiBCdWls ZFJlcXVpcmVzOiBnbGliMi1kZXZlbApAQCAtMzQwLDYgKzM0Miw5IEBAIGluc3RhbGwgZW11bGF0 b3IvYnR2aXJ0ICR7UlBNX0JVSUxEX1JPT1R9LyV7X2xpYmV4ZWNkaXJ9L2JsdWV0b290aC8KICV7 X3VzZXJ1bml0ZGlyfS9vYmV4LnNlcnZpY2UKIAogJWNoYW5nZWxvZworKiBXZWQgQXVnIDE5IDIw MjYgQmFzdGllbiBOb2NlcmEgPGJub2NlcmFAcmVkaGF0LmNvbT4gLSA1Ljg3LTQKKy0gRml4IENW RS0yMDI2LTc1MDMyIChDbG9zZXM6ICMyNTE3ODc3KQorCiAqIEZyaSBKdWwgMTcgMjAyNiBCYXN0 aWVuIE5vY2VyYSA8Ym5vY2VyYUByZWRoYXQuY29tPiAtIDUuODctMwogLSBVcGRhdGUgdG8gbGF0 ZXN0IHVwc3RyZWFtIEhFQUQgdG8gZml4IGEgbnVtYmVyIG9mIHBvc3NpYmxlIGNyYXNoZXMKIAo=