From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Jan Macku To: git-commits@fedoraproject.org Subject: [rpms/curl] f44: Resolves: CVE-2026-11352 - QUIC zero-length UDP datagrams busy-loop Date: Mon, 24 Aug 2026 14:03:13 GMT Message-ID: <178758019376.1.9948622976002647029.rpms-curl-9ed2e194c55e@fedoraproject.org> List-ID: X-Git-Repo: rpms/curl X-Git-Branch: f44 X-Git-Rev: 9ed2e194c55e2475b47ed00a91a2221d14485a7e QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvY3VybApCcmFuY2gg OiBmNDQKQ29tbWl0IDogOWVkMmUxOTRjNTVlMjQ3NWI0N2VkMDBhOTFhMjIyMWQxNDQ4NWE3ZQpB dXRob3IgOiBKYW4gTWFja3UgPGphbWFja3VAcmVkaGF0LmNvbT4KRGF0ZSAgIDogMjAyNi0wOC0y NFQxMjo0OTo0OCswMjowMApTdGF0cyAgOiArNTYvLTEgaW4gMiBmaWxlKHMpClVSTCAgICA6IGh0 dHBzOi8vc3JjLmZlZG9yYXByb2plY3Qub3JnL3JwbXMvY3VybC9jLzllZDJlMTk0YzU1ZTI0NzVi NDdlZDAwYTkxYTIyMjFkMTQ0ODVhN2U/YnJhbmNoPWY0NAoKTG9nOgpSZXNvbHZlczogQ1ZFLTIw MjYtMTEzNTIgLSBRVUlDIHplcm8tbGVuZ3RoIFVEUCBkYXRhZ3JhbXMgYnVzeS1sb29wCgotLS0K ZGlmZiAtLWdpdCBhLzAwMTMtY3VybC04LjE4LjAtQ1ZFLTIwMjYtMTEzNTIucGF0Y2ggYi8wMDEz LWN1cmwtOC4xOC4wLUNWRS0yMDI2LTExMzUyLnBhdGNoCm5ldyBmaWxlIG1vZGUgMTAwNjQ0Cmlu ZGV4IDAwMDAwMDAuLjg2MjI5ODMKLS0tIC9kZXYvbnVsbAorKysgYi8wMDEzLWN1cmwtOC4xOC4w LUNWRS0yMDI2LTExMzUyLnBhdGNoCkBAIC0wLDAgKzEsNDkgQEAKK0Zyb20gZjZiM2QxYWU2OTM4 NTAxMTU1NWZkNzVhMmEyNzZiYTYyNDBkNTAxZiBNb24gU2VwIDE3IDAwOjAwOjAwIDIwMDEKK0Zy b206IFN0ZWZhbiBFaXNzaW5nIDxzdGVmYW5AZWlzc2luZy5vcmc+CitEYXRlOiBGcmksIDUgSnVu IDIwMjYgMDg6MzQ6NDYgKzAyMDAKK1N1YmplY3Q6IFtQQVRDSF0gcXVpYzogY291bnQgemVybyBs ZW5ndGggcGFja2V0cyBhZ2FpbnN0IG1heAorCitXaXRoIGEgZmxvb2Qgb2YgemVybyBsZW5naHQg VURQIHBhY2tldHMgdG8gY3VybCwgdGhlIHJlY2VpdmUgbG9vcCBtaWdodAorcnVuIGxvbmdlciB0 aGFuIGludGVuZGVkIHRvLiBDb3VudCBzdWNoIHBhY2tldHMgYWdhaW5zdCB0aGUgbWF4IHRvCit0 ZXJtaW5hdGUgdGhlIGxvb3AgYXMgaW50ZW5kZWQuCisKK1VSTDogaHR0cHM6Ly9oYWNrZXJvbmUu Y29tL3JlcG9ydHMvMzc4MzQzOAorUmVwb3J0ZWQtYnk6IHZlY3RvcnF1ZXVlIG9uIGhhY2tlcm9u ZQorQ2xvc2VzICMyMTg2OQorCisoY2hlcnJ5IHBpY2tlZCBmcm9tIGNvbW1pdCA1NmVjYTJhZmI0 ODA2ZjEwMzI4NzJmYTk3ZDE4MzRiM2MxMzg1Mjc2KQorLS0tCisgbGliL3ZxdWljL3ZxdWljLmMg fCA4ICsrKysrKy0tCisgMSBmaWxlIGNoYW5nZWQsIDYgaW5zZXJ0aW9ucygrKSwgMiBkZWxldGlv bnMoLSkKKworZGlmZiAtLWdpdCBhL2xpYi92cXVpYy92cXVpYy5jIGIvbGliL3ZxdWljL3ZxdWlj LmMKK2luZGV4IGQ3YmZhOTkxMDQuLmY0NTVmZTQxZjggMTAwNjQ0CistLS0gYS9saWIvdnF1aWMv dnF1aWMuYworKysrIGIvbGliL3ZxdWljL3ZxdWljLmMKK0BAIC00NDgsOCArNDQ4LDEwIEBAIHN0 YXRpYyBDVVJMY29kZSByZWN2bW1zZ19wYWNrZXRzKHN0cnVjdCBDdXJsX2NmaWx0ZXIgKmNmLAor ICAgICArK2NhbGxzOworICAgICBmb3IoaSA9IDA7IGkgPCBtY291bnQ7ICsraSkgeworICAgICAg IC8qIEEgemVyby1sZW5ndGggVURQIHBhY2tldCBpcyBubyBRVUlDIHBhY2tldC4gSWdub3JlLiAq LworLSAgICAgIGlmKCFtbXNnW2ldLm1zZ19sZW4pCisrICAgICAgaWYoIW1tc2dbaV0ubXNnX2xl bikgeworKyAgICAgICAgKytwa3RzOworICAgICAgICAgY29udGludWU7CisrICAgICAgfQorICAg ICAgIHRvdGFsX25yZWFkICs9IG1tc2dbaV0ubXNnX2xlbjsKKyAKKyAgICAgICBnc29fc2l6ZSA9 IHZxdWljX21zZ2hkcl9nZXRfdWRwX2dybygmbW1zZ1tpXS5tc2dfaGRyKTsKK0BAIC01MzIsOCAr NTM0LDEwIEBAIHN0YXRpYyBDVVJMY29kZSByZWN2bXNnX3BhY2tldHMoc3RydWN0IEN1cmxfY2Zp bHRlciAqY2YsCisgICAgICsrY2FsbHM7CisgCisgICAgIC8qIEEgMC1sZW5ndGggVURQIHBhY2tl dCBpcyBubyBRVUlDIHBhY2tldCAqLworLSAgICBpZighbnJlYWQpCisrICAgIGlmKCFucmVhZCkg eworKyAgICAgICsrcGt0czsKKyAgICAgICBjb250aW51ZTsKKysgICAgfQorIAorICAgICBnc29f c2l6ZSA9IHZxdWljX21zZ2hkcl9nZXRfdWRwX2dybygmbXNnKTsKKyAgICAgaWYoZ3NvX3NpemUg PT0gMCkKKy0tIAorMi41NS4wCisKCmRpZmYgLS1naXQgYS9jdXJsLnNwZWMgYi9jdXJsLnNwZWMK aW5kZXggNWZmMjdlMS4uZTc1YWI0OSAxMDA2NDQKLS0tIGEvY3VybC5zcGVjCisrKyBiL2N1cmwu c3BlYwpAQCAtMTIsNyArMTIsNyBAQAogU3VtbWFyeTogQSB1dGlsaXR5IGZvciBnZXR0aW5nIGZp bGVzIGZyb20gcmVtb3RlIHNlcnZlcnMgKEZUUCwgSFRUUCwgYW5kIG90aGVycykKIE5hbWU6IGN1 cmwKIFZlcnNpb246IDguMTguMAotUmVsZWFzZTogOCV7P2Rpc3R9CitSZWxlYXNlOiA5JXs/ZGlz dH0KIExpY2Vuc2U6IGN1cmwKIFNvdXJjZTA6IGh0dHBzOi8vY3VybC5zZS9kb3dubG9hZC8le25h bWV9LSV7dmVyc2lvbl9ub190aWxkZX0udGFyLnh6CiBTb3VyY2UxOiBodHRwczovL2N1cmwuc2Uv ZG93bmxvYWQvJXtuYW1lfS0le3ZlcnNpb25fbm9fdGlsZGV9LnRhci54ei5hc2MKQEAgLTYwLDYg KzYwLDkgQEAgUGF0Y2gwMTE6IDAwMTEtY3VybC04LjE4LjAtQ1ZFLTIwMjYtNzE2OC5wYXRjaAog IyBGaXggT0NTUCBzdGFwbGluZyBieXBhc3Mgd2l0aCBBcHBsZSBTZWNUcnVzdCAoQ1ZFLTIwMjYt NzAwOSkKIFBhdGNoMDEyOiAwMDEyLWN1cmwtOC4xOC4wLUNWRS0yMDI2LTcwMDkucGF0Y2gKIAor IyBGaXggUVVJQyB6ZXJvLWxlbmd0aCBVRFAgZGF0YWdyYW1zIGJ1c3ktbG9vcCAoQ1ZFLTIwMjYt MTEzNTIpCitQYXRjaDAxMzogMDAxMy1jdXJsLTguMTguMC1DVkUtMjAyNi0xMTM1Mi5wYXRjaAor CiAjIHBhdGNoIG1ha2luZyBsaWJjdXJsIG11bHRpbGliIHJlYWR5CiBQYXRjaDEwMTogMDEwMS1j dXJsLTcuMzIuMC1tdWx0aWxpYi5wYXRjaAogCkBAIC00ODMsNiArNDg2LDkgQEAgcm0gLWYgJHtS UE1fQlVJTERfUk9PVH0le19tYW5kaXJ9L21hbjEvd2N1cmwuMSoKICV7X2xpYmRpcn0vbGliY3Vy bC5zby40LlswLTldLlswLTldLm1pbmltYWwKIAogJWNoYW5nZWxvZworKiBNb24gQXVnIDI0IDIw MjYgSmFuIE1hY2t1IDxqYW1hY2t1QHJlZGhhdC5jb20+IC0gOC4xOC4wLTkKKy0gRml4IFFVSUMg emVyby1sZW5ndGggVURQIGRhdGFncmFtcyBidXN5LWxvb3AgKENWRS0yMDI2LTExMzUyKQorCiAq IFdlZCBKdWwgMjkgMjAyNiBKYW4gTWFja3UgPGphbWFja3VAcmVkaGF0LmNvbT4gLSA4LjE4LjAt OAogLSBGaXggdHJhaWxpbmcgZG90IGRvbWFpbiBzdXBlciBjb29raWUgKENWRS0yMDI2LTg5MjQp CiAtIEZpeCBTU0ggaW1wcm9wZXIgaG9zdCB2YWxpZGF0aW9uIChDVkUtMjAyNi05NTQ3KQo=