From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Jan Macku To: git-commits@fedoraproject.org Subject: [rpms/curl] f44: Resolves: CVE-2026-9080 - UAF after pause in socket callback Date: Mon, 24 Aug 2026 14:03:17 GMT Message-ID: <178758019761.1.14445830222440048380.rpms-curl-2f242f26cf3e@fedoraproject.org> List-ID: X-Git-Repo: rpms/curl X-Git-Branch: f44 X-Git-Rev: 2f242f26cf3eca5f27ec77c38908a5bafab03cd6 QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvY3VybApCcmFuY2gg OiBmNDQKQ29tbWl0IDogMmYyNDJmMjZjZjNlY2E1ZjI3ZWM3N2MzODkwOGE1YmFmYWIwM2NkNgpB dXRob3IgOiBKYW4gTWFja3UgPGphbWFja3VAcmVkaGF0LmNvbT4KRGF0ZSAgIDogMjAyNi0wOC0y NFQxNDo0NjowNCswMjowMApTdGF0cyAgOiArMTAzLy0wIGluIDIgZmlsZShzKQpVUkwgICAgOiBo dHRwczovL3NyYy5mZWRvcmFwcm9qZWN0Lm9yZy9ycG1zL2N1cmwvYy8yZjI0MmYyNmNmM2VjYTVm MjdlYzc3YzM4OTA4YTViYWZhYjAzY2Q2P2JyYW5jaD1mNDQKCkxvZzoKUmVzb2x2ZXM6IENWRS0y MDI2LTkwODAgLSBVQUYgYWZ0ZXIgcGF1c2UgaW4gc29ja2V0IGNhbGxiYWNrCgotLS0KZGlmZiAt LWdpdCBhLzAwMjEtY3VybC04LjE4LjAtQ1ZFLTIwMjYtOTA4MC5wYXRjaCBiLzAwMjEtY3VybC04 LjE4LjAtQ1ZFLTIwMjYtOTA4MC5wYXRjaApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAw MDAwLi4wOGQxMjg2Ci0tLSAvZGV2L251bGwKKysrIGIvMDAyMS1jdXJsLTguMTguMC1DVkUtMjAy Ni05MDgwLnBhdGNoCkBAIC0wLDAgKzEsOTYgQEAKK0Zyb20gYjQ0MzMwOGJmYWViZWE3OWQ3MzU1 ZjJlZGY1MGRmMmE5MDNjM2RjOCBNb24gU2VwIDE3IDAwOjAwOjAwIDIwMDEKK0Zyb206IERhbmll bCBTdGVuYmVyZyA8ZGFuaWVsQGhheHguc2U+CitEYXRlOiBUdWUsIDI2IE1heSAyMDI2IDA5OjUy OjE5ICswMjAwCitTdWJqZWN0OiBbUEFUQ0hdIG11bHRpOiBoYW5kbGUgcGF1c2UgaW4gbXVsdGkg c29ja2V0IGNhbGxiYWNrCisKK1RoZSBtZXZfc2hfZW50cnkgb2JqZWN0IG1pZ2h0IGJlIHJlbW92 ZWQgaWYgY3VybF9lYXN5X3BhdXNlKCkgaXMgY2FsbGVkCitmcm9tIHdpdGhpbiB0aGUgc29ja2V0 IGNhbGxiYWNrLgorCitJbnRyb2R1Y2VkIGEgJ21hZ2ljJyBzdHJ1Y3QgZmllbGQgdG8gdG8gJ21l dl9zaF9lbnRyeScgdG8gbWFrZSBpdCBlYXNpZXIKK3RvIHByb2dyYW1tYXRpY2FsbHkgZGV0ZWN0 L2Fzc2VydCBpZiB0aGUgcG9pbnRlciBpcyBiYWQgLSBpbiBkZWJ1ZworYnVpbGRzLgorCitSZXBv cnRlZC1ieTogSm9zaHVhIFJvZ2VycworQ2xvc2VzICMyMTc0OAorCisoY2hlcnJ5IHBpY2tlZCBm cm9tIGNvbW1pdCA1YWIzNGNiYTQyZTRlZTQyODJmZThiYWI0M2YzMTFkNTFiOWJmOWJkKQorLS0t CisgbGliL211bHRpX2V2LmMgfCAyMyArKysrKysrKysrKysrKysrKysrKy0tLQorIDEgZmlsZSBj aGFuZ2VkLCAyMCBpbnNlcnRpb25zKCspLCAzIGRlbGV0aW9ucygtKQorCitkaWZmIC0tZ2l0IGEv bGliL211bHRpX2V2LmMgYi9saWIvbXVsdGlfZXYuYworaW5kZXggMGM4OTcyMWYzNS4uZTA1NjZl OWZmNSAxMDA2NDQKKy0tLSBhL2xpYi9tdWx0aV9ldi5jCisrKysgYi9saWIvbXVsdGlfZXYuYwor QEAgLTQwLDYgKzQwLDggQEAgc3RhdGljIHZvaWQgbWV2X2luX2NhbGxiYWNrKHN0cnVjdCBDdXJs X211bHRpICptdWx0aSwgYm9vbCB2YWx1ZSkKKyAgIG11bHRpLT5pbl9jYWxsYmFjayA9IHZhbHVl OworIH0KKyAKKysjZGVmaW5lIFNIX0VOVFJZX01BR0lDIDB4NTcwMDkxZAorKworIC8qIEluZm9y bWF0aW9uIGFib3V0IGEgc29ja2V0IGZvciB3aGljaCB3ZSBpbmZvcm0gdGhlIGxpYmN1cmwgYXBw bGljYXRpb24KKyAgKiB3aGF0IHRvIHN1cGVydmlzZSAoQ1VSTF9QT0xMX0lOL0NVUkxfUE9MTF9P VVQvQ1VSTF9QT0xMX1JFTU9WRSkKKyAgKi8KK0BAIC01MSw2ICs1Myw5IEBAIHN0cnVjdCBtZXZf c2hfZW50cnkgeworICAgICAgICAgICAgICAgICAgICAgICAgICAqIGxpYmN1cmwgYXBwbGljYXRp b24gdG8gd2F0Y2ggb3V0IGZvciAqLworICAgdW5zaWduZWQgaW50IHJlYWRlcnM7IC8qIHRoaXMg bWFueSB0cmFuc2ZlcnMgd2FudCB0byByZWFkICovCisgICB1bnNpZ25lZCBpbnQgd3JpdGVyczsg LyogdGhpcyBtYW55IHRyYW5zZmVycyB3YW50IHRvIHdyaXRlICovCisrI2lmZGVmIERFQlVHQlVJ TEQKKysgIHVuc2lnbmVkIGludCBtYWdpYzsKKysjZW5kaWYKKyAgIEJJVChhbm5vdW5jZWQpOyAg ICAgICAvKiB0aGlzIHNvY2tldCBoYXMgYmVlbiBwYXNzZWQgdG8gdGhlIHNvY2tldAorICAgICAg ICAgICAgICAgICAgICAgICAgICAgIGNhbGxiYWNrIGF0IGxlYXN0IG9uY2UgKi8KKyB9OworQEAg LTc1LDYgKzgwLDkgQEAgc3RhdGljIHZvaWQgbWV2X3NoX2VudHJ5X2R0b3Iodm9pZCAqZnJlZXRo aXMpCisgeworICAgc3RydWN0IG1ldl9zaF9lbnRyeSAqZW50cnkgPSAoc3RydWN0IG1ldl9zaF9l bnRyeSAqKWZyZWV0aGlzOworICAgQ3VybF91aW50MzJfc3Bic2V0X2Rlc3Ryb3koJmVudHJ5LT54 ZmVycyk7CisrI2lmZGVmIERFQlVHQlVJTEQKKysgIGVudHJ5LT5tYWdpYyA9IDA7CisrI2VuZGlm CisgICBjdXJseF9mcmVlKGVudHJ5KTsKKyB9CisgCitAQCAtMTEzLDcgKzEyMSw5IEBAIHN0YXRp YyBzdHJ1Y3QgbWV2X3NoX2VudHJ5ICptZXZfc2hfZW50cnlfYWRkKHN0cnVjdCBDdXJsX2hhc2gg KnNoLAorICAgICBtZXZfc2hfZW50cnlfZHRvcihjaGVjayk7CisgICAgIHJldHVybiBOVUxMOyAv KiBtYWpvciBmYWlsdXJlICovCisgICB9CistCisrI2lmZGVmIERFQlVHQlVJTEQKKysgIGNoZWNr LT5tYWdpYyA9IFNIX0VOVFJZX01BR0lDOworKyNlbmRpZgorICAgcmV0dXJuIGNoZWNrOyAvKiB0 aGluZ3MgYXJlIGdvb2QgaW4gc29ja2hhc2ggbGFuZCAqLworIH0KKyAKK0BAIC0yMjIsNiArMjMy LDcgQEAgc3RhdGljIENVUkxNY29kZSBtZXZfc2hfZW50cnlfdXBkYXRlKHN0cnVjdCBDdXJsX211 bHRpICptdWx0aSwKKyAKKyAgIC8qIHdlIHNob3VsZCBvbmx5IGJlIGNhbGxlZCB3aGVuIHRoZSBj YWxsYmFjayBleGlzdHMgKi8KKyAgIERFQlVHQVNTRVJUKG11bHRpLT5zb2NrZXRfY2IpOworKyAg REVCVUdBU1NFUlQoZW50cnktPm1hZ2ljID09IFNIX0VOVFJZX01BR0lDKTsKKyAgIGlmKCFtdWx0 aS0+c29ja2V0X2NiKQorICAgICByZXR1cm4gQ1VSTE1fT0s7CisgCitAQCAtMjcxLDEyICsyODIs MTggQEAgc3RhdGljIENVUkxNY29kZSBtZXZfc2hfZW50cnlfdXBkYXRlKHN0cnVjdCBDdXJsX211 bHRpICptdWx0aSwKKyAgIHJjID0gbXVsdGktPnNvY2tldF9jYihkYXRhLCBzLCBjb21ib2FjdGlv biwgbXVsdGktPnNvY2tldF91c2VycCwKKyAgICAgICAgICAgICAgICAgICAgICAgICBlbnRyeS0+ dXNlcl9kYXRhKTsKKyAgIG1ldl9pbl9jYWxsYmFjayhtdWx0aSwgRkFMU0UpOworLSAgZW50cnkt PmFubm91bmNlZCA9IFRSVUU7CisgICBpZihyYyA9PSAtMSkgeworICAgICBtdWx0aS0+ZGVhZCA9 IFRSVUU7CisgICAgIHJldHVybiBDVVJMTV9BQk9SVEVEX0JZX0NBTExCQUNLOworICAgfQorLSAg ZW50cnktPmFjdGlvbiA9ICh1bnNpZ25lZCBpbnQpY29tYm9hY3Rpb247CisrICAvKiBjdXJsX2Vh c3lfcGF1c2UoKSBpcyBkb2N1bWVudGVkIGFzIGNhbGxhYmxlIGZyb20gYW55IGNhbGxiYWNrOyBp dAorKyAgICogcmUtZW50ZXJzIG1ldl9hc3Nlc3MoKSB3aGljaCBtYXkgZnJlZSB0aGlzICdlbnRy eScuIFJlLWZldGNoLiAqLworKyAgZW50cnkgPSBtZXZfc2hfZW50cnlfZ2V0KCZtdWx0aS0+ZXYu c2hfZW50cmllcywgcyk7CisrICBpZihlbnRyeSkgeworKyAgICBERUJVR0FTU0VSVChlbnRyeS0+ bWFnaWMgPT0gU0hfRU5UUllfTUFHSUMpOworKyAgICBlbnRyeS0+YW5ub3VuY2VkID0gVFJVRTsK KysgICAgZW50cnktPmFjdGlvbiA9ICh1bnNpZ25lZCBpbnQpY29tYm9hY3Rpb247CisrICB9Cisg ICByZXR1cm4gQ1VSTE1fT0s7CisgfQorIAorLS0gCisyLjU1LjAKKwoKZGlmZiAtLWdpdCBhL2N1 cmwuc3BlYyBiL2N1cmwuc3BlYwppbmRleCA4ZWNmMDNiLi4yZGZmNDY2IDEwMDY0NAotLS0gYS9j dXJsLnNwZWMKKysrIGIvY3VybC5zcGVjCkBAIC04NCw2ICs4NCw5IEBAIFBhdGNoMDE5OiAwMDE5 LWN1cmwtOC4xOC4wLUNWRS0yMDI2LTk1NDYucGF0Y2gKICMgRml4IGV4cG9zaW5nIEhUVFAvMyBl YXJseSBkYXRhIChDVkUtMjAyNi05NTQ1KQogUGF0Y2gwMjA6IDAwMjAtY3VybC04LjE4LjAtQ1ZF LTIwMjYtOTU0NS5wYXRjaAogCisjIEZpeCBVQUYgYWZ0ZXIgcGF1c2UgaW4gc29ja2V0IGNhbGxi YWNrIChDVkUtMjAyNi05MDgwKQorUGF0Y2gwMjE6IDAwMjEtY3VybC04LjE4LjAtQ1ZFLTIwMjYt OTA4MC5wYXRjaAorCiAjIHBhdGNoIG1ha2luZyBsaWJjdXJsIG11bHRpbGliIHJlYWR5CiBQYXRj aDEwMTogMDEwMS1jdXJsLTcuMzIuMC1tdWx0aWxpYi5wYXRjaAogCkBAIC0zMDUsNiArMzA4LDkg QEAgYmUgaW5zdGFsbGVkLgogIyA8aHR0cHM6Ly9naXRodWIuY29tL2JhZ2Rlci9jdXJsL2NvbW1p dC8yMWU4MmJkNiNjb21taXRjb21tZW50LTEyMjI2NTgyPgogcHJpbnRmICIxODAxXG4iID4+dGVz dHMvZGF0YS9ESVNBQkxFRAogCisjIGRpc2FibGUgdGVzdCAxNzAxIC0tIG5naHR0cHggcmVqZWN0 cyBoMmMgdXBncmFkZSB3aXRoIDQwMCBCYWQgUmVxdWVzdAorcHJpbnRmICIxNzAxXG4iID4+dGVz dHMvZGF0YS9ESVNBQkxFRAorCiAjIHRlc3QzMDI2OiBhdm9pZCBwdGhyZWFkX2NyZWF0ZSgpIGZh aWx1cmUgZHVlIHRvIHJlc291cmNlIGV4aGF1c3Rpb24gb24gaTM4NgogJWlmYXJjaCAle2l4ODZ9 CiBzZWQgLWUgJ3N8TlVNX1RIUkVBRFMgMTAwMCR8TlVNX1RIUkVBRFMgMjU2fCcgXApAQCAtNTE2 LDYgKzUyMiw3IEBAIHJtIC1mICR7UlBNX0JVSUxEX1JPT1R9JXtfbWFuZGlyfS9tYW4xL3djdXJs LjEqCiAtIEZpeCBlbnYtc2V0IGNyb3NzLXByb3h5IERpZ2VzdCBhdXRoIHN0YXRlIGxlYWsgKENW RS0yMDI2LTg5MjcpCiAtIEZpeCBzZW5kaW5nIG9sZCByZWZlcmVyIChDVkUtMjAyNi05NTQ2KQog LSBGaXggZXhwb3NpbmcgSFRUUC8zIGVhcmx5IGRhdGEgKENWRS0yMDI2LTk1NDUpCistIEZpeCBV QUYgYWZ0ZXIgcGF1c2UgaW4gc29ja2V0IGNhbGxiYWNrIChDVkUtMjAyNi05MDgwKQogCiAqIFdl ZCBKdWwgMjkgMjAyNiBKYW4gTWFja3UgPGphbWFja3VAcmVkaGF0LmNvbT4gLSA4LjE4LjAtOAog LSBGaXggdHJhaWxpbmcgZG90IGRvbWFpbiBzdXBlciBjb29raWUgKENWRS0yMDI2LTg5MjQpCg==