From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Adrian Vovk To: git-commits@fedoraproject.org Subject: [rpms/gdk-pixbuf2] rawhide: Fix CVE-2026-16768 Date: Wed, 26 Aug 2026 20:10:40 GMT Message-ID: <178777504006.1.1056052733192053472.rpms-gdk-pixbuf2-a61a1744dbc2@fedoraproject.org> List-ID: X-Git-Repo: rpms/gdk-pixbuf2 X-Git-Branch: rawhide X-Git-Rev: a61a1744dbc2f74d9b8190e223ede22f5c3f5f63 QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvZ2RrLXBpeGJ1ZjIK QnJhbmNoIDogcmF3aGlkZQpDb21taXQgOiBhNjFhMTc0NGRiYzJmNzRkOWI4MTkwZTIyM2VkZTIy ZjVjM2Y1ZjYzCkF1dGhvciA6IEFkcmlhbiBWb3ZrIDxhdm92a0ByZWRoYXQuY29tPgpEYXRlICAg OiAyMDI2LTA4LTI2VDE2OjA3OjMyLTA0OjAwClN0YXRzICA6ICsxMDIvLTAgaW4gMiBmaWxlKHMp ClVSTCAgICA6IGh0dHBzOi8vc3JjLmZlZG9yYXByb2plY3Qub3JnL3JwbXMvZ2RrLXBpeGJ1ZjIv Yy9hNjFhMTc0NGRiYzJmNzRkOWI4MTkwZTIyM2VkZTIyZjVjM2Y1ZjYzP2JyYW5jaD1yYXdoaWRl CgpMb2c6CkZpeCBDVkUtMjAyNi0xNjc2OAoKLS0tCmRpZmYgLS1naXQgYS9DVkUtMjAyNi0xNjc2 OC5wYXRjaCBiL0NWRS0yMDI2LTE2NzY4LnBhdGNoCm5ldyBmaWxlIG1vZGUgMTAwNjQ0CmluZGV4 IDAwMDAwMDAuLjVjYTJkMmUKLS0tIC9kZXYvbnVsbAorKysgYi9DVkUtMjAyNi0xNjc2OC5wYXRj aApAQCAtMCwwICsxLDEwMCBAQAorRnJvbSAyNjYzZmNjYzQyMzVlYWI0YjQ1NWZjZTQ4YzNlM2Iw MDczZTgzOGUwIE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQorRnJvbTogQWRyaWFuIFZvdmsgPGFk cmlhbnZvdmtAZ21haWwuY29tPgorRGF0ZTogV2VkLCAyNiBBdWcgMjAyNiAxNTo1NzoxMSAtMDQw MAorU3ViamVjdDogW1BBVENIXSBpY286IFByb3RlY3QgYWdhaW5zdCBvdXQtb2YtYm91bmRzIHBh bGV0dGUgaW5kZXgKKworV2UgcHJldmlvdXNseSBkaWRuJ3QgY2hlY2sgdGhhdCB0aGUgcGFsZXR0 ZSBpbmRpY2VzIGluIHRoZSBwaXhlbCBkYXRhCityZWZlcnJlZCB0byBwYWxldHRlIGNvbG9ycyB0 aGF0IGFjdHVhbGx5IGV4aXN0LiBBIG1hbGZvcm1lZCBJQ08gZmlsZQorY291bGQgdGh1cyB0cmlj ayBnZGstcGl4YnVmIGludG8gcmVhZGluZyBwYXN0IHRoZSBlbmQgb2YgdGhlIHBhbGV0dGUKK2Rh dGEgYW5kIGxlYWtpbmcgaGVhcCBtZW1vcnkuCisKK0Nsb3NlczogIzMwMgorRml4ZXM6IENWRS0y MDI2LTE2NzY4CistLS0KKyBnZGstcGl4YnVmL2lvLWljby5jIHwgMzMgKysrKysrKysrKysrKysr KysrKysrKystLS0tLS0tLS0tCisgMSBmaWxlIGNoYW5nZWQsIDIzIGluc2VydGlvbnMoKyksIDEw IGRlbGV0aW9ucygtKQorCitkaWZmIC0tZ2l0IGEvZ2RrLXBpeGJ1Zi9pby1pY28uYyBiL2dkay1w aXhidWYvaW8taWNvLmMKK2luZGV4IDI1MjNjMDgwMy4uMjEwMDgzMDdmIDEwMDY0NAorLS0tIGEv Z2RrLXBpeGJ1Zi9pby1pY28uYworKysrIGIvZ2RrLXBpeGJ1Zi9pby1pY28uYworQEAgLTcyNSw2 ICs3MjUsNyBAQCBzdGF0aWMgdm9pZCBPbmVMaW5lOChzdHJ1Y3QgaWNvX3Byb2dyZXNzaXZlX3N0 YXRlICpjb250ZXh0KQorIAlnaW50IFg7CisgCWd1Y2hhciAqUGl4ZWxzOworIAlnc2l6ZSByb3dz dHJpZGUgPSBnZGtfcGl4YnVmX2dldF9yb3dzdHJpZGUgKGNvbnRleHQtPnBpeGJ1Zik7CisrCWdp bnQgcGFsZXR0ZV9zaXplID0gKGNvbnRleHQtPkhlYWRlclNpemUgLSBJTkZPSEVBREVSX1NJWkUg LSBjb250ZXh0LT5ESUJvZmZzZXQpIC8gNDsKKyAKKyAJWCA9IDA7CisgCWlmIChjb250ZXh0LT5I ZWFkZXIuTmVnYXRpdmUgPT0gMCkKK0BAIC03MzQsMTMgKzczNSwxNyBAQCBzdGF0aWMgdm9pZCBP bmVMaW5lOChzdHJ1Y3QgaWNvX3Byb2dyZXNzaXZlX3N0YXRlICpjb250ZXh0KQorIAkJUGl4ZWxz ID0gKGdka19waXhidWZfZ2V0X3BpeGVscyAoY29udGV4dC0+cGl4YnVmKSArCisgCQkJICByb3dz dHJpZGUgKiBjb250ZXh0LT5MaW5lcyk7CisgCXdoaWxlIChYIDwgY29udGV4dC0+SGVhZGVyLndp ZHRoKSB7CisrCQlndWludDggaWR4ID0gY29udGV4dC0+TGluZUJ1ZltYXTsKKysJCWlmIChpZHgg Pj0gcGFsZXR0ZV9zaXplKQorKwkJCWlkeCA9IDA7CisrCisgCQkvKiBUaGUgam95cyBvZiBoYXZp bmcgYSBCR1IgYnl0ZW9yZGVyICovCisgCQlQaXhlbHNbWCAqIDQgKyAwXSA9CistCQkgICAgY29u dGV4dC0+SGVhZGVyQnVmWzQgKiBjb250ZXh0LT5MaW5lQnVmW1hdICsgSU5GT0hFQURFUl9TSVpF ICsgMiArIGNvbnRleHQtPkRJQm9mZnNldF07CisrCQkgICAgY29udGV4dC0+SGVhZGVyQnVmWzQg KiBpZHggKyBJTkZPSEVBREVSX1NJWkUgKyAyICsgY29udGV4dC0+RElCb2Zmc2V0XTsKKyAJCVBp eGVsc1tYICogNCArIDFdID0KKy0JCSAgICBjb250ZXh0LT5IZWFkZXJCdWZbNCAqIGNvbnRleHQt PkxpbmVCdWZbWF0gKyBJTkZPSEVBREVSX1NJWkUgKyAxICtjb250ZXh0LT5ESUJvZmZzZXRdOwor KwkJICAgIGNvbnRleHQtPkhlYWRlckJ1Zls0ICogaWR4ICsgSU5GT0hFQURFUl9TSVpFICsgMSAr Y29udGV4dC0+RElCb2Zmc2V0XTsKKyAJCVBpeGVsc1tYICogNCArIDJdID0KKy0JCSAgICBjb250 ZXh0LT5IZWFkZXJCdWZbNCAqIGNvbnRleHQtPkxpbmVCdWZbWF0gKyBJTkZPSEVBREVSX1NJWkUg K2NvbnRleHQtPkRJQm9mZnNldF07CisrCQkgICAgY29udGV4dC0+SGVhZGVyQnVmWzQgKiBpZHgg KyBJTkZPSEVBREVSX1NJWkUgK2NvbnRleHQtPkRJQm9mZnNldF07CisgCQlQaXhlbHNbWCAqIDQg KyAzXSA9IDB4ZmY7CisgCQlYKys7CisgCX0KK0BAIC03NTAsNiArNzU1LDcgQEAgc3RhdGljIHZv aWQgT25lTGluZTQoc3RydWN0IGljb19wcm9ncmVzc2l2ZV9zdGF0ZSAqY29udGV4dCkKKyAJZ2lu dCBYOworIAlndWNoYXIgKlBpeGVsczsKKyAJZ3NpemUgcm93c3RyaWRlID0gZ2RrX3BpeGJ1Zl9n ZXRfcm93c3RyaWRlIChjb250ZXh0LT5waXhidWYpOworKwlnaW50IHBhbGV0dGVfc2l6ZSA9IChj b250ZXh0LT5IZWFkZXJTaXplIC0gSU5GT0hFQURFUl9TSVpFIC0gY29udGV4dC0+RElCb2Zmc2V0 KSAvIDQ7CisgCisgCVggPSAwOworIAlpZiAoY29udGV4dC0+SGVhZGVyLk5lZ2F0aXZlID09IDAp CitAQCAtNzYxLDI1ICs3NjcsMzIgQEAgc3RhdGljIHZvaWQgT25lTGluZTQoc3RydWN0IGljb19w cm9ncmVzc2l2ZV9zdGF0ZSAqY29udGV4dCkKKyAJCisgCXdoaWxlIChYIDwgY29udGV4dC0+SGVh ZGVyLndpZHRoKSB7CisgCQlndWNoYXIgUGl4OworKwkJZ3VpbnQ4IGlkeDsKKyAJCQorIAkJUGl4 ID0gY29udGV4dC0+TGluZUJ1ZltYLzJdOworKwkJaWR4ID0gUGl4ID4+IDQ7CisrCQlpZiAoaWR4 ID49IHBhbGV0dGVfc2l6ZSkKKysJCQlpZHggPSAwOworIAorIAkJUGl4ZWxzW1ggKiA0ICsgMF0g PQorLQkJICAgIGNvbnRleHQtPkhlYWRlckJ1Zls0ICogKFBpeD4+NCkgKyBJTkZPSEVBREVSX1NJ WkUgKyAyICsgY29udGV4dC0+RElCb2Zmc2V0XTsKKysJCSAgICBjb250ZXh0LT5IZWFkZXJCdWZb NCAqIGlkeCArIElORk9IRUFERVJfU0laRSArIDIgKyBjb250ZXh0LT5ESUJvZmZzZXRdOworIAkJ UGl4ZWxzW1ggKiA0ICsgMV0gPQorLQkJICAgIGNvbnRleHQtPkhlYWRlckJ1Zls0ICogKFBpeD4+ NCkgKyBJTkZPSEVBREVSX1NJWkUgKyAxICtjb250ZXh0LT5ESUJvZmZzZXRdOworKwkJICAgIGNv bnRleHQtPkhlYWRlckJ1Zls0ICogaWR4ICsgSU5GT0hFQURFUl9TSVpFICsgMSArY29udGV4dC0+ RElCb2Zmc2V0XTsKKyAJCVBpeGVsc1tYICogNCArIDJdID0KKy0JCSAgICBjb250ZXh0LT5IZWFk ZXJCdWZbNCAqIChQaXg+PjQpICsgSU5GT0hFQURFUl9TSVpFICsgY29udGV4dC0+RElCb2Zmc2V0 XTsKKysJCSAgICBjb250ZXh0LT5IZWFkZXJCdWZbNCAqIGlkeCArIElORk9IRUFERVJfU0laRSAr IGNvbnRleHQtPkRJQm9mZnNldF07CisgCQlQaXhlbHNbWCAqIDQgKyAzXSA9IDB4ZmY7CisgCQlY Kys7CistCQlpZiAoWDxjb250ZXh0LT5IZWFkZXIud2lkdGgpIHsgCisrCQlpZiAoWDxjb250ZXh0 LT5IZWFkZXIud2lkdGgpIHsKKyAJCQkvKiBIYW5kbGUgdGhlIG90aGVyIDQgYml0IHBpeGVsIG9u bHkgd2hlbiB0aGVyZSBpcyBvbmUgKi8KKysJCQlpZHggPSBQaXggJiAxNTsKKysJCQlpZiAoaWR4 ID49IHBhbGV0dGVfc2l6ZSkKKysJCQkJaWR4ID0gMDsKKyAJCQlQaXhlbHNbWCAqIDQgKyAwXSA9 CistCQkJICAgIGNvbnRleHQtPkhlYWRlckJ1Zls0ICogKFBpeCYxNSkgKyBJTkZPSEVBREVSX1NJ WkUgKyAyICsgY29udGV4dC0+RElCb2Zmc2V0XTsKKysJCQkgICAgY29udGV4dC0+SGVhZGVyQnVm WzQgKiBpZHggKyBJTkZPSEVBREVSX1NJWkUgKyAyICsgY29udGV4dC0+RElCb2Zmc2V0XTsKKyAJ CQlQaXhlbHNbWCAqIDQgKyAxXSA9CistCQkJICAgIGNvbnRleHQtPkhlYWRlckJ1Zls0ICogKFBp eCYxNSkgKyBJTkZPSEVBREVSX1NJWkUgKyAxICsgY29udGV4dC0+RElCb2Zmc2V0XTsKKysJCQkg ICAgY29udGV4dC0+SGVhZGVyQnVmWzQgKiBpZHggKyBJTkZPSEVBREVSX1NJWkUgKyAxICsgY29u dGV4dC0+RElCb2Zmc2V0XTsKKyAJCQlQaXhlbHNbWCAqIDQgKyAyXSA9CistCQkJICAgIGNvbnRl eHQtPkhlYWRlckJ1Zls0ICogKFBpeCYxNSkgKyBJTkZPSEVBREVSX1NJWkUgKyBjb250ZXh0LT5E SUJvZmZzZXRdOworKwkJCSAgICBjb250ZXh0LT5IZWFkZXJCdWZbNCAqIGlkeCArIElORk9IRUFE RVJfU0laRSArIGNvbnRleHQtPkRJQm9mZnNldF07CisgCQkJUGl4ZWxzW1ggKiA0ICsgM10gPSAw eGZmOworIAkJCVgrKzsKKyAJCX0KKy0tIAorR2l0TGFiCisKCmRpZmYgLS1naXQgYS9nZGstcGl4 YnVmMi5zcGVjIGIvZ2RrLXBpeGJ1ZjIuc3BlYwppbmRleCA3OGRlNmUxLi4zZWU5Y2M0IDEwMDY0 NAotLS0gYS9nZGstcGl4YnVmMi5zcGVjCisrKyBiL2dkay1waXhidWYyLnNwZWMKQEAgLTE1LDYg KzE1LDggQEAgTGljZW5zZTogICAgICAgIExHUEwtMi4xLW9yLWxhdGVyCiBVUkw6ICAgICAgICAg ICAgaHR0cHM6Ly9naXRsYWIuZ25vbWUub3JnL0dOT01FL2dkay1waXhidWYKIFNvdXJjZTA6ICAg ICAgICBodHRwczovL2Rvd25sb2FkLmdub21lLm9yZy9zb3VyY2VzL2dkay1waXhidWYvJXtnbm9t ZV9tYWpvcl9taW5vcl92ZXJzaW9ufS9nZGstcGl4YnVmLSV7dmVyc2lvbn0udGFyLnh6CiAKK1Bh dGNoMDogICAgICAgICBDVkUtMjAyNi0xNjc2OC5wYXRjaAorCiBCdWlsZFJlcXVpcmVzOiAgZG9j Ym9vay1zdHlsZS14c2wKIEJ1aWxkUmVxdWlyZXM6ICBnZXR0ZXh0CiBCdWlsZFJlcXVpcmVzOiAg Z2ktZG9jZ2VuCg==