From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Adrian Vovk To: git-commits@fedoraproject.org Subject: [rpms/gdk-pixbuf2] f44: Fix CVE-2026-16768 Date: Wed, 26 Aug 2026 20:15:23 GMT Message-ID: <178777532366.1.2345193583420676914.rpms-gdk-pixbuf2-062053d30f2e@fedoraproject.org> List-ID: X-Git-Repo: rpms/gdk-pixbuf2 X-Git-Branch: f44 X-Git-Rev: 062053d30f2e4786bd5c18497bbecf3b39bd853e QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvZ2RrLXBpeGJ1ZjIK QnJhbmNoIDogZjQ0CkNvbW1pdCA6IDA2MjA1M2QzMGYyZTQ3ODZiZDVjMTg0OTdiYmVjZjNiMzli ZDg1M2UKQXV0aG9yIDogQWRyaWFuIFZvdmsgPGF2b3ZrQHJlZGhhdC5jb20+CkRhdGUgICA6IDIw MjYtMDgtMjZUMTY6MTQ6NDYtMDQ6MDAKU3RhdHMgIDogKzEwMi8tMCBpbiAyIGZpbGUocykKVVJM ICAgIDogaHR0cHM6Ly9zcmMuZmVkb3JhcHJvamVjdC5vcmcvcnBtcy9nZGstcGl4YnVmMi9jLzA2 MjA1M2QzMGYyZTQ3ODZiZDVjMTg0OTdiYmVjZjNiMzliZDg1M2U/YnJhbmNoPWY0NAoKTG9nOgpG aXggQ1ZFLTIwMjYtMTY3NjgKCi0tLQpkaWZmIC0tZ2l0IGEvQ1ZFLTIwMjYtMTY3NjgucGF0Y2gg Yi9DVkUtMjAyNi0xNjc2OC5wYXRjaApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAw Li41Y2EyZDJlCi0tLSAvZGV2L251bGwKKysrIGIvQ1ZFLTIwMjYtMTY3NjgucGF0Y2gKQEAgLTAs MCArMSwxMDAgQEAKK0Zyb20gMjY2M2ZjY2M0MjM1ZWFiNGI0NTVmY2U0OGMzZTNiMDA3M2U4Mzhl MCBNb24gU2VwIDE3IDAwOjAwOjAwIDIwMDEKK0Zyb206IEFkcmlhbiBWb3ZrIDxhZHJpYW52b3Zr QGdtYWlsLmNvbT4KK0RhdGU6IFdlZCwgMjYgQXVnIDIwMjYgMTU6NTc6MTEgLTA0MDAKK1N1Ympl Y3Q6IFtQQVRDSF0gaWNvOiBQcm90ZWN0IGFnYWluc3Qgb3V0LW9mLWJvdW5kcyBwYWxldHRlIGlu ZGV4CisKK1dlIHByZXZpb3VzbHkgZGlkbid0IGNoZWNrIHRoYXQgdGhlIHBhbGV0dGUgaW5kaWNl cyBpbiB0aGUgcGl4ZWwgZGF0YQorcmVmZXJyZWQgdG8gcGFsZXR0ZSBjb2xvcnMgdGhhdCBhY3R1 YWxseSBleGlzdC4gQSBtYWxmb3JtZWQgSUNPIGZpbGUKK2NvdWxkIHRodXMgdHJpY2sgZ2RrLXBp eGJ1ZiBpbnRvIHJlYWRpbmcgcGFzdCB0aGUgZW5kIG9mIHRoZSBwYWxldHRlCitkYXRhIGFuZCBs ZWFraW5nIGhlYXAgbWVtb3J5LgorCitDbG9zZXM6ICMzMDIKK0ZpeGVzOiBDVkUtMjAyNi0xNjc2 OAorLS0tCisgZ2RrLXBpeGJ1Zi9pby1pY28uYyB8IDMzICsrKysrKysrKysrKysrKysrKysrKysr LS0tLS0tLS0tLQorIDEgZmlsZSBjaGFuZ2VkLCAyMyBpbnNlcnRpb25zKCspLCAxMCBkZWxldGlv bnMoLSkKKworZGlmZiAtLWdpdCBhL2dkay1waXhidWYvaW8taWNvLmMgYi9nZGstcGl4YnVmL2lv LWljby5jCitpbmRleCAyNTIzYzA4MDMuLjIxMDA4MzA3ZiAxMDA2NDQKKy0tLSBhL2dkay1waXhi dWYvaW8taWNvLmMKKysrKyBiL2dkay1waXhidWYvaW8taWNvLmMKK0BAIC03MjUsNiArNzI1LDcg QEAgc3RhdGljIHZvaWQgT25lTGluZTgoc3RydWN0IGljb19wcm9ncmVzc2l2ZV9zdGF0ZSAqY29u dGV4dCkKKyAJZ2ludCBYOworIAlndWNoYXIgKlBpeGVsczsKKyAJZ3NpemUgcm93c3RyaWRlID0g Z2RrX3BpeGJ1Zl9nZXRfcm93c3RyaWRlIChjb250ZXh0LT5waXhidWYpOworKwlnaW50IHBhbGV0 dGVfc2l6ZSA9IChjb250ZXh0LT5IZWFkZXJTaXplIC0gSU5GT0hFQURFUl9TSVpFIC0gY29udGV4 dC0+RElCb2Zmc2V0KSAvIDQ7CisgCisgCVggPSAwOworIAlpZiAoY29udGV4dC0+SGVhZGVyLk5l Z2F0aXZlID09IDApCitAQCAtNzM0LDEzICs3MzUsMTcgQEAgc3RhdGljIHZvaWQgT25lTGluZTgo c3RydWN0IGljb19wcm9ncmVzc2l2ZV9zdGF0ZSAqY29udGV4dCkKKyAJCVBpeGVscyA9IChnZGtf cGl4YnVmX2dldF9waXhlbHMgKGNvbnRleHQtPnBpeGJ1ZikgKworIAkJCSAgcm93c3RyaWRlICog Y29udGV4dC0+TGluZXMpOworIAl3aGlsZSAoWCA8IGNvbnRleHQtPkhlYWRlci53aWR0aCkgewor KwkJZ3VpbnQ4IGlkeCA9IGNvbnRleHQtPkxpbmVCdWZbWF07CisrCQlpZiAoaWR4ID49IHBhbGV0 dGVfc2l6ZSkKKysJCQlpZHggPSAwOworKworIAkJLyogVGhlIGpveXMgb2YgaGF2aW5nIGEgQkdS IGJ5dGVvcmRlciAqLworIAkJUGl4ZWxzW1ggKiA0ICsgMF0gPQorLQkJICAgIGNvbnRleHQtPkhl YWRlckJ1Zls0ICogY29udGV4dC0+TGluZUJ1ZltYXSArIElORk9IRUFERVJfU0laRSArIDIgKyBj b250ZXh0LT5ESUJvZmZzZXRdOworKwkJICAgIGNvbnRleHQtPkhlYWRlckJ1Zls0ICogaWR4ICsg SU5GT0hFQURFUl9TSVpFICsgMiArIGNvbnRleHQtPkRJQm9mZnNldF07CisgCQlQaXhlbHNbWCAq IDQgKyAxXSA9CistCQkgICAgY29udGV4dC0+SGVhZGVyQnVmWzQgKiBjb250ZXh0LT5MaW5lQnVm W1hdICsgSU5GT0hFQURFUl9TSVpFICsgMSArY29udGV4dC0+RElCb2Zmc2V0XTsKKysJCSAgICBj b250ZXh0LT5IZWFkZXJCdWZbNCAqIGlkeCArIElORk9IRUFERVJfU0laRSArIDEgK2NvbnRleHQt PkRJQm9mZnNldF07CisgCQlQaXhlbHNbWCAqIDQgKyAyXSA9CistCQkgICAgY29udGV4dC0+SGVh ZGVyQnVmWzQgKiBjb250ZXh0LT5MaW5lQnVmW1hdICsgSU5GT0hFQURFUl9TSVpFICtjb250ZXh0 LT5ESUJvZmZzZXRdOworKwkJICAgIGNvbnRleHQtPkhlYWRlckJ1Zls0ICogaWR4ICsgSU5GT0hF QURFUl9TSVpFICtjb250ZXh0LT5ESUJvZmZzZXRdOworIAkJUGl4ZWxzW1ggKiA0ICsgM10gPSAw eGZmOworIAkJWCsrOworIAl9CitAQCAtNzUwLDYgKzc1NSw3IEBAIHN0YXRpYyB2b2lkIE9uZUxp bmU0KHN0cnVjdCBpY29fcHJvZ3Jlc3NpdmVfc3RhdGUgKmNvbnRleHQpCisgCWdpbnQgWDsKKyAJ Z3VjaGFyICpQaXhlbHM7CisgCWdzaXplIHJvd3N0cmlkZSA9IGdka19waXhidWZfZ2V0X3Jvd3N0 cmlkZSAoY29udGV4dC0+cGl4YnVmKTsKKysJZ2ludCBwYWxldHRlX3NpemUgPSAoY29udGV4dC0+ SGVhZGVyU2l6ZSAtIElORk9IRUFERVJfU0laRSAtIGNvbnRleHQtPkRJQm9mZnNldCkgLyA0Owor IAorIAlYID0gMDsKKyAJaWYgKGNvbnRleHQtPkhlYWRlci5OZWdhdGl2ZSA9PSAwKQorQEAgLTc2 MSwyNSArNzY3LDMyIEBAIHN0YXRpYyB2b2lkIE9uZUxpbmU0KHN0cnVjdCBpY29fcHJvZ3Jlc3Np dmVfc3RhdGUgKmNvbnRleHQpCisgCQorIAl3aGlsZSAoWCA8IGNvbnRleHQtPkhlYWRlci53aWR0 aCkgeworIAkJZ3VjaGFyIFBpeDsKKysJCWd1aW50OCBpZHg7CisgCQkKKyAJCVBpeCA9IGNvbnRl eHQtPkxpbmVCdWZbWC8yXTsKKysJCWlkeCA9IFBpeCA+PiA0OworKwkJaWYgKGlkeCA+PSBwYWxl dHRlX3NpemUpCisrCQkJaWR4ID0gMDsKKyAKKyAJCVBpeGVsc1tYICogNCArIDBdID0KKy0JCSAg ICBjb250ZXh0LT5IZWFkZXJCdWZbNCAqIChQaXg+PjQpICsgSU5GT0hFQURFUl9TSVpFICsgMiAr IGNvbnRleHQtPkRJQm9mZnNldF07CisrCQkgICAgY29udGV4dC0+SGVhZGVyQnVmWzQgKiBpZHgg KyBJTkZPSEVBREVSX1NJWkUgKyAyICsgY29udGV4dC0+RElCb2Zmc2V0XTsKKyAJCVBpeGVsc1tY ICogNCArIDFdID0KKy0JCSAgICBjb250ZXh0LT5IZWFkZXJCdWZbNCAqIChQaXg+PjQpICsgSU5G T0hFQURFUl9TSVpFICsgMSArY29udGV4dC0+RElCb2Zmc2V0XTsKKysJCSAgICBjb250ZXh0LT5I ZWFkZXJCdWZbNCAqIGlkeCArIElORk9IRUFERVJfU0laRSArIDEgK2NvbnRleHQtPkRJQm9mZnNl dF07CisgCQlQaXhlbHNbWCAqIDQgKyAyXSA9CistCQkgICAgY29udGV4dC0+SGVhZGVyQnVmWzQg KiAoUGl4Pj40KSArIElORk9IRUFERVJfU0laRSArIGNvbnRleHQtPkRJQm9mZnNldF07CisrCQkg ICAgY29udGV4dC0+SGVhZGVyQnVmWzQgKiBpZHggKyBJTkZPSEVBREVSX1NJWkUgKyBjb250ZXh0 LT5ESUJvZmZzZXRdOworIAkJUGl4ZWxzW1ggKiA0ICsgM10gPSAweGZmOworIAkJWCsrOworLQkJ aWYgKFg8Y29udGV4dC0+SGVhZGVyLndpZHRoKSB7IAorKwkJaWYgKFg8Y29udGV4dC0+SGVhZGVy LndpZHRoKSB7CisgCQkJLyogSGFuZGxlIHRoZSBvdGhlciA0IGJpdCBwaXhlbCBvbmx5IHdoZW4g dGhlcmUgaXMgb25lICovCisrCQkJaWR4ID0gUGl4ICYgMTU7CisrCQkJaWYgKGlkeCA+PSBwYWxl dHRlX3NpemUpCisrCQkJCWlkeCA9IDA7CisgCQkJUGl4ZWxzW1ggKiA0ICsgMF0gPQorLQkJCSAg ICBjb250ZXh0LT5IZWFkZXJCdWZbNCAqIChQaXgmMTUpICsgSU5GT0hFQURFUl9TSVpFICsgMiAr IGNvbnRleHQtPkRJQm9mZnNldF07CisrCQkJICAgIGNvbnRleHQtPkhlYWRlckJ1Zls0ICogaWR4 ICsgSU5GT0hFQURFUl9TSVpFICsgMiArIGNvbnRleHQtPkRJQm9mZnNldF07CisgCQkJUGl4ZWxz W1ggKiA0ICsgMV0gPQorLQkJCSAgICBjb250ZXh0LT5IZWFkZXJCdWZbNCAqIChQaXgmMTUpICsg SU5GT0hFQURFUl9TSVpFICsgMSArIGNvbnRleHQtPkRJQm9mZnNldF07CisrCQkJICAgIGNvbnRl eHQtPkhlYWRlckJ1Zls0ICogaWR4ICsgSU5GT0hFQURFUl9TSVpFICsgMSArIGNvbnRleHQtPkRJ Qm9mZnNldF07CisgCQkJUGl4ZWxzW1ggKiA0ICsgMl0gPQorLQkJCSAgICBjb250ZXh0LT5IZWFk ZXJCdWZbNCAqIChQaXgmMTUpICsgSU5GT0hFQURFUl9TSVpFICsgY29udGV4dC0+RElCb2Zmc2V0 XTsKKysJCQkgICAgY29udGV4dC0+SGVhZGVyQnVmWzQgKiBpZHggKyBJTkZPSEVBREVSX1NJWkUg KyBjb250ZXh0LT5ESUJvZmZzZXRdOworIAkJCVBpeGVsc1tYICogNCArIDNdID0gMHhmZjsKKyAJ CQlYKys7CisgCQl9CistLSAKK0dpdExhYgorCgpkaWZmIC0tZ2l0IGEvZ2RrLXBpeGJ1ZjIuc3Bl YyBiL2dkay1waXhidWYyLnNwZWMKaW5kZXggMWYxMWZkMS4uMjI4N2Q1YiAxMDA2NDQKLS0tIGEv Z2RrLXBpeGJ1ZjIuc3BlYworKysgYi9nZGstcGl4YnVmMi5zcGVjCkBAIC0yNCw2ICsyNCw4IEBA IExpY2Vuc2U6ICAgICAgICBMR1BMLTIuMS1vci1sYXRlcgogVVJMOiAgICAgICAgICAgIGh0dHBz Oi8vZ2l0bGFiLmdub21lLm9yZy9HTk9NRS9nZGstcGl4YnVmCiBTb3VyY2UwOiAgICAgICAgaHR0 cHM6Ly9kb3dubG9hZC5nbm9tZS5vcmcvc291cmNlcy9nZGstcGl4YnVmLzIuNDQvZ2RrLXBpeGJ1 Zi0le3JlYWxfdmVyc2lvbn0udGFyLnh6CiAKK1BhdGNoMDogICAgICAgICBDVkUtMjAyNi0xNjc2 OC5wYXRjaAorCiBCdWlsZFJlcXVpcmVzOiAgZG9jYm9vay1zdHlsZS14c2wKIEJ1aWxkUmVxdWly ZXM6ICBnZXR0ZXh0CiBCdWlsZFJlcXVpcmVzOiAgZ2ktZG9jZ2VuCg==