From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Jan Macku To: git-commits@fedoraproject.org Subject: [rpms/curl] f43: Resolves: CVE-2026-9080 - UAF after pause in socket callback Date: Thu, 27 Aug 2026 15:01:16 GMT Message-ID: <178784287667.1.7632687456072238850.rpms-curl-6586ffeb97dd@fedoraproject.org> List-ID: X-Git-Repo: rpms/curl X-Git-Branch: f43 X-Git-Rev: 6586ffeb97dd162987222ac103bb51136a38aa2e QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvY3VybApCcmFuY2gg OiBmNDMKQ29tbWl0IDogNjU4NmZmZWI5N2RkMTYyOTg3MjIyYWMxMDNiYjUxMTM2YTM4YWEyZQpB dXRob3IgOiBKYW4gTWFja3UgPGphbWFja3VAcmVkaGF0LmNvbT4KRGF0ZSAgIDogMjAyNi0wOC0y NlQyMTozMjo0NSswMjowMApTdGF0cyAgOiArOTcvLTAgaW4gMiBmaWxlKHMpClVSTCAgICA6IGh0 dHBzOi8vc3JjLmZlZG9yYXByb2plY3Qub3JnL3JwbXMvY3VybC9jLzY1ODZmZmViOTdkZDE2Mjk4 NzIyMmFjMTAzYmI1MTEzNmEzOGFhMmU/YnJhbmNoPWY0MwoKTG9nOgpSZXNvbHZlczogQ1ZFLTIw MjYtOTA4MCAtIFVBRiBhZnRlciBwYXVzZSBpbiBzb2NrZXQgY2FsbGJhY2sKCi0tLQpkaWZmIC0t Z2l0IGEvMDAxOC1jdXJsLTguMTUuMC1DVkUtMjAyNi05MDgwLnBhdGNoIGIvMDAxOC1jdXJsLTgu MTUuMC1DVkUtMjAyNi05MDgwLnBhdGNoCm5ldyBmaWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAwMDAw MDAuLmYxY2RkOTYKLS0tIC9kZXYvbnVsbAorKysgYi8wMDE4LWN1cmwtOC4xNS4wLUNWRS0yMDI2 LTkwODAucGF0Y2gKQEAgLTAsMCArMSw5MCBAQAorRnJvbSA3ODU1OWY1N2Y0NTkxZTQzZGFlZmJj ODk4Mjg2NjY5OTk4OGY5NTc1IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQorRnJvbTogRGFuaWVs IFN0ZW5iZXJnIDxkYW5pZWxAaGF4eC5zZT4KK0RhdGU6IFR1ZSwgMjYgTWF5IDIwMjYgMDk6NTI6 MTkgKzAyMDAKK1N1YmplY3Q6IFtQQVRDSF0gbXVsdGk6IGhhbmRsZSBwYXVzZSBpbiBtdWx0aSBz b2NrZXQgY2FsbGJhY2sKKworVGhlIG1ldl9zaF9lbnRyeSBvYmplY3QgbWlnaHQgYmUgcmVtb3Zl ZCBpZiBjdXJsX2Vhc3lfcGF1c2UoKSBpcyBjYWxsZWQKK2Zyb20gd2l0aGluIHRoZSBzb2NrZXQg Y2FsbGJhY2suCisKK0ludHJvZHVjZWQgYSAnbWFnaWMnIHN0cnVjdCBmaWVsZCB0byB0byAnbWV2 X3NoX2VudHJ5JyB0byBtYWtlIGl0IGVhc2llcgordG8gcHJvZ3JhbW1hdGljYWxseSBkZXRlY3Qv YXNzZXJ0IGlmIHRoZSBwb2ludGVyIGlzIGJhZCAtIGluIGRlYnVnCitidWlsZHMuCisKK1JlcG9y dGVkLWJ5OiBKb3NodWEgUm9nZXJzCitDbG9zZXMgIzIxNzQ4CisKKyhjaGVycnkgcGlja2VkIGZy b20gY29tbWl0IDVhYjM0Y2JhNDJlNGVlNDI4MmZlOGJhYjQzZjMxMWQ1MWI5YmY5YmQpCistLS0K KyBsaWIvbXVsdGlfZXYuYyB8IDIxICsrKysrKysrKysrKysrKysrKystLQorIDEgZmlsZSBjaGFu Z2VkLCAxOSBpbnNlcnRpb25zKCspLCAyIGRlbGV0aW9ucygtKQorCitkaWZmIC0tZ2l0IGEvbGli L211bHRpX2V2LmMgYi9saWIvbXVsdGlfZXYuYworaW5kZXggMGI0YzQ3Mjg0OS4uNmNkM2E0ZWU0 YSAxMDA2NDQKKy0tLSBhL2xpYi9tdWx0aV9ldi5jCisrKysgYi9saWIvbXVsdGlfZXYuYworQEAg LTUzLDYgKzUzLDggQEAgc3RhdGljIHZvaWQgbWV2X2luX2NhbGxiYWNrKHN0cnVjdCBDdXJsX211 bHRpICptdWx0aSwgYm9vbCB2YWx1ZSkKKyAKKyAjZGVmaW5lIENVUkxfTUVWX0NPTk5fSEFTSF9T SVpFIDMKKyAKKysjZGVmaW5lIFNIX0VOVFJZX01BR0lDIDB4NTcwMDkxZAorKworIC8qIEluZm9y bWF0aW9uIGFib3V0IGEgc29ja2V0IGZvciB3aGljaCB3ZSBpbmZvcm0gdGhlIGxpYmN1cmwgYXBw bGljYXRpb24KKyAgKiB3aGF0IHRvIHN1cGVydmlzZSAoQ1VSTF9QT0xMX0lOL0NVUkxfUE9MTF9P VVQvQ1VSTF9QT0xMX1JFTU9WRSkKKyAgKi8KK0BAIC02NCw2ICs2Niw5IEBAIHN0cnVjdCBtZXZf c2hfZW50cnkgeworICAgICAgICAgICAgICAgICAgICAgICAgICAqIGxpYmN1cmwgYXBwbGljYXRp b24gdG8gd2F0Y2ggb3V0IGZvciAqLworICAgdW5zaWduZWQgaW50IHJlYWRlcnM7IC8qIHRoaXMg bWFueSB0cmFuc2ZlcnMgd2FudCB0byByZWFkICovCisgICB1bnNpZ25lZCBpbnQgd3JpdGVyczsg LyogdGhpcyBtYW55IHRyYW5zZmVycyB3YW50IHRvIHdyaXRlICovCisrI2lmZGVmIERFQlVHQlVJ TEQKKysgIHVuc2lnbmVkIGludCBtYWdpYzsKKysjZW5kaWYKKyB9OworIAorIHN0YXRpYyBzaXpl X3QgbWV2X3NoX2VudHJ5X2hhc2godm9pZCAqa2V5LCBzaXplX3Qga2V5X2xlbmd0aCwgc2l6ZV90 IHNsb3RzX251bSkKK0BAIC04NSw2ICs5MCw5IEBAIHN0YXRpYyB2b2lkIG1ldl9zaF9lbnRyeV9k dG9yKHZvaWQgKmZyZWV0aGlzKQorIHsKKyAgIHN0cnVjdCBtZXZfc2hfZW50cnkgKmVudHJ5ID0g KHN0cnVjdCBtZXZfc2hfZW50cnkgKilmcmVldGhpczsKKyAgIEN1cmxfdWludF9zcGJzZXRfZGVz dHJveSgmZW50cnktPnhmZXJzKTsKKysjaWZkZWYgREVCVUdCVUlMRAorKyAgZW50cnktPm1hZ2lj ID0gMDsKKysjZW5kaWYKKyAgIGZyZWUoZW50cnkpOworIH0KKyAKK0BAIC0xMjMsNyArMTMxLDkg QEAgbWV2X3NoX2VudHJ5X2FkZChzdHJ1Y3QgQ3VybF9oYXNoICpzaCwgY3VybF9zb2NrZXRfdCBz KQorICAgICBtZXZfc2hfZW50cnlfZHRvcihjaGVjayk7CisgICAgIHJldHVybiBOVUxMOyAvKiBt YWpvciBmYWlsdXJlICovCisgICB9CistCisrI2lmZGVmIERFQlVHQlVJTEQKKysgIGNoZWNrLT5t YWdpYyA9IFNIX0VOVFJZX01BR0lDOworKyNlbmRpZgorICAgcmV0dXJuIGNoZWNrOyAvKiB0aGlu Z3MgYXJlIGdvb2QgaW4gc29ja2hhc2ggbGFuZCAqLworIH0KKyAKK0BAIC0yMzMsNiArMjQzLDcg QEAgc3RhdGljIENVUkxNY29kZSBtZXZfc2hfZW50cnlfdXBkYXRlKHN0cnVjdCBDdXJsX211bHRp ICptdWx0aSwKKyAKKyAgIC8qIHdlIHNob3VsZCBvbmx5IGJlIGNhbGxlZCB3aGVuIHRoZSBjYWxs YmFjayBleGlzdHMgKi8KKyAgIERFQlVHQVNTRVJUKG11bHRpLT5zb2NrZXRfY2IpOworKyAgREVC VUdBU1NFUlQoZW50cnktPm1hZ2ljID09IFNIX0VOVFJZX01BR0lDKTsKKyAgIGlmKCFtdWx0aS0+ c29ja2V0X2NiKQorICAgICByZXR1cm4gQ1VSTE1fT0s7CisgCitAQCAtMjg3LDcgKzI5OCwxMyBA QCBzdGF0aWMgQ1VSTE1jb2RlIG1ldl9zaF9lbnRyeV91cGRhdGUoc3RydWN0IEN1cmxfbXVsdGkg Km11bHRpLAorICAgICBtdWx0aS0+ZGVhZCA9IFRSVUU7CisgICAgIHJldHVybiBDVVJMTV9BQk9S VEVEX0JZX0NBTExCQUNLOworICAgfQorLSAgZW50cnktPmFjdGlvbiA9ICh1bnNpZ25lZCBpbnQp Y29tYm9hY3Rpb247CisrICAvKiBjdXJsX2Vhc3lfcGF1c2UoKSBpcyBkb2N1bWVudGVkIGFzIGNh bGxhYmxlIGZyb20gYW55IGNhbGxiYWNrOyBpdAorKyAgICogcmUtZW50ZXJzIG1ldl9hc3Nlc3Mo KSB3aGljaCBtYXkgZnJlZSB0aGlzICdlbnRyeScuIFJlLWZldGNoLiAqLworKyAgZW50cnkgPSBt ZXZfc2hfZW50cnlfZ2V0KCZtdWx0aS0+ZXYuc2hfZW50cmllcywgcyk7CisrICBpZihlbnRyeSkg eworKyAgICBERUJVR0FTU0VSVChlbnRyeS0+bWFnaWMgPT0gU0hfRU5UUllfTUFHSUMpOworKyAg ICBlbnRyeS0+YWN0aW9uID0gKHVuc2lnbmVkIGludCljb21ib2FjdGlvbjsKKysgIH0KKyAgIHJl dHVybiBDVVJMTV9PSzsKKyB9CisgCistLSAKKzIuNTUuMAorCgpkaWZmIC0tZ2l0IGEvY3VybC5z cGVjIGIvY3VybC5zcGVjCmluZGV4IGVlNmZkZDkuLjA0NDE5MDEgMTAwNjQ0Ci0tLSBhL2N1cmwu c3BlYworKysgYi9jdXJsLnNwZWMKQEAgLTY3LDYgKzY3LDkgQEAgUGF0Y2gwMTY6IDAwMTYtY3Vy bC04LjE1LjAtQ1ZFLTIwMjYtODkyNy5wYXRjaAogIyBmaXggZXhwb3NpbmcgSFRUUC8zIGVhcmx5 IGRhdGEgKENWRS0yMDI2LTk1NDUpCiBQYXRjaDAxNzogMDAxNy1jdXJsLTguMTUuMC1DVkUtMjAy Ni05NTQ1LnBhdGNoCiAKKyMgZml4IFVBRiBhZnRlciBwYXVzZSBpbiBzb2NrZXQgY2FsbGJhY2sg KENWRS0yMDI2LTkwODApCitQYXRjaDAxODogMDAxOC1jdXJsLTguMTUuMC1DVkUtMjAyNi05MDgw LnBhdGNoCisKICMgcGF0Y2ggbWFraW5nIGxpYmN1cmwgbXVsdGlsaWIgcmVhZHkKIFBhdGNoMTAx OiAwMTAxLWN1cmwtNy4zMi4wLW11bHRpbGliLnBhdGNoCiAKQEAgLTI3MSw2ICsyNzQsOSBAQCBi ZSBpbnN0YWxsZWQuCiAjIDxodHRwczovL2dpdGh1Yi5jb20vYmFnZGVyL2N1cmwvY29tbWl0LzIx ZTgyYmQ2I2NvbW1pdGNvbW1lbnQtMTIyMjY1ODI+CiBwcmludGYgIjE4MDFcbiIgPj50ZXN0cy9k YXRhL0RJU0FCTEVECiAKKyMgIyBkaXNhYmxlIHRlc3QgMTcwMSAtLSBuZ2h0dHB4IHJlamVjdHMg aDJjIHVwZ3JhZGUgd2l0aCA0MDAgQmFkIFJlcXVlc3QKK3ByaW50ZiAiMTcwMVxuIiA+PnRlc3Rz L2RhdGEvRElTQUJMRUQKKwogIyB0ZXN0MzAyNjogYXZvaWQgcHRocmVhZF9jcmVhdGUoKSBmYWls dXJlIGR1ZSB0byByZXNvdXJjZSBleGhhdXN0aW9uIG9uIGkzODYKICVpZmFyY2ggJXtpeDg2fQog c2VkIC1lICdzfE5VTV9USFJFQURTIDEwMDAkfE5VTV9USFJFQURTIDI1NnwnIFwKQEAgLTQ3Miw2 ICs0NzgsNyBAQCBybSAtZiAke1JQTV9CVUlMRF9ST09UfSV7X21hbmRpcn0vbWFuMS93Y3VybC4x KgogLSBmaXggU0FTTCBkb3VibGUtZnJlZSAoQ1ZFLTIwMjYtODkyNSkKIC0gZml4IGVudi1zZXQg Y3Jvc3MtcHJveHkgRGlnZXN0IGF1dGggc3RhdGUgbGVhayAoQ1ZFLTIwMjYtODkyNykKIC0gZml4 IGV4cG9zaW5nIEhUVFAvMyBlYXJseSBkYXRhIChDVkUtMjAyNi05NTQ1KQorLSBmaXggVUFGIGFm dGVyIHBhdXNlIGluIHNvY2tldCBjYWxsYmFjayAoQ1ZFLTIwMjYtOTA4MCkKIAogKiBNb24gQXVn IDAzIDIwMjYgSmFuIE1hY2t1IDxqYW1hY2t1QHJlZGhhdC5jb20+IC0gOC4xNS4wLTgKIC0gZml4 IGNyb3NzLXByb3h5IERpZ2VzdCBhdXRoIHN0YXRlIGxlYWsgKENWRS0yMDI2LTcxNjgpCg==