From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Jan Friesse To: git-commits@fedoraproject.org Subject: [rpms/corosync] rawhide: Fix CVE-2026-81666 and CVE-2026-81665 Date: Fri, 04 Sep 2026 09:32:37 GMT Message-ID: <178851435721.1.3145815864921257671.rpms-corosync-cf84dab38ec5@fedoraproject.org> List-ID: X-Git-Repo: rpms/corosync X-Git-Branch: rawhide X-Git-Rev: cf84dab38ec5b290528cef245e2bfd4c4d2ba148 ICAgICAgICAgICAgQSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KCiAgICAgICAgICAgIFJl cG8gICA6IHJwbXMvY29yb3N5bmMKICAgICAgICAgICAgQnJhbmNoIDogcmF3aGlkZQogICAgICAg ICAgICBDb21taXQgOiBjZjg0ZGFiMzhlYzViMjkwNTI4Y2VmMjQ1ZTJiZmQ0YzRkMmJhMTQ4CiAg ICAgICAgICAgIEF1dGhvciA6IEphbiBGcmllc3NlIDxqZnJpZXNzZUByZWRoYXQuY29tPgogICAg ICAgICAgICBEYXRlICAgOiAyMDI2LTA5LTA0VDExOjI0OjI3KzAyOjAwCiAgICAgICAgICAgIFN0 YXRzICA6ICsxMDUvLTEgaW4gMyBmaWxlKHMpCiAgICAgICAgICAgIFVSTCAgICA6IGh0dHBzOi8v c3JjLmZlZG9yYXByb2plY3Qub3JnL3JwbXMvY29yb3N5bmMvYy9jZjg0ZGFiMzhlYzViMjkwNTI4 Y2VmMjQ1ZTJiZmQ0YzRkMmJhMTQ4P2JyYW5jaD1yYXdoaWRlCgogICAgICAgICAgICBMb2c6CiAg ICAgICAgICAgIEZpeCBDVkUtMjAyNi04MTY2NiBhbmQgQ1ZFLTIwMjYtODE2NjUKCi0gdG90ZW1z cnA6IEZpeCBpbnQgb3ZlcmZsb3cgaW4gY29tbWl0X3Rva2VuX3Nhbml0eQogIChmaXhlcyBDVkUt MjAyNi04MTY2NikKLSB0b3RlbXBnOiBSZXBsYWNlIGFzc2VydCB3aXRoIGNoZWNrIGluIGRlbGl2 ZXJfZm4KICAoZml4ZXMgQ1ZFLTIwMjYtODE2NjUpCgotIFJlc29sdmVzOiByaGJ6IzI1Mjg0MzcK ClNpZ25lZC1vZmYtYnk6IEphbiBGcmllc3NlIDxqZnJpZXNzZUByZWRoYXQuY29tPgoKLS0tCmRp ZmYgLS1naXQgYS8wMDAxLXRvdGVtc3JwLUZpeC1pbnQtb3ZlcmZsb3ctaW4tY29tbWl0X3Rva2Vu X3Nhbml0eS5wYXRjaCBiLzAwMDEtdG90ZW1zcnAtRml4LWludC1vdmVyZmxvdy1pbi1jb21taXRf dG9rZW5fc2FuaXR5LnBhdGNoCm5ldyBmaWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAwMDAwMDAuLjQ1 NzcxNmMKLS0tIC9kZXYvbnVsbAorKysgYi8wMDAxLXRvdGVtc3JwLUZpeC1pbnQtb3ZlcmZsb3ct aW4tY29tbWl0X3Rva2VuX3Nhbml0eS5wYXRjaApAQCAtMCwwICsxLDUwIEBACitGcm9tIDgzOTIw ZjJlMzZiNWYxYWNkN2RjZjAzM2MwODIwMDQzY2MyOWY4MmEgTW9uIFNlcCAxNyAwMDowMDowMCAy MDAxCitGcm9tOiBKYW4gRnJpZXNzZSA8amZyaWVzc2VAcmVkaGF0LmNvbT4KK0RhdGU6IFdlZCwg MiBTZXAgMjAyNiAxNTowODozMSArMDIwMAorU3ViamVjdDogW1BBVENIIDEvMl0gdG90ZW1zcnA6 IEZpeCBpbnQgb3ZlcmZsb3cgaW4gY29tbWl0X3Rva2VuX3Nhbml0eQorCitUaGlzIGNvbW1pdCBh ZGRyZXNzZXMgYW4gaW50ZWdlciBvdmVyZmxvdyAod3JhcGFyb3VuZCkgdnVsbmVyYWJpbGl0eQor aW4gdGhlIGNoZWNrX21lbWJfY29tbWl0X3Rva2VuX3Nhbml0eSBmdW5jdGlvbi4KKworUHJldmlv dXNseSwgb24gMzItYml0IHN5c3RlbXMsIGEgbGFyZ2UgdW5zaWduZWQgbmV0d29yayB2YWx1ZSBm b3IKK2FkZHJfZW50cmllcyAoPj0gMTUzMzkxNjkwKSBjb3VsZCBjYXVzZSBhbiBpbnRlZ2VyIG92 ZXJmbG93IHdoZW4KK211bHRpcGxpZWQgYnkgdGhlIHNpemVzIG9mIHRoZSBzcnBfYWRkciBhbmQg bWVtYl9jb21taXRfdG9rZW5fbWVtYl9lbnRyeQorc3RydWN0dXJlcy4gVGhpcyB3cmFwYXJvdW5k IHJlc3VsdGVkIGluIGEgcmVxdWlyZWRfbGVuIHRoYXQgd2FzIHNtYWxsZXIKK3RoYW4gdGhlIGFj dHVhbCByZXF1aXJlZCBtZW1vcnkgc2l6ZSwgcG90ZW50aWFsbHkgYnlwYXNzaW5nIHRoZQorc3Vi c2VxdWVudCBtZXNzYWdlIGxlbmd0aCBib3VuZHMgY2hlY2suCisKK1RvIGZpeCB0aGlzLCB3ZSBu b3cgcmVqZWN0IHRoZSBtZXNzYWdlIGlmIGFkZHJfZW50cmllcyBleGNlZWRzCitQUk9DRVNTT1Jf Q09VTlRfTUFYIGJlZm9yZSBhbnkgbXVsdGlwbGljYXRpb24gb3IgYWRkaXRpb24gb2NjdXJzLgor CitGaXhlczogQ1ZFLTIwMjYtODE2NjYKKworUmVwb3J0ZWQtYnk6IFRyaXN0YW4gTWFkYW5pIDx0 cmlzdGFuQHRhbGVuY2VzZWN1cml0eS5jb20+CitTaWduZWQtb2ZmLWJ5OiBKYW4gRnJpZXNzZSA8 amZyaWVzc2VAcmVkaGF0LmNvbT4KK1Jldmlld2VkLWJ5OiBUcmlzdGFuIE1hZGFuaSA8dHJpc3Rh bkB0YWxlbmNlc2VjdXJpdHkuY29tPgorUmV2aWV3ZWQtYnk6IEZhYmlvIE0uIERpIE5pdHRvIDxm ZGluaXR0b0ByZWRoYXQuY29tPgorLS0tCisgZXhlYy90b3RlbXNycC5jIHwgOCArKysrKysrKwor IDEgZmlsZSBjaGFuZ2VkLCA4IGluc2VydGlvbnMoKykKKworZGlmZiAtLWdpdCBhL2V4ZWMvdG90 ZW1zcnAuYyBiL2V4ZWMvdG90ZW1zcnAuYworaW5kZXggNjc1OTY5MTEuLjE4MDJiYjM0IDEwMDY0 NAorLS0tIGEvZXhlYy90b3RlbXNycC5jCisrKysgYi9leGVjL3RvdGVtc3JwLmMKK0BAIC0zODI5 LDYgKzM4MjksMTQgQEAgc3RhdGljIGludCBjaGVja19tZW1iX2NvbW1pdF90b2tlbl9zYW5pdHko CisgCQlhZGRyX2VudHJpZXMgPSBzd2FiMzIoYWRkcl9lbnRyaWVzKTsKKyAJfQorIAorKwlpZiAo YWRkcl9lbnRyaWVzID4gUFJPQ0VTU09SX0NPVU5UX01BWCkgeworKwkJbG9nX3ByaW50ZiAoaW5z dGFuY2UtPnRvdGVtc3JwX2xvZ19sZXZlbF9zZWN1cml0eSwKKysJCSAgICAiUmVjZWl2ZWQgY29t bWl0X3Rva2VuIG1lc3NhZ2UgYWRkcl9lbnRyaWVzIGV4Y2VlZHMgdGhlIG1heGltdW0gIgorKwkJ ICAgICJhbGxvd2VkIHZhbHVlLi4uICBpZ25vcmluZy4iKTsKKysKKysJCXJldHVybiAoLTEpOwor Kwl9CisrCisgCXJlcXVpcmVkX2xlbiA9IHNpemVvZihzdHJ1Y3QgbWVtYl9jb21taXRfdG9rZW4p ICsKKyAJICAgIChhZGRyX2VudHJpZXMgKiAoc2l6ZW9mKHN0cnVjdCBzcnBfYWRkcikgKyBzaXpl b2Yoc3RydWN0IG1lbWJfY29tbWl0X3Rva2VuX21lbWJfZW50cnkpKSk7CisgCWlmIChtc2dfbGVu IDwgcmVxdWlyZWRfbGVuKSB7CistLSAKKzIuNTEuMQorCgpkaWZmIC0tZ2l0IGEvMDAwMi10b3Rl bXBnLVJlcGxhY2UtYXNzZXJ0LXdpdGgtY2hlY2staW4tZGVsaXZlcl9mbi5wYXRjaCBiLzAwMDIt dG90ZW1wZy1SZXBsYWNlLWFzc2VydC13aXRoLWNoZWNrLWluLWRlbGl2ZXJfZm4ucGF0Y2gKbmV3 IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXggMDAwMDAwMC4uN2Y1ZTc0NgotLS0gL2Rldi9udWxsCisr KyBiLzAwMDItdG90ZW1wZy1SZXBsYWNlLWFzc2VydC13aXRoLWNoZWNrLWluLWRlbGl2ZXJfZm4u cGF0Y2gKQEAgLTAsMCArMSw0NiBAQAorRnJvbSA1MTQ4YmYwN2RmZmE2MWJjZmE5MmNhMmMwNThl N2QwZjBhOTgxY2YzIE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQorRnJvbTogSmFuIEZyaWVzc2Ug PGpmcmllc3NlQHJlZGhhdC5jb20+CitEYXRlOiBXZWQsIDIgU2VwIDIwMjYgMTU6NTM6MzMgKzAy MDAKK1N1YmplY3Q6IFtQQVRDSCAyLzJdIHRvdGVtcGc6IFJlcGxhY2UgYXNzZXJ0IHdpdGggY2hl Y2sgaW4gZGVsaXZlcl9mbgorCitJZiBhc3NlcnQoKSBpcyBjb21waWxlZCBvdXQgaW4gcmVsZWFz ZSBidWlsZHMsIGEKK25ldyBtZXNzYWdlIGNvdWxkIGJlIGFwcGVuZGVkIHBhc3QgdGhlIGVuZCBv ZiB0aGUgYXNzZW1ibHkgYnVmZmVyLAorcmVzdWx0aW5nIGluIGEgYnVmZmVyIG92ZXJmbG93Lgor CitUbyBwcmV2ZW50IHRoaXMsIHJlcGxhY2UgdGhlIGFzc2VydGlvbiB3aXRoIGEgc3RhbmRhcmQg cnVudGltZSBib3VuZHMKK2NoZWNrLiBJZiB0aGUgaW5jb21pbmcgbWVzc2FnZSBleGNlZWRzIHRo ZSBtYXhpbXVtIGJ1ZmZlciBzaXplLCBpdCBpcworbm93IHNhZmVseSBsb2dnZWQgYW5kIGlnbm9y ZWQuCisKK0ZpeGVzOiBDVkUtMjAyNi04MTY2NQorCitSZXBvcnRlZC1ieTogVHJpc3RhbiBNYWRh bmkgPHRyaXN0YW5AdGFsZW5jZXNlY3VyaXR5LmNvbT4KK1NpZ25lZC1vZmYtYnk6IEphbiBGcmll c3NlIDxqZnJpZXNzZUByZWRoYXQuY29tPgorUmV2aWV3ZWQtYnk6IFRyaXN0YW4gTWFkYW5pIDx0 cmlzdGFuQHRhbGVuY2VzZWN1cml0eS5jb20+CitSZXZpZXdlZC1ieTogRmFiaW8gTS4gRGkgTml0 dG8gPGZkaW5pdHRvQHJlZGhhdC5jb20+CistLS0KKyBleGVjL3RvdGVtcGcuYyB8IDkgKysrKysr KystCisgMSBmaWxlIGNoYW5nZWQsIDggaW5zZXJ0aW9ucygrKSwgMSBkZWxldGlvbigtKQorCitk aWZmIC0tZ2l0IGEvZXhlYy90b3RlbXBnLmMgYi9leGVjL3RvdGVtcGcuYworaW5kZXggZDliZWI4 OTkuLmIwODZiYWQ5IDEwMDY0NAorLS0tIGEvZXhlYy90b3RlbXBnLmMKKysrKyBiL2V4ZWMvdG90 ZW1wZy5jCitAQCAtNjU5LDcgKzY1OSwxNCBAQCBzdGF0aWMgdm9pZCB0b3RlbXBnX2RlbGl2ZXJf Zm4gKAorIAkJcmV0dXJuIDsKKyAJfQorIAorLQlhc3NlcnQoKGFzc2VtYmx5LT5pbmRleCttc2df bGVuKSA8IHNpemVvZihhc3NlbWJseS0+ZGF0YSkpOworKwlpZiAoYXNzZW1ibHktPmluZGV4ICsg bXNnX2xlbiA+PSBzaXplb2YoYXNzZW1ibHktPmRhdGEpKSB7CisrCQlsb2dfcHJpbnRmKExPR19X QVJOSU5HLAorKwkJICAgICJNZXNzYWdlICh0b3RlbXBnX21jYXN0KSByZWNlaXZlZCBmcm9tIG5v ZGUgIiBDU19QUklfTk9ERV9JRAorKwkJICAgICIgd291bGQgY3JlYXRlIHRvbyBsb25nIG1lc3Nh Z2Ugb2YgJXUgYnl0ZXMuLi4gIElnbm9yaW5nLiIsCisrCQkgICAgbm9kZWlkLCBhc3NlbWJseS0+ aW5kZXggKyBtc2dfbGVuKTsKKysKKysJCXJldHVybiA7CisrCX0KKyAJbWVtY3B5ICgmYXNzZW1i bHktPmRhdGFbYXNzZW1ibHktPmluZGV4XSwgJmRhdGFbZGF0YXNpemVdLAorIAkJbXNnX2xlbiAt IGRhdGFzaXplKTsKKyAKKy0tIAorMi41MS4xCisKCmRpZmYgLS1naXQgYS9jb3Jvc3luYy5zcGVj IGIvY29yb3N5bmMuc3BlYwppbmRleCBhYzUxYzE1Li5iYzQ5OTg2IDEwMDY0NAotLS0gYS9jb3Jv c3luYy5zcGVjCisrKyBiL2Nvcm9zeW5jLnNwZWMKQEAgLTE3LDcgKzE3LDcgQEAKIE5hbWU6IGNv cm9zeW5jCiBTdW1tYXJ5OiBUaGUgQ29yb3N5bmMgQ2x1c3RlciBFbmdpbmUgYW5kIEFwcGxpY2F0 aW9uIFByb2dyYW1taW5nIEludGVyZmFjZXMKIFZlcnNpb246IDMuMS4xMAotUmVsZWFzZTogNyV7 P2Rpc3R9CitSZWxlYXNlOiA4JXs/ZGlzdH0KIExpY2Vuc2U6IEJTRC0zLUNsYXVzZQogVVJMOiBo dHRwOi8vY29yb3N5bmMuZ2l0aHViLmlvL2Nvcm9zeW5jLwogU291cmNlMDogaHR0cHM6Ly9naXRo dWIuY29tLyV7bmFtZX0vJXtuYW1lfS9yZWxlYXNlcy9kb3dubG9hZC92JXt2ZXJzaW9ufS8le25h bWV9LSV7dmVyc2lvbn0udGFyLmd6CkBAIC0yNSw2ICsyNSw4IEBAIFNvdXJjZTA6IGh0dHBzOi8v Z2l0aHViLmNvbS8le25hbWV9LyV7bmFtZX0vcmVsZWFzZXMvZG93bmxvYWQvdiV7dmVyc2lvbn0v JXtuYW1lCiBQYXRjaDA6IDAwMDEtdG90ZW1zcnAtUmV0dXJuLWVycm9yLWlmLXNhbml0eS1jaGVj ay1mYWlscy5wYXRjaAogUGF0Y2gxOiAwMDAyLXRvdGVtc3JwLUZpeC1pbnRlZ2VyLW92ZXJmbG93 LWluLW1lbWJfam9pbl9zYW5pdHkucGF0Y2gKIFBhdGNoMjogMDAwMS1FbmZvcmNlLWVuY3J5cHRp b24tYXQtY29tcGlsZS10aW1lLnBhdGNoCitQYXRjaDM6IDAwMDEtdG90ZW1zcnAtRml4LWludC1v dmVyZmxvdy1pbi1jb21taXRfdG9rZW5fc2FuaXR5LnBhdGNoCitQYXRjaDQ6IDAwMDItdG90ZW1w Zy1SZXBsYWNlLWFzc2VydC13aXRoLWNoZWNrLWluLWRlbGl2ZXJfZm4ucGF0Y2gKIAogIyBSdW50 aW1lIGJpdHMKICMgVGhlIGF1dG9tYXRpYyBkZXBlbmRlbmN5IG92ZXJyaWRkZW4gaW4gZmF2b3Ig b2YgZXhwbGljaXQgdmVyc2lvbiBsb2NrCkBAIC0zMDEsNiArMzAzLDEyIEBAIG5ldHdvcmsgc3Bs aXRzKQogJWVuZGlmCiAKICVjaGFuZ2Vsb2cKKyogRnJpIFNlcCAwNCAyMDI2IEphbiBGcmllc3Nl IDxqZnJpZXNzZUByZWRoYXQuY29tPiAtIDMuMS4xMC04CistIHRvdGVtc3JwOiBGaXggaW50IG92 ZXJmbG93IGluIGNvbW1pdF90b2tlbl9zYW5pdHkKKyAgKGZpeGVzIENWRS0yMDI2LTgxNjY2KQor LSB0b3RlbXBnOiBSZXBsYWNlIGFzc2VydCB3aXRoIGNoZWNrIGluIGRlbGl2ZXJfZm4KKyAgKGZp eGVzIENWRS0yMDI2LTgxNjY1KQorCiAqIFR1ZSBBdWcgMDQgMjAyNiBKYW4gRnJpZXNzZSA8amZy aWVzc2VAcmVkaGF0LmNvbT4gLSAzLjEuMTAtNwogLSBFbmZvcmNlIGVuY3J5cHRpb24gYXQgY29t cGlsZSB0aW1lCiAK