From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Jan Friesse To: git-commits@fedoraproject.org Subject: [rpms/corosync] f44: Fix CVE-2026-81666 and CVE-2026-81665 Date: Fri, 04 Sep 2026 09:39:51 GMT Message-ID: <178851479125.1.2684109086214684140.rpms-corosync-d4e5c1f7dcca@fedoraproject.org> List-ID: X-Git-Repo: rpms/corosync X-Git-Branch: f44 X-Git-Rev: d4e5c1f7dccac682314d0eb8a213ef19381f4643 ICAgICAgICAgICAgQSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KCiAgICAgICAgICAgIFJl cG8gICA6IHJwbXMvY29yb3N5bmMKICAgICAgICAgICAgQnJhbmNoIDogZjQ0CiAgICAgICAgICAg IENvbW1pdCA6IGQ0ZTVjMWY3ZGNjYWM2ODIzMTRkMGViOGEyMTNlZjE5MzgxZjQ2NDMKICAgICAg ICAgICAgQXV0aG9yIDogSmFuIEZyaWVzc2UgPGpmcmllc3NlQHJlZGhhdC5jb20+CiAgICAgICAg ICAgIERhdGUgICA6IDIwMjYtMDktMDRUMTE6Mzc6NTArMDI6MDAKICAgICAgICAgICAgU3RhdHMg IDogKzEwNS8tMSBpbiAzIGZpbGUocykKICAgICAgICAgICAgVVJMICAgIDogaHR0cHM6Ly9zcmMu ZmVkb3JhcHJvamVjdC5vcmcvcnBtcy9jb3Jvc3luYy9jL2Q0ZTVjMWY3ZGNjYWM2ODIzMTRkMGVi OGEyMTNlZjE5MzgxZjQ2NDM/YnJhbmNoPWY0NAoKICAgICAgICAgICAgTG9nOgogICAgICAgICAg ICBGaXggQ1ZFLTIwMjYtODE2NjYgYW5kIENWRS0yMDI2LTgxNjY1CgotIHRvdGVtc3JwOiBGaXgg aW50IG92ZXJmbG93IGluIGNvbW1pdF90b2tlbl9zYW5pdHkKICAoZml4ZXMgQ1ZFLTIwMjYtODE2 NjYpCi0gdG90ZW1wZzogUmVwbGFjZSBhc3NlcnQgd2l0aCBjaGVjayBpbiBkZWxpdmVyX2ZuCiAg KGZpeGVzIENWRS0yMDI2LTgxNjY1KQoKLSBSZXNvbHZlczogcmhieiMyNTI4NDM3CgpTaWduZWQt b2ZmLWJ5OiBKYW4gRnJpZXNzZSA8amZyaWVzc2VAcmVkaGF0LmNvbQoKLS0tCmRpZmYgLS1naXQg YS8wMDAxLXRvdGVtc3JwLUZpeC1pbnQtb3ZlcmZsb3ctaW4tY29tbWl0X3Rva2VuX3Nhbml0eS5w YXRjaCBiLzAwMDEtdG90ZW1zcnAtRml4LWludC1vdmVyZmxvdy1pbi1jb21taXRfdG9rZW5fc2Fu aXR5LnBhdGNoCm5ldyBmaWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAwMDAwMDAuLjQ1NzcxNmMKLS0t IC9kZXYvbnVsbAorKysgYi8wMDAxLXRvdGVtc3JwLUZpeC1pbnQtb3ZlcmZsb3ctaW4tY29tbWl0 X3Rva2VuX3Nhbml0eS5wYXRjaApAQCAtMCwwICsxLDUwIEBACitGcm9tIDgzOTIwZjJlMzZiNWYx YWNkN2RjZjAzM2MwODIwMDQzY2MyOWY4MmEgTW9uIFNlcCAxNyAwMDowMDowMCAyMDAxCitGcm9t OiBKYW4gRnJpZXNzZSA8amZyaWVzc2VAcmVkaGF0LmNvbT4KK0RhdGU6IFdlZCwgMiBTZXAgMjAy NiAxNTowODozMSArMDIwMAorU3ViamVjdDogW1BBVENIIDEvMl0gdG90ZW1zcnA6IEZpeCBpbnQg b3ZlcmZsb3cgaW4gY29tbWl0X3Rva2VuX3Nhbml0eQorCitUaGlzIGNvbW1pdCBhZGRyZXNzZXMg YW4gaW50ZWdlciBvdmVyZmxvdyAod3JhcGFyb3VuZCkgdnVsbmVyYWJpbGl0eQoraW4gdGhlIGNo ZWNrX21lbWJfY29tbWl0X3Rva2VuX3Nhbml0eSBmdW5jdGlvbi4KKworUHJldmlvdXNseSwgb24g MzItYml0IHN5c3RlbXMsIGEgbGFyZ2UgdW5zaWduZWQgbmV0d29yayB2YWx1ZSBmb3IKK2FkZHJf ZW50cmllcyAoPj0gMTUzMzkxNjkwKSBjb3VsZCBjYXVzZSBhbiBpbnRlZ2VyIG92ZXJmbG93IHdo ZW4KK211bHRpcGxpZWQgYnkgdGhlIHNpemVzIG9mIHRoZSBzcnBfYWRkciBhbmQgbWVtYl9jb21t aXRfdG9rZW5fbWVtYl9lbnRyeQorc3RydWN0dXJlcy4gVGhpcyB3cmFwYXJvdW5kIHJlc3VsdGVk IGluIGEgcmVxdWlyZWRfbGVuIHRoYXQgd2FzIHNtYWxsZXIKK3RoYW4gdGhlIGFjdHVhbCByZXF1 aXJlZCBtZW1vcnkgc2l6ZSwgcG90ZW50aWFsbHkgYnlwYXNzaW5nIHRoZQorc3Vic2VxdWVudCBt ZXNzYWdlIGxlbmd0aCBib3VuZHMgY2hlY2suCisKK1RvIGZpeCB0aGlzLCB3ZSBub3cgcmVqZWN0 IHRoZSBtZXNzYWdlIGlmIGFkZHJfZW50cmllcyBleGNlZWRzCitQUk9DRVNTT1JfQ09VTlRfTUFY IGJlZm9yZSBhbnkgbXVsdGlwbGljYXRpb24gb3IgYWRkaXRpb24gb2NjdXJzLgorCitGaXhlczog Q1ZFLTIwMjYtODE2NjYKKworUmVwb3J0ZWQtYnk6IFRyaXN0YW4gTWFkYW5pIDx0cmlzdGFuQHRh bGVuY2VzZWN1cml0eS5jb20+CitTaWduZWQtb2ZmLWJ5OiBKYW4gRnJpZXNzZSA8amZyaWVzc2VA cmVkaGF0LmNvbT4KK1Jldmlld2VkLWJ5OiBUcmlzdGFuIE1hZGFuaSA8dHJpc3RhbkB0YWxlbmNl c2VjdXJpdHkuY29tPgorUmV2aWV3ZWQtYnk6IEZhYmlvIE0uIERpIE5pdHRvIDxmZGluaXR0b0By ZWRoYXQuY29tPgorLS0tCisgZXhlYy90b3RlbXNycC5jIHwgOCArKysrKysrKworIDEgZmlsZSBj aGFuZ2VkLCA4IGluc2VydGlvbnMoKykKKworZGlmZiAtLWdpdCBhL2V4ZWMvdG90ZW1zcnAuYyBi L2V4ZWMvdG90ZW1zcnAuYworaW5kZXggNjc1OTY5MTEuLjE4MDJiYjM0IDEwMDY0NAorLS0tIGEv ZXhlYy90b3RlbXNycC5jCisrKysgYi9leGVjL3RvdGVtc3JwLmMKK0BAIC0zODI5LDYgKzM4Mjks MTQgQEAgc3RhdGljIGludCBjaGVja19tZW1iX2NvbW1pdF90b2tlbl9zYW5pdHkoCisgCQlhZGRy X2VudHJpZXMgPSBzd2FiMzIoYWRkcl9lbnRyaWVzKTsKKyAJfQorIAorKwlpZiAoYWRkcl9lbnRy aWVzID4gUFJPQ0VTU09SX0NPVU5UX01BWCkgeworKwkJbG9nX3ByaW50ZiAoaW5zdGFuY2UtPnRv dGVtc3JwX2xvZ19sZXZlbF9zZWN1cml0eSwKKysJCSAgICAiUmVjZWl2ZWQgY29tbWl0X3Rva2Vu IG1lc3NhZ2UgYWRkcl9lbnRyaWVzIGV4Y2VlZHMgdGhlIG1heGltdW0gIgorKwkJICAgICJhbGxv d2VkIHZhbHVlLi4uICBpZ25vcmluZy4iKTsKKysKKysJCXJldHVybiAoLTEpOworKwl9CisrCisg CXJlcXVpcmVkX2xlbiA9IHNpemVvZihzdHJ1Y3QgbWVtYl9jb21taXRfdG9rZW4pICsKKyAJICAg IChhZGRyX2VudHJpZXMgKiAoc2l6ZW9mKHN0cnVjdCBzcnBfYWRkcikgKyBzaXplb2Yoc3RydWN0 IG1lbWJfY29tbWl0X3Rva2VuX21lbWJfZW50cnkpKSk7CisgCWlmIChtc2dfbGVuIDwgcmVxdWly ZWRfbGVuKSB7CistLSAKKzIuNTEuMQorCgpkaWZmIC0tZ2l0IGEvMDAwMi10b3RlbXBnLVJlcGxh Y2UtYXNzZXJ0LXdpdGgtY2hlY2staW4tZGVsaXZlcl9mbi5wYXRjaCBiLzAwMDItdG90ZW1wZy1S ZXBsYWNlLWFzc2VydC13aXRoLWNoZWNrLWluLWRlbGl2ZXJfZm4ucGF0Y2gKbmV3IGZpbGUgbW9k ZSAxMDA2NDQKaW5kZXggMDAwMDAwMC4uN2Y1ZTc0NgotLS0gL2Rldi9udWxsCisrKyBiLzAwMDIt dG90ZW1wZy1SZXBsYWNlLWFzc2VydC13aXRoLWNoZWNrLWluLWRlbGl2ZXJfZm4ucGF0Y2gKQEAg LTAsMCArMSw0NiBAQAorRnJvbSA1MTQ4YmYwN2RmZmE2MWJjZmE5MmNhMmMwNThlN2QwZjBhOTgx Y2YzIE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQorRnJvbTogSmFuIEZyaWVzc2UgPGpmcmllc3Nl QHJlZGhhdC5jb20+CitEYXRlOiBXZWQsIDIgU2VwIDIwMjYgMTU6NTM6MzMgKzAyMDAKK1N1Ympl Y3Q6IFtQQVRDSCAyLzJdIHRvdGVtcGc6IFJlcGxhY2UgYXNzZXJ0IHdpdGggY2hlY2sgaW4gZGVs aXZlcl9mbgorCitJZiBhc3NlcnQoKSBpcyBjb21waWxlZCBvdXQgaW4gcmVsZWFzZSBidWlsZHMs IGEKK25ldyBtZXNzYWdlIGNvdWxkIGJlIGFwcGVuZGVkIHBhc3QgdGhlIGVuZCBvZiB0aGUgYXNz ZW1ibHkgYnVmZmVyLAorcmVzdWx0aW5nIGluIGEgYnVmZmVyIG92ZXJmbG93LgorCitUbyBwcmV2 ZW50IHRoaXMsIHJlcGxhY2UgdGhlIGFzc2VydGlvbiB3aXRoIGEgc3RhbmRhcmQgcnVudGltZSBi b3VuZHMKK2NoZWNrLiBJZiB0aGUgaW5jb21pbmcgbWVzc2FnZSBleGNlZWRzIHRoZSBtYXhpbXVt IGJ1ZmZlciBzaXplLCBpdCBpcworbm93IHNhZmVseSBsb2dnZWQgYW5kIGlnbm9yZWQuCisKK0Zp eGVzOiBDVkUtMjAyNi04MTY2NQorCitSZXBvcnRlZC1ieTogVHJpc3RhbiBNYWRhbmkgPHRyaXN0 YW5AdGFsZW5jZXNlY3VyaXR5LmNvbT4KK1NpZ25lZC1vZmYtYnk6IEphbiBGcmllc3NlIDxqZnJp ZXNzZUByZWRoYXQuY29tPgorUmV2aWV3ZWQtYnk6IFRyaXN0YW4gTWFkYW5pIDx0cmlzdGFuQHRh bGVuY2VzZWN1cml0eS5jb20+CitSZXZpZXdlZC1ieTogRmFiaW8gTS4gRGkgTml0dG8gPGZkaW5p dHRvQHJlZGhhdC5jb20+CistLS0KKyBleGVjL3RvdGVtcGcuYyB8IDkgKysrKysrKystCisgMSBm aWxlIGNoYW5nZWQsIDggaW5zZXJ0aW9ucygrKSwgMSBkZWxldGlvbigtKQorCitkaWZmIC0tZ2l0 IGEvZXhlYy90b3RlbXBnLmMgYi9leGVjL3RvdGVtcGcuYworaW5kZXggZDliZWI4OTkuLmIwODZi YWQ5IDEwMDY0NAorLS0tIGEvZXhlYy90b3RlbXBnLmMKKysrKyBiL2V4ZWMvdG90ZW1wZy5jCitA QCAtNjU5LDcgKzY1OSwxNCBAQCBzdGF0aWMgdm9pZCB0b3RlbXBnX2RlbGl2ZXJfZm4gKAorIAkJ cmV0dXJuIDsKKyAJfQorIAorLQlhc3NlcnQoKGFzc2VtYmx5LT5pbmRleCttc2dfbGVuKSA8IHNp emVvZihhc3NlbWJseS0+ZGF0YSkpOworKwlpZiAoYXNzZW1ibHktPmluZGV4ICsgbXNnX2xlbiA+ PSBzaXplb2YoYXNzZW1ibHktPmRhdGEpKSB7CisrCQlsb2dfcHJpbnRmKExPR19XQVJOSU5HLAor KwkJICAgICJNZXNzYWdlICh0b3RlbXBnX21jYXN0KSByZWNlaXZlZCBmcm9tIG5vZGUgIiBDU19Q UklfTk9ERV9JRAorKwkJICAgICIgd291bGQgY3JlYXRlIHRvbyBsb25nIG1lc3NhZ2Ugb2YgJXUg Ynl0ZXMuLi4gIElnbm9yaW5nLiIsCisrCQkgICAgbm9kZWlkLCBhc3NlbWJseS0+aW5kZXggKyBt c2dfbGVuKTsKKysKKysJCXJldHVybiA7CisrCX0KKyAJbWVtY3B5ICgmYXNzZW1ibHktPmRhdGFb YXNzZW1ibHktPmluZGV4XSwgJmRhdGFbZGF0YXNpemVdLAorIAkJbXNnX2xlbiAtIGRhdGFzaXpl KTsKKyAKKy0tIAorMi41MS4xCisKCmRpZmYgLS1naXQgYS9jb3Jvc3luYy5zcGVjIGIvY29yb3N5 bmMuc3BlYwppbmRleCAzMjVhZTlhLi5kZTM0NjE4IDEwMDY0NAotLS0gYS9jb3Jvc3luYy5zcGVj CisrKyBiL2Nvcm9zeW5jLnNwZWMKQEAgLTE1LDEzICsxNSwxNSBAQAogTmFtZTogY29yb3N5bmMK IFN1bW1hcnk6IFRoZSBDb3Jvc3luYyBDbHVzdGVyIEVuZ2luZSBhbmQgQXBwbGljYXRpb24gUHJv Z3JhbW1pbmcgSW50ZXJmYWNlcwogVmVyc2lvbjogMy4xLjEwCi1SZWxlYXNlOiA1JXs/ZGlzdH0K K1JlbGVhc2U6IDYlez9kaXN0fQogTGljZW5zZTogQlNELTMtQ2xhdXNlCiBVUkw6IGh0dHA6Ly9j b3Jvc3luYy5naXRodWIuaW8vY29yb3N5bmMvCiBTb3VyY2UwOiBodHRwczovL2dpdGh1Yi5jb20v JXtuYW1lfS8le25hbWV9L3JlbGVhc2VzL2Rvd25sb2FkL3Yle3ZlcnNpb259LyV7bmFtZX0tJXt2 ZXJzaW9ufS50YXIuZ3oKIAogUGF0Y2gwOiAwMDAxLXRvdGVtc3JwLVJldHVybi1lcnJvci1pZi1z YW5pdHktY2hlY2stZmFpbHMucGF0Y2gKIFBhdGNoMTogMDAwMi10b3RlbXNycC1GaXgtaW50ZWdl ci1vdmVyZmxvdy1pbi1tZW1iX2pvaW5fc2FuaXR5LnBhdGNoCitQYXRjaDI6IDAwMDEtdG90ZW1z cnAtRml4LWludC1vdmVyZmxvdy1pbi1jb21taXRfdG9rZW5fc2FuaXR5LnBhdGNoCitQYXRjaDM6 IDAwMDItdG90ZW1wZy1SZXBsYWNlLWFzc2VydC13aXRoLWNoZWNrLWluLWRlbGl2ZXJfZm4ucGF0 Y2gKIAogIyBSdW50aW1lIGJpdHMKICMgVGhlIGF1dG9tYXRpYyBkZXBlbmRlbmN5IG92ZXJyaWRk ZW4gaW4gZmF2b3Igb2YgZXhwbGljaXQgdmVyc2lvbiBsb2NrCkBAIC0yOTIsNiArMjk0LDEyIEBA IG5ldHdvcmsgc3BsaXRzKQogJWVuZGlmCiAKICVjaGFuZ2Vsb2cKKyogRnJpIFNlcCAwNCAyMDI2 IEphbiBGcmllc3NlIDxqZnJpZXNzZUByZWRoYXQuY29tPiAtIDMuMS4xMC02CistIHRvdGVtc3Jw OiBGaXggaW50IG92ZXJmbG93IGluIGNvbW1pdF90b2tlbl9zYW5pdHkKKyAgKGZpeGVzIENWRS0y MDI2LTgxNjY2KQorLSB0b3RlbXBnOiBSZXBsYWNlIGFzc2VydCB3aXRoIGNoZWNrIGluIGRlbGl2 ZXJfZm4KKyAgKGZpeGVzIENWRS0yMDI2LTgxNjY1KQorCiAqIFRodSBBcHIgMDIgMjAyNiBKYW4g RnJpZXNzZSA8amZyaWVzc2VAcmVkaGF0LmNvbT4gLSAzLjEuMTAtNQogLSB0b3RlbXNycDogUmV0 dXJuIGVycm9yIGlmIHNhbml0eSBjaGVjayBmYWlscwogICAoZml4ZXMgQ1ZFLTIwMjYtMzUwOTEp Cg==