From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Jan Friesse To: git-commits@fedoraproject.org Subject: [rpms/corosync] f43: Fix CVE-2026-81666 and CVE-2026-81665 Date: Fri, 04 Sep 2026 09:42:23 GMT Message-ID: <178851494390.1.3353759284148621302.rpms-corosync-a8f2716667b6@fedoraproject.org> List-ID: X-Git-Repo: rpms/corosync X-Git-Branch: f43 X-Git-Rev: a8f2716667b61ad3714c31aec12bf9c7360b2ef9 ICAgICAgICAgICAgQSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KCiAgICAgICAgICAgIFJl cG8gICA6IHJwbXMvY29yb3N5bmMKICAgICAgICAgICAgQnJhbmNoIDogZjQzCiAgICAgICAgICAg IENvbW1pdCA6IGE4ZjI3MTY2NjdiNjFhZDM3MTRjMzFhZWMxMmJmOWM3MzYwYjJlZjkKICAgICAg ICAgICAgQXV0aG9yIDogSmFuIEZyaWVzc2UgPGpmcmllc3NlQHJlZGhhdC5jb20+CiAgICAgICAg ICAgIERhdGUgICA6IDIwMjYtMDktMDRUMTE6NDE6MjkrMDI6MDAKICAgICAgICAgICAgU3RhdHMg IDogKzEwNi8tMSBpbiAzIGZpbGUocykKICAgICAgICAgICAgVVJMICAgIDogaHR0cHM6Ly9zcmMu ZmVkb3JhcHJvamVjdC5vcmcvcnBtcy9jb3Jvc3luYy9jL2E4ZjI3MTY2NjdiNjFhZDM3MTRjMzFh ZWMxMmJmOWM3MzYwYjJlZjk/YnJhbmNoPWY0MwoKICAgICAgICAgICAgTG9nOgogICAgICAgICAg ICBGaXggQ1ZFLTIwMjYtODE2NjYgYW5kIENWRS0yMDI2LTgxNjY1CgotIHRvdGVtc3JwOiBGaXgg aW50IG92ZXJmbG93IGluIGNvbW1pdF90b2tlbl9zYW5pdHkKICAoZml4ZXMgQ1ZFLTIwMjYtODE2 NjYpCi0gdG90ZW1wZzogUmVwbGFjZSBhc3NlcnQgd2l0aCBjaGVjayBpbiBkZWxpdmVyX2ZuCiAg KGZpeGVzIENWRS0yMDI2LTgxNjY1KQoKLSBSZXNvbHZlczogcmhieiMyNTI4NDM3CgpTaWduZWQt b2ZmLWJ5OiBKYW4gRnJpZXNzZSA8amZyaWVzc2VAcmVkaGF0LmNvbT4KCi0tLQpkaWZmIC0tZ2l0 IGEvMDAwMS10b3RlbXNycC1GaXgtaW50LW92ZXJmbG93LWluLWNvbW1pdF90b2tlbl9zYW5pdHku cGF0Y2ggYi8wMDAxLXRvdGVtc3JwLUZpeC1pbnQtb3ZlcmZsb3ctaW4tY29tbWl0X3Rva2VuX3Nh bml0eS5wYXRjaApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwLi40NTc3MTZjCi0t LSAvZGV2L251bGwKKysrIGIvMDAwMS10b3RlbXNycC1GaXgtaW50LW92ZXJmbG93LWluLWNvbW1p dF90b2tlbl9zYW5pdHkucGF0Y2gKQEAgLTAsMCArMSw1MCBAQAorRnJvbSA4MzkyMGYyZTM2YjVm MWFjZDdkY2YwMzNjMDgyMDA0M2NjMjlmODJhIE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQorRnJv bTogSmFuIEZyaWVzc2UgPGpmcmllc3NlQHJlZGhhdC5jb20+CitEYXRlOiBXZWQsIDIgU2VwIDIw MjYgMTU6MDg6MzEgKzAyMDAKK1N1YmplY3Q6IFtQQVRDSCAxLzJdIHRvdGVtc3JwOiBGaXggaW50 IG92ZXJmbG93IGluIGNvbW1pdF90b2tlbl9zYW5pdHkKKworVGhpcyBjb21taXQgYWRkcmVzc2Vz IGFuIGludGVnZXIgb3ZlcmZsb3cgKHdyYXBhcm91bmQpIHZ1bG5lcmFiaWxpdHkKK2luIHRoZSBj aGVja19tZW1iX2NvbW1pdF90b2tlbl9zYW5pdHkgZnVuY3Rpb24uCisKK1ByZXZpb3VzbHksIG9u IDMyLWJpdCBzeXN0ZW1zLCBhIGxhcmdlIHVuc2lnbmVkIG5ldHdvcmsgdmFsdWUgZm9yCithZGRy X2VudHJpZXMgKD49IDE1MzM5MTY5MCkgY291bGQgY2F1c2UgYW4gaW50ZWdlciBvdmVyZmxvdyB3 aGVuCittdWx0aXBsaWVkIGJ5IHRoZSBzaXplcyBvZiB0aGUgc3JwX2FkZHIgYW5kIG1lbWJfY29t bWl0X3Rva2VuX21lbWJfZW50cnkKK3N0cnVjdHVyZXMuIFRoaXMgd3JhcGFyb3VuZCByZXN1bHRl ZCBpbiBhIHJlcXVpcmVkX2xlbiB0aGF0IHdhcyBzbWFsbGVyCit0aGFuIHRoZSBhY3R1YWwgcmVx dWlyZWQgbWVtb3J5IHNpemUsIHBvdGVudGlhbGx5IGJ5cGFzc2luZyB0aGUKK3N1YnNlcXVlbnQg bWVzc2FnZSBsZW5ndGggYm91bmRzIGNoZWNrLgorCitUbyBmaXggdGhpcywgd2Ugbm93IHJlamVj dCB0aGUgbWVzc2FnZSBpZiBhZGRyX2VudHJpZXMgZXhjZWVkcworUFJPQ0VTU09SX0NPVU5UX01B WCBiZWZvcmUgYW55IG11bHRpcGxpY2F0aW9uIG9yIGFkZGl0aW9uIG9jY3Vycy4KKworRml4ZXM6 IENWRS0yMDI2LTgxNjY2CisKK1JlcG9ydGVkLWJ5OiBUcmlzdGFuIE1hZGFuaSA8dHJpc3RhbkB0 YWxlbmNlc2VjdXJpdHkuY29tPgorU2lnbmVkLW9mZi1ieTogSmFuIEZyaWVzc2UgPGpmcmllc3Nl QHJlZGhhdC5jb20+CitSZXZpZXdlZC1ieTogVHJpc3RhbiBNYWRhbmkgPHRyaXN0YW5AdGFsZW5j ZXNlY3VyaXR5LmNvbT4KK1Jldmlld2VkLWJ5OiBGYWJpbyBNLiBEaSBOaXR0byA8ZmRpbml0dG9A cmVkaGF0LmNvbT4KKy0tLQorIGV4ZWMvdG90ZW1zcnAuYyB8IDggKysrKysrKysKKyAxIGZpbGUg Y2hhbmdlZCwgOCBpbnNlcnRpb25zKCspCisKK2RpZmYgLS1naXQgYS9leGVjL3RvdGVtc3JwLmMg Yi9leGVjL3RvdGVtc3JwLmMKK2luZGV4IDY3NTk2OTExLi4xODAyYmIzNCAxMDA2NDQKKy0tLSBh L2V4ZWMvdG90ZW1zcnAuYworKysrIGIvZXhlYy90b3RlbXNycC5jCitAQCAtMzgyOSw2ICszODI5 LDE0IEBAIHN0YXRpYyBpbnQgY2hlY2tfbWVtYl9jb21taXRfdG9rZW5fc2FuaXR5KAorIAkJYWRk cl9lbnRyaWVzID0gc3dhYjMyKGFkZHJfZW50cmllcyk7CisgCX0KKyAKKysJaWYgKGFkZHJfZW50 cmllcyA+IFBST0NFU1NPUl9DT1VOVF9NQVgpIHsKKysJCWxvZ19wcmludGYgKGluc3RhbmNlLT50 b3RlbXNycF9sb2dfbGV2ZWxfc2VjdXJpdHksCisrCQkgICAgIlJlY2VpdmVkIGNvbW1pdF90b2tl biBtZXNzYWdlIGFkZHJfZW50cmllcyBleGNlZWRzIHRoZSBtYXhpbXVtICIKKysJCSAgICAiYWxs b3dlZCB2YWx1ZS4uLiAgaWdub3JpbmcuIik7CisrCisrCQlyZXR1cm4gKC0xKTsKKysJfQorKwor IAlyZXF1aXJlZF9sZW4gPSBzaXplb2Yoc3RydWN0IG1lbWJfY29tbWl0X3Rva2VuKSArCisgCSAg ICAoYWRkcl9lbnRyaWVzICogKHNpemVvZihzdHJ1Y3Qgc3JwX2FkZHIpICsgc2l6ZW9mKHN0cnVj dCBtZW1iX2NvbW1pdF90b2tlbl9tZW1iX2VudHJ5KSkpOworIAlpZiAobXNnX2xlbiA8IHJlcXVp cmVkX2xlbikgeworLS0gCisyLjUxLjEKKwoKZGlmZiAtLWdpdCBhLzAwMDItdG90ZW1wZy1SZXBs YWNlLWFzc2VydC13aXRoLWNoZWNrLWluLWRlbGl2ZXJfZm4ucGF0Y2ggYi8wMDAyLXRvdGVtcGct UmVwbGFjZS1hc3NlcnQtd2l0aC1jaGVjay1pbi1kZWxpdmVyX2ZuLnBhdGNoCm5ldyBmaWxlIG1v ZGUgMTAwNjQ0CmluZGV4IDAwMDAwMDAuLjdmNWU3NDYKLS0tIC9kZXYvbnVsbAorKysgYi8wMDAy LXRvdGVtcGctUmVwbGFjZS1hc3NlcnQtd2l0aC1jaGVjay1pbi1kZWxpdmVyX2ZuLnBhdGNoCkBA IC0wLDAgKzEsNDYgQEAKK0Zyb20gNTE0OGJmMDdkZmZhNjFiY2ZhOTJjYTJjMDU4ZTdkMGYwYTk4 MWNmMyBNb24gU2VwIDE3IDAwOjAwOjAwIDIwMDEKK0Zyb206IEphbiBGcmllc3NlIDxqZnJpZXNz ZUByZWRoYXQuY29tPgorRGF0ZTogV2VkLCAyIFNlcCAyMDI2IDE1OjUzOjMzICswMjAwCitTdWJq ZWN0OiBbUEFUQ0ggMi8yXSB0b3RlbXBnOiBSZXBsYWNlIGFzc2VydCB3aXRoIGNoZWNrIGluIGRl bGl2ZXJfZm4KKworSWYgYXNzZXJ0KCkgaXMgY29tcGlsZWQgb3V0IGluIHJlbGVhc2UgYnVpbGRz LCBhCituZXcgbWVzc2FnZSBjb3VsZCBiZSBhcHBlbmRlZCBwYXN0IHRoZSBlbmQgb2YgdGhlIGFz c2VtYmx5IGJ1ZmZlciwKK3Jlc3VsdGluZyBpbiBhIGJ1ZmZlciBvdmVyZmxvdy4KKworVG8gcHJl dmVudCB0aGlzLCByZXBsYWNlIHRoZSBhc3NlcnRpb24gd2l0aCBhIHN0YW5kYXJkIHJ1bnRpbWUg Ym91bmRzCitjaGVjay4gSWYgdGhlIGluY29taW5nIG1lc3NhZ2UgZXhjZWVkcyB0aGUgbWF4aW11 bSBidWZmZXIgc2l6ZSwgaXQgaXMKK25vdyBzYWZlbHkgbG9nZ2VkIGFuZCBpZ25vcmVkLgorCitG aXhlczogQ1ZFLTIwMjYtODE2NjUKKworUmVwb3J0ZWQtYnk6IFRyaXN0YW4gTWFkYW5pIDx0cmlz dGFuQHRhbGVuY2VzZWN1cml0eS5jb20+CitTaWduZWQtb2ZmLWJ5OiBKYW4gRnJpZXNzZSA8amZy aWVzc2VAcmVkaGF0LmNvbT4KK1Jldmlld2VkLWJ5OiBUcmlzdGFuIE1hZGFuaSA8dHJpc3RhbkB0 YWxlbmNlc2VjdXJpdHkuY29tPgorUmV2aWV3ZWQtYnk6IEZhYmlvIE0uIERpIE5pdHRvIDxmZGlu aXR0b0ByZWRoYXQuY29tPgorLS0tCisgZXhlYy90b3RlbXBnLmMgfCA5ICsrKysrKysrLQorIDEg ZmlsZSBjaGFuZ2VkLCA4IGluc2VydGlvbnMoKyksIDEgZGVsZXRpb24oLSkKKworZGlmZiAtLWdp dCBhL2V4ZWMvdG90ZW1wZy5jIGIvZXhlYy90b3RlbXBnLmMKK2luZGV4IGQ5YmViODk5Li5iMDg2 YmFkOSAxMDA2NDQKKy0tLSBhL2V4ZWMvdG90ZW1wZy5jCisrKysgYi9leGVjL3RvdGVtcGcuYwor QEAgLTY1OSw3ICs2NTksMTQgQEAgc3RhdGljIHZvaWQgdG90ZW1wZ19kZWxpdmVyX2ZuICgKKyAJ CXJldHVybiA7CisgCX0KKyAKKy0JYXNzZXJ0KChhc3NlbWJseS0+aW5kZXgrbXNnX2xlbikgPCBz aXplb2YoYXNzZW1ibHktPmRhdGEpKTsKKysJaWYgKGFzc2VtYmx5LT5pbmRleCArIG1zZ19sZW4g Pj0gc2l6ZW9mKGFzc2VtYmx5LT5kYXRhKSkgeworKwkJbG9nX3ByaW50ZihMT0dfV0FSTklORywK KysJCSAgICAiTWVzc2FnZSAodG90ZW1wZ19tY2FzdCkgcmVjZWl2ZWQgZnJvbSBub2RlICIgQ1Nf UFJJX05PREVfSUQKKysJCSAgICAiIHdvdWxkIGNyZWF0ZSB0b28gbG9uZyBtZXNzYWdlIG9mICV1 IGJ5dGVzLi4uICBJZ25vcmluZy4iLAorKwkJICAgIG5vZGVpZCwgYXNzZW1ibHktPmluZGV4ICsg bXNnX2xlbik7CisrCisrCQlyZXR1cm4gOworKwl9CisgCW1lbWNweSAoJmFzc2VtYmx5LT5kYXRh W2Fzc2VtYmx5LT5pbmRleF0sICZkYXRhW2RhdGFzaXplXSwKKyAJCW1zZ19sZW4gLSBkYXRhc2l6 ZSk7CisgCistLSAKKzIuNTEuMQorCgpkaWZmIC0tZ2l0IGEvY29yb3N5bmMuc3BlYyBiL2Nvcm9z eW5jLnNwZWMKaW5kZXggM2RmMmQxNC4uZmNhOTYyYSAxMDA2NDQKLS0tIGEvY29yb3N5bmMuc3Bl YworKysgYi9jb3Jvc3luYy5zcGVjCkBAIC0xNSwxMyArMTUsMTUgQEAKIE5hbWU6IGNvcm9zeW5j CiBTdW1tYXJ5OiBUaGUgQ29yb3N5bmMgQ2x1c3RlciBFbmdpbmUgYW5kIEFwcGxpY2F0aW9uIFBy b2dyYW1taW5nIEludGVyZmFjZXMKIFZlcnNpb246IDMuMS4xMAotUmVsZWFzZTogMiV7P2Rpc3R9 CitSZWxlYXNlOiAzJXs/ZGlzdH0KIExpY2Vuc2U6IEJTRC0zLUNsYXVzZQogVVJMOiBodHRwOi8v Y29yb3N5bmMuZ2l0aHViLmlvL2Nvcm9zeW5jLwogU291cmNlMDogaHR0cHM6Ly9naXRodWIuY29t LyV7bmFtZX0vJXtuYW1lfS9yZWxlYXNlcy9kb3dubG9hZC92JXt2ZXJzaW9ufS8le25hbWV9LSV7 dmVyc2lvbn0lez9naXR0YXJ2ZXJ9LnRhci5negogCiBQYXRjaDA6IDAwMDEtdG90ZW1zcnAtUmV0 dXJuLWVycm9yLWlmLXNhbml0eS1jaGVjay1mYWlscy5wYXRjaAogUGF0Y2gxOiAwMDAyLXRvdGVt c3JwLUZpeC1pbnRlZ2VyLW92ZXJmbG93LWluLW1lbWJfam9pbl9zYW5pdHkucGF0Y2gKK1BhdGNo MjogMDAwMS10b3RlbXNycC1GaXgtaW50LW92ZXJmbG93LWluLWNvbW1pdF90b2tlbl9zYW5pdHku cGF0Y2gKK1BhdGNoMzogMDAwMi10b3RlbXBnLVJlcGxhY2UtYXNzZXJ0LXdpdGgtY2hlY2staW4t ZGVsaXZlcl9mbi5wYXRjaAogCiAjIFJ1bnRpbWUgYml0cwogIyBUaGUgYXV0b21hdGljIGRlcGVu ZGVuY3kgb3ZlcnJpZGRlbiBpbiBmYXZvciBvZiBleHBsaWNpdCB2ZXJzaW9uIGxvY2sKQEAgLTI5 Miw2ICsyOTQsMTMgQEAgbmV0d29yayBzcGxpdHMpCiAlZW5kaWYKIAogJWNoYW5nZWxvZworKiBG cmkgU2VwIDA0IDIwMjYgSmFuIEZyaWVzc2UgPGpmcmllc3NlQHJlZGhhdC5jb20+IC0gMy4xLjEw LTMKKy0gdG90ZW1zcnA6IEZpeCBpbnQgb3ZlcmZsb3cgaW4gY29tbWl0X3Rva2VuX3Nhbml0eQor ICAoZml4ZXMgQ1ZFLTIwMjYtODE2NjYpCistIHRvdGVtcGc6IFJlcGxhY2UgYXNzZXJ0IHdpdGgg Y2hlY2sgaW4gZGVsaXZlcl9mbgorICAoZml4ZXMgQ1ZFLTIwMjYtODE2NjUpCisKKwogKiBUaHUg QXByIDAyIDIwMjYgSmFuIEZyaWVzc2UgPGpmcmllc3NlQHJlZGhhdC5jb20+IC0gMy4xLjEwLTIK IC0gdG90ZW1zcnA6IFJldHVybiBlcnJvciBpZiBzYW5pdHkgY2hlY2sgZmFpbHMKICAgKGZpeGVz IENWRS0yMDI2LTM1MDkxKQo=