From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Peter Lemenkov To: git-commits@fedoraproject.org Subject: [rpms/elixir] f43: Fix for CVE-2026-49762 Date: Sat, 05 Sep 2026 13:51:13 GMT Message-ID: <178861627332.1.7248105479188090741.rpms-elixir-5d4c58e1d0a4@fedoraproject.org> List-ID: X-Git-Repo: rpms/elixir X-Git-Branch: f43 X-Git-Rev: 5d4c58e1d0a41c4fe207bf3d2a8d652ab467e6b8 ICAgICAgICAgICAgQSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KCiAgICAgICAgICAgIFJl cG8gICA6IHJwbXMvZWxpeGlyCiAgICAgICAgICAgIEJyYW5jaCA6IGY0MwogICAgICAgICAgICBD b21taXQgOiA1ZDRjNThlMWQwYTQxYzRmZTIwN2JmM2QyYThkNjUyYWI0NjdlNmI4CiAgICAgICAg ICAgIEF1dGhvciA6IFBldGVyIExlbWVua292IDxsZW1lbmtvdkBnbWFpbC5jb20+CiAgICAgICAg ICAgIERhdGUgICA6IDIwMjYtMDktMDVUMTU6NTA6MTcrMDI6MDAKICAgICAgICAgICAgU3RhdHMg IDogKzExNy8tMCBpbiAyIGZpbGUocykKICAgICAgICAgICAgVVJMICAgIDogaHR0cHM6Ly9zcmMu ZmVkb3JhcHJvamVjdC5vcmcvcnBtcy9lbGl4aXIvYy81ZDRjNThlMWQwYTQxYzRmZTIwN2JmM2Qy YThkNjUyYWI0NjdlNmI4P2JyYW5jaD1mNDMKCiAgICAgICAgICAgIExvZzoKICAgICAgICAgICAg Rml4IGZvciBDVkUtMjAyNi00OTc2MgoKU2lnbmVkLW9mZi1ieTogUGV0ZXIgTGVtZW5rb3YgPGxl bWVua292QGdtYWlsLmNvbT4KCi0tLQpkaWZmIC0tZ2l0IGEvZWxpeGlyLTAwMDMtTGltaXQtdmVy c2lvbi1udW1iZXJzLXRvLTE0LWJ5dGVzLnBhdGNoIGIvZWxpeGlyLTAwMDMtTGltaXQtdmVyc2lv bi1udW1iZXJzLXRvLTE0LWJ5dGVzLnBhdGNoCm5ldyBmaWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAw MDAwMDAuLjgwNjk2MGUKLS0tIC9kZXYvbnVsbAorKysgYi9lbGl4aXItMDAwMy1MaW1pdC12ZXJz aW9uLW51bWJlcnMtdG8tMTQtYnl0ZXMucGF0Y2gKQEAgLTAsMCArMSwxMTYgQEAKK0Zyb20gMDAw MDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMCBNb24gU2VwIDE3IDAwOjAwOjAw IDIwMDEKK0Zyb206ID0/VVRGLTg/cT9Kb3M9QzM9QTk9MjBWYWxpbT89IDxqb3NlLnZhbGltQGdt YWlsLmNvbT4KK0RhdGU6IFR1ZSwgOSBKdW4gMjAyNiAxNToyNTo1NyArMDIwMAorU3ViamVjdDog W1BBVENIXSBMaW1pdCB2ZXJzaW9uIG51bWJlcnMgdG8gMTQgYnl0ZXMKKworVGhpcyBhdm9pZHMg cGFyc2luZyB0b28gbGFyZ2UgaW50ZWdlcnMuCisKK0NWRS0yMDI2LTQ5NzYyCitHSFNBLXcyaDgt OHgzZy0yNzhwCisKK2RpZmYgLS1naXQgYS9saWIvZWxpeGlyL2xpYi92ZXJzaW9uLmV4IGIvbGli L2VsaXhpci9saWIvdmVyc2lvbi5leAoraW5kZXggMzZjZTE4ZDMwLi40YTAyNWExNjQgMTAwNjQ0 CistLS0gYS9saWIvZWxpeGlyL2xpYi92ZXJzaW9uLmV4CisrKysgYi9saWIvZWxpeGlyL2xpYi92 ZXJzaW9uLmV4CitAQCAtMTgsMTIgKzE4LDE2IEBAIGRlZm1vZHVsZSBWZXJzaW9uIGRvCisgCisg ICAgICAgTUFKT1IuTUlOT1IuUEFUQ0gKKyAKKysgIEVhY2ggbnVtZXJpYyBjb21wb25lbnQgaXMg bGltaXRlZCB0byBhdCBtb3N0IDE0IGRpZ2l0cy4KKysKKyAgIFByZS1yZWxlYXNlcyBhcmUgc3Vw cG9ydGVkIGJ5IG9wdGlvbmFsbHkgYXBwZW5kaW5nIGEgaHlwaGVuIGFuZCBhIHNlcmllcyBvZgor ICAgcGVyaW9kLXNlcGFyYXRlZCBpZGVudGlmaWVycyBpbW1lZGlhdGVseSBmb2xsb3dpbmcgdGhl IHBhdGNoIHZlcnNpb24uCisgICBJZGVudGlmaWVycyBjb25zaXN0IG9mIG9ubHkgQVNDSUkgYWxw aGFudW1lcmljIGNoYXJhY3RlcnMgYW5kIGh5cGhlbnMgKGBbMC05QS1aYS16LV1gKToKKyAKKyAg ICAgICAiMS4wLjAtYWxwaGEuMyIKKyAKKysgIE51bWVyaWMgcHJlLXJlbGVhc2UgaWRlbnRpZmll cnMgYXJlIGFsc28gbGltaXRlZCB0byBhdCBtb3N0IDE0IGRpZ2l0cy4KKysKKyAgIEJ1aWxkIGlu Zm9ybWF0aW9uIGNhbiBiZSBhZGRlZCBieSBhcHBlbmRpbmcgYSBwbHVzIHNpZ24gYW5kIGEgc2Vy aWVzIG9mCisgICBkb3Qtc2VwYXJhdGVkIGlkZW50aWZpZXJzIGltbWVkaWF0ZWx5IGZvbGxvd2lu ZyB0aGUgcGF0Y2ggb3IgcHJlLXJlbGVhc2UgdmVyc2lvbi4KKyAgIElkZW50aWZpZXJzIGNvbnNp c3Qgb2Ygb25seSBBU0NJSSBhbHBoYW51bWVyaWMgY2hhcmFjdGVycyBhbmQgaHlwaGVucyAoYFsw LTlBLVphLXotXWApOgorQEAgLTUxNSw2ICs1MTksOCBAQCBkZWZwIHByZV90b19zdHJpbmcocHJl KSBkbworICAgZGVmbW9kdWxlIFBhcnNlciBkbworICAgICBAbW9kdWxlZG9jIGZhbHNlCisgCisr ICAgIEBtYXhfbnVtZXJpY19jb21wb25lbnRfZGlnaXRzIDE0CisrCisgICAgIG9wZXJhdG9ycyA9 IFsKKyAgICAgICB7Ij49IiwgOj49fSwKKyAgICAgICB7Ijw9IiwgOjw9fSwKK0BAIC02MTYsNyAr NjIyLDkgQEAgZGVmIHBhcnNlX3ZlcnNpb24oc3RyaW5nLCBhcHByb3hpbWF0ZT8gXFwgZmFsc2Up IHdoZW4gaXNfYmluYXJ5KHN0cmluZykgZG8KKyAgICAgZGVmcCByZXF1aXJlX2RpZ2l0cyhuaWwp LCBkbzogOmVycm9yCisgCisgICAgIGRlZnAgcmVxdWlyZV9kaWdpdHMoc3RyaW5nKSBkbworLSAg ICAgIGlmIGxlYWRpbmdfemVybz8oc3RyaW5nKSwgZG86IDplcnJvciwgZWxzZTogcGFyc2VfZGln aXRzKHN0cmluZywgIiIpCisrICAgICAgaWYgbGVhZGluZ196ZXJvPyhzdHJpbmcpIG9yIGJ5dGVf c2l6ZShzdHJpbmcpID4gQG1heF9udW1lcmljX2NvbXBvbmVudF9kaWdpdHMsCisrICAgICAgICBk bzogOmVycm9yLAorKyAgICAgICAgZWxzZTogcGFyc2VfZGlnaXRzKHN0cmluZywgIiIpCisgICAg IGVuZAorIAorICAgICBkZWZwIGxlYWRpbmdfemVybz8oPDw/MCwgXywgXzo6YmluYXJ5Pj4pLCBk bzogdHJ1ZQorQEAgLTY0NCw2ICs2NTIsMTEgQEAgZGVmcCBvcHRpb25hbF9kb3Rfc2VwYXJhdGVk KHN0cmluZykgZG8KKyAgICAgICBlbmQKKyAgICAgZW5kCisgCisrICAgIGRlZnAgY29udmVydF9w YXJ0c190b19pbnRlZ2VyKFtwYXJ0IHwgcmVzdF0sIGFjYykKKysgICAgICAgICB3aGVuIGJ5dGVf c2l6ZShwYXJ0KSA+IEBtYXhfbnVtZXJpY19jb21wb25lbnRfZGlnaXRzIGRvCisrICAgICAgaWYg YWxsX2RpZ2l0cz8ocGFydCksIGRvOiA6ZXJyb3IsIGVsc2U6IGNvbnZlcnRfcGFydHNfdG9faW50 ZWdlcihyZXN0LCBbcGFydCB8IGFjY10pCisrICAgIGVuZAorKworICAgICBkZWZwIGNvbnZlcnRf cGFydHNfdG9faW50ZWdlcihbcGFydCB8IHJlc3RdLCBhY2MpIGRvCisgICAgICAgY2FzZSBwYXJz ZV9kaWdpdHMocGFydCwgIiIpIGRvCisgICAgICAgICB7Om9rLCBpbnRlZ2VyfSAtPgorQEAgLTY2 Miw2ICs2NzUsMTAgQEAgZGVmcCBjb252ZXJ0X3BhcnRzX3RvX2ludGVnZXIoW10sIGFjYykgZG8K KyAgICAgICB7Om9rLCBFbnVtLnJldmVyc2UoYWNjKX0KKyAgICAgZW5kCisgCisrICAgIGRlZnAg YWxsX2RpZ2l0cz8oPDxjaGFyLCByZXN0OjpiaW5hcnk+Pikgd2hlbiBjaGFyIGluID8wLi4/OSwg ZG86IGFsbF9kaWdpdHM/KHJlc3QpCisrICAgIGRlZnAgYWxsX2RpZ2l0cz8oPDw+PiksIGRvOiB0 cnVlCisrICAgIGRlZnAgYWxsX2RpZ2l0cz8oX290aGVyKSwgZG86IGZhbHNlCisrCisgICAgIGRl ZnAgdmFsaWRfaWRlbnRpZmllcj8oPDxjaGFyLCByZXN0OjpiaW5hcnk+PikKKyAgICAgICAgICB3 aGVuIGNoYXIgaW4gPzAuLj85CisgICAgICAgICAgd2hlbiBjaGFyIGluID9hLi4/egorZGlmZiAt LWdpdCBhL2xpYi9lbGl4aXIvdGVzdC9lbGl4aXIvdmVyc2lvbl90ZXN0LmV4cyBiL2xpYi9lbGl4 aXIvdGVzdC9lbGl4aXIvdmVyc2lvbl90ZXN0LmV4cworaW5kZXggMjA4ZjYyNWYyLi42ZGU1NGIw MWUgMTAwNjQ0CistLS0gYS9saWIvZWxpeGlyL3Rlc3QvZWxpeGlyL3ZlcnNpb25fdGVzdC5leHMK KysrKyBiL2xpYi9lbGl4aXIvdGVzdC9lbGl4aXIvdmVyc2lvbl90ZXN0LmV4cworQEAgLTg0LDkg Kzg0LDE1IEBAIHRlc3QgInBhcnNlLzEiIGRvCisgICAgIGFzc2VydCB7Om9rLCAlVmVyc2lvbntt YWpvcjogMSwgbWlub3I6IDQsIHBhdGNoOiA1LCBwcmU6IFs2LCA3LCAiZWlnaHQiXX19ID0KKyAg ICAgICAgICAgICAgVmVyc2lvbi5wYXJzZSgiMS40LjUtNi43LmVpZ2h0IikKKyAKKysgICAgYXNz ZXJ0IHs6b2ssICVWZXJzaW9ue21ham9yOiA5OV85OTlfOTk5Xzk5OV85OTksIG1pbm9yOiAwLCBw YXRjaDogMH19ID0KKysgICAgICAgICAgICAgVmVyc2lvbi5wYXJzZSgiOTk5OTk5OTk5OTk5OTku MC4wIikKKysKKyAgICAgYXNzZXJ0IHs6b2ssICVWZXJzaW9ue21ham9yOiAxLCBtaW5vcjogNCwg cGF0Y2g6IDUsIHByZTogWyI2LWczMzE4YmQ1Il19fSA9CisgICAgICAgICAgICAgIFZlcnNpb24u cGFyc2UoIjEuNC41LTYtZzMzMThiZDUraWdub3JlIikKKyAKKysgICAgYXNzZXJ0IHs6b2ssICVW ZXJzaW9ue21ham9yOiAxLCBtaW5vcjogMCwgcGF0Y2g6IDAsIHByZTogWyIxMDAwMDAwMDAwMDAw MDAtYWxwaGEiXX19ID0KKysgICAgICAgICAgICAgVmVyc2lvbi5wYXJzZSgiMS4wLjAtMTAwMDAw MDAwMDAwMDAwLWFscGhhIikKKysKKyAgICAgYXNzZXJ0IFZlcnNpb24ucGFyc2UoImZvb2JhciIp ID09IDplcnJvcgorICAgICBhc3NlcnQgVmVyc2lvbi5wYXJzZSgiMiIpID09IDplcnJvcgorICAg ICBhc3NlcnQgVmVyc2lvbi5wYXJzZSgiMi4iKSA9PSA6ZXJyb3IKK0BAIC0xMDUsNiArMTExLDEz IEBAIHRlc3QgInBhcnNlLzEiIGRvCisgICAgIGFzc2VydCBWZXJzaW9uLnBhcnNlKCIwMi4zLjAi KSA9PSA6ZXJyb3IKKyAgICAgYXNzZXJ0IFZlcnNpb24ucGFyc2UoIjAuIDAuMCIpID09IDplcnJv cgorICAgICBhc3NlcnQgVmVyc2lvbi5wYXJzZSgiMC4xLjAtJiZwcmUiKSA9PSA6ZXJyb3IKKysg ICAgYXNzZXJ0IFZlcnNpb24ucGFyc2UoIjEwMDAwMDAwMDAwMDAwMC4wLjAiKSA9PSA6ZXJyb3IK KysgICAgYXNzZXJ0IFZlcnNpb24ucGFyc2UoIjEuMTAwMDAwMDAwMDAwMDAwLjAiKSA9PSA6ZXJy b3IKKysgICAgYXNzZXJ0IFZlcnNpb24ucGFyc2UoIjEuMC4xMDAwMDAwMDAwMDAwMDAiKSA9PSA6 ZXJyb3IKKysgICAgYXNzZXJ0IFZlcnNpb24ucGFyc2UoIjEuMC4wLTEwMDAwMDAwMDAwMDAwMCIp ID09IDplcnJvcgorKworKyAgICBhc3NlcnQgVmVyc2lvbi5wYXJzZSgiMS4wLjArMTAwMDAwMDAw MDAwMDAwIikgPT0KKysgICAgICAgICAgICAgezpvaywgJVZlcnNpb257bWFqb3I6IDEsIG1pbm9y OiAwLCBwYXRjaDogMCwgYnVpbGQ6ICIxMDAwMDAwMDAwMDAwMDAifX0KKyAgIGVuZAorIAorICAg dGVzdCAidG9fc3RyaW5nLzEiIGRvCitAQCAtMzM4LDYgKzM1MSw3IEBAIHRlc3QgImNvbXBpbGVf cmVxdWlyZW1lbnQvMSIgZG8KKyAgICAgICBhc3NlcnQgVmVyc2lvbi5wYXJzZV9yZXF1aXJlbWVu dCgiMS4yLjMgYW5kIG9yIDQuNS42IikgPT0gOmVycm9yCisgICAgICAgYXNzZXJ0IFZlcnNpb24u cGFyc2VfcmVxdWlyZW1lbnQoIj49IDEiKSA9PSA6ZXJyb3IKKyAgICAgICBhc3NlcnQgVmVyc2lv bi5wYXJzZV9yZXF1aXJlbWVudCgiMS4yLjMgPj0iKSA9PSA6ZXJyb3IKKysgICAgICBhc3NlcnQg VmVyc2lvbi5wYXJzZV9yZXF1aXJlbWVudCgiMTAwMDAwMDAwMDAwMDAwLjAuMCIpID09IDplcnJv cgorICAgICBlbmQKKyAKKyAgICAgdGVzdCAiaW5zcGVjdC8xIiBkbwoKZGlmZiAtLWdpdCBhL2Vs aXhpci5zcGVjIGIvZWxpeGlyLnNwZWMKaW5kZXggNTBjODRiYS4uNjQwMTdjOCAxMDA2NDQKLS0t IGEvZWxpeGlyLnNwZWMKKysrIGIvZWxpeGlyLnNwZWMKQEAgLTE1LDYgKzE1LDcgQEAgU291cmNl MDogIGh0dHBzOi8vZ2l0aHViLmNvbS8le3Vwc3RyZWFtfS8le25hbWV9L2FyY2hpdmUvdiV7dmVy c2lvbn0vJXtuYW1lfS0le3YKIFNvdXJjZTE6ICBodHRwczovL2dpdGh1Yi5jb20vJXt1cHN0cmVh bX0vJXtuYW1lfS9yZWxlYXNlcy9kb3dubG9hZC92JXt2ZXJzaW9ufS9Eb2NzLnppcCMvJXtuYW1l fS0le3ZlcnNpb259LWRvYy56aXAKIFBhdGNoOiAgICBlbGl4aXItMDAwMS1GaXgtc2hlYmFuZy5w YXRjaAogUGF0Y2g6ICAgIGluY3JlYXNlLXRpbWVvdXRzLWZvci10ZXN0cy5wYXRjaAorUGF0Y2g6 ICAgIGVsaXhpci0wMDAzLUxpbWl0LXZlcnNpb24tbnVtYmVycy10by0xNC1ieXRlcy5wYXRjaAog IyBTZWUgaHR0cHM6Ly9idWd6aWxsYS5yZWRoYXQuY29tLzE0NzA1ODMKICNCdWlsZEFyY2g6ICAg ICAgbm9hcmNoCiBCdWlsZFJlcXVpcmVzOiBlcmxhbmctY29tcGlsZXIK