From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Vitezslav Crhonek To: git-commits@fedoraproject.org Subject: [rpms/sblim-sfcb] rawhide: Fix CVE-2026-73583 and CVE-2026-73584 Date: Mon, 07 Sep 2026 08:01:00 GMT Message-ID: <178876806018.1.17996170534415429173.rpms-sblim-sfcb-5539bde4661a@fedoraproject.org> List-ID: X-Git-Repo: rpms/sblim-sfcb X-Git-Branch: rawhide X-Git-Rev: 5539bde4661a44b60968daeca464a7eec91455df QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvc2JsaW0tc2ZjYgpC cmFuY2ggOiByYXdoaWRlCkNvbW1pdCA6IDU1MzliZGU0NjYxYTQ0YjYwOTY4ZGFlY2E0NjRhN2Vl YzkxNDU1ZGYKQXV0aG9yIDogVml0ZXpzbGF2IENyaG9uZWsgPHZjcmhvbmVrQHJlZGhhdC5jb20+ CkRhdGUgICA6IDIwMjYtMDktMDdUMDk6NDI6MTMrMDI6MDAKU3RhdHMgIDogKzEyNC8tMSBpbiAz IGZpbGUocykKVVJMICAgIDogaHR0cHM6Ly9zcmMuZmVkb3JhcHJvamVjdC5vcmcvcnBtcy9zYmxp bS1zZmNiL2MvNTUzOWJkZTQ2NjFhNDRiNjA5NjhkYWVjYTQ2NGE3ZWVjOTE0NTVkZj9icmFuY2g9 cmF3aGlkZQoKTG9nOgpGaXggQ1ZFLTIwMjYtNzM1ODMgYW5kIENWRS0yMDI2LTczNTg0CgotLS0K ZGlmZiAtLWdpdCBhL3NibGltLXNmY2ItMS40Ljktc2VjdXJlLXRtcGZpbGUucGF0Y2ggYi9zYmxp bS1zZmNiLTEuNC45LXNlY3VyZS10bXBmaWxlLnBhdGNoCm5ldyBmaWxlIG1vZGUgMTAwNjQ0Cmlu ZGV4IDAwMDAwMDAuLjRjZWI4OWQKLS0tIC9kZXYvbnVsbAorKysgYi9zYmxpbS1zZmNiLTEuNC45 LXNlY3VyZS10bXBmaWxlLnBhdGNoCkBAIC0wLDAgKzEsNTUgQEAKK2RpZmYgLXVwIHNibGltLXNm Y2ItMS40Ljkvc2ZjYnJlcG9zLnNoLmluLnNlY3VyZS10bXBmaWxlIHNibGltLXNmY2ItMS40Ljkv c2ZjYnJlcG9zLnNoLmluCistLS0gc2JsaW0tc2ZjYi0xLjQuOS9zZmNicmVwb3Muc2guaW4uc2Vj dXJlLXRtcGZpbGUJMjAyNi0wNy0yOSAxMTo1ODo1NC4xNzExMjQ2OTYgKzAyMDAKKysrKyBzYmxp bS1zZmNiLTEuNC45L3NmY2JyZXBvcy5zaC5pbgkyMDI2LTA3LTI5IDExOjU2OjE1LjI3MjAxODQ4 MCArMDIwMAorQEAgLTE3MCw3ICsxNzAsOSBAQCB0aGVuCisgICAgIGZpCisgCisgICAgICMgQ29t cGlsZSBhbGwgc3RhZ2VkIG5hbWVzcGFjZSBkaXJlY3RvcmllcworLSAgICBpbnN0bWlnZmlsZT0v dG1wL3NmY2JpbnN0Lm1vZgorKyAgICBpbnN0bWlnZmlsZT0iJChta3RlbXAgIiR7VE1QRElSOi0v dG1wfS9zZmNiaW5zdC5YWFhYWFgubW9mIikiIHx8IGV4aXQgMQorKyAgICBjaG1vZCA2MDAgIiRp bnN0bWlnZmlsZSIgfHwgZXhpdCAxCisrICAgIHRyYXAgJ3JtIC1mIC0tICIkaW5zdG1pZ2ZpbGUi JyBFWElUCisgICAgIG1vZnN1YmRpcnM9YGZpbmQgJHN0YWdpbmdkaXIvbW9mcy8qIC10eXBlIGQg LXByaW50IDI+IC9kZXYvbnVsbGAKKyAgICAgaWYgbHMgJHN0YWdpbmdkaXIvbW9mcy8qLm1vZiA+ IC9kZXYvbnVsbCAyPiYxCisgICAgIHRoZW4KK0BAIC0xODYsMjEgKzE4OCwyMSBAQCB0aGVuCisg CSAgICByZXBvc2l0b3J5ZGlyPSRyZWdpc3RyYXRpb25kaXIvcmVwb3NpdG9yeS8KKyAJICAgIFsg LWQgJHJlcG9zaXRvcnlkaXIgXSB8fCBta2RpciAtcCAkcmVwb3NpdG9yeWRpcgorIAorLSAgICAg ICAgI2dyYWIgYWxsIG5vbi1tb2Ygc3RhdGljIGluc3RhbmNlcywgb3V0cHV0IHRvIC90bXAvc2Zj Ymluc3QubW9mCisrICAgICAgICAjZ3JhYiBhbGwgbm9uLW1vZiBzdGF0aWMgaW5zdGFuY2VzLCBv dXRwdXQgdG8gdGVtcCBmaWxlCisgICAgICAgICBpZiBbIC16ICIkaWdub3JlX2luc3RhbmNlcyIg XQorICAgICAgICAgdGhlbgorLSAgICAgICAgICAgIHJtIC1mICRpbnN0bWlnZmlsZSAyPiAvZGV2 L251bGwKKysgICAgICAgICAgICA6ID4gIiRpbnN0bWlnZmlsZSIKKyAgICAgICAgICAgICAjZ2V0 IGNsYXNzIG5hbWVzIChmcm9tIGZpbGVuYW1lcyksIGlnbm9yaW5nIHNwZWNpZmljIGZpbGVzLCBm cm9tIHJlcG9zLnByZXZpb3VzLCBhcyBpdCdzIGFscmVhZHkgYmVlbiBtb3ZlZAorICAgICAgICAg ICAgIGlmIFsgLWUgJHJlZ2lzdHJhdGlvbmRpci9yZXBvc2l0b3J5LnByZXZpb3VzLyRuYW1lc3Bh Y2UvIF0KKyAgICAgICAgICAgICB0aGVuCisgICAgICAgICAgICAgICAgIHN0YXRpY19pbnN0X2Zp bGVzPWBscyAkcmVnaXN0cmF0aW9uZGlyL3JlcG9zaXRvcnkucHJldmlvdXMvJG5hbWVzcGFjZS8g LUkgY2xhc3NTY2hlbWFzIC1JIHF1YWxpZmllcnMgLUkgKi5pZHhgID4gL2Rldi9udWxsIDI+JjEK KyAgICAgICAgICAgICAgICAgZm9yIGluc3RmaWxlIGluICRzdGF0aWNfaW5zdF9maWxlcworICAg ICAgICAgICAgICAgICBkbworLSAgICAgICAgICAgICAgICAgICAgc2ZjYmluc3QybW9mIC1uICRu YW1lc3BhY2UgLWMgJGluc3RmaWxlIC1vICRpbnN0bWlnZmlsZSAtciAkcmVnaXN0cmF0aW9uZGly L3JlcG9zaXRvcnkucHJldmlvdXMvIC1nICR7REVTVERJUn1Ac3lzY29uZmRpckAvc2ZjYi9zZmNi LmNmZyAyPiAvZGV2L251bGwKKysgICAgICAgICAgICAgICAgICAgIHNmY2JpbnN0Mm1vZiAtbiAi JG5hbWVzcGFjZSIgLWMgIiRpbnN0ZmlsZSIgLW8gIiRpbnN0bWlnZmlsZSIgLXIgIiRyZWdpc3Ry YXRpb25kaXIvcmVwb3NpdG9yeS5wcmV2aW91cy8iIC1nICIke0RFU1RESVJ9QHN5c2NvbmZkaXJA L3NmY2Ivc2ZjYi5jZmciIDI+IC9kZXYvbnVsbAorICAgICAgICAgICAgICAgICBkb25lCisgICAg ICAgICAgICAgZmkKKyAgICAgICAgIGZpCistICAgICAgICBpZiBbIC1lICRpbnN0bWlnZmlsZSBd CisrICAgICAgICBpZiBbIC1zICIkaW5zdG1pZ2ZpbGUiIF0KKyAgICAgICAgIHRoZW4KKyAgICAg ICAgICAgICBpbnN0bWlnb3B0PSItbSAkaW5zdG1pZ2ZpbGUiCisgICAgICAgICBlbHNlCitAQCAt MjA4LDE0ICsyMTAsOSBAQCB0aGVuCisgICAgICAgICBmaQorIAkgICAgaWYgISBzZmNibW9mIC1k ICRyZXBvc2l0b3J5ZGlyIC1uICRuYW1lc3BhY2UgLW8gY2xhc3NTY2hlbWFzIC1JICRjaW1zY2hl bWFkaXIgLWkgQ0lNX1NjaGVtYS5tb2YgJGNwZm9ybWF0ICRiYWNrZW5kb3B0ICRpbnN0bWlnb3B0 ICRtb2ZkaXIvKi5tb2YgJGdsb2JhbG1vZnMKKyAJICAgIHRoZW4KKy0gICAgICAgICAgICBybSAt ZiAkaW5zdG1pZ2ZpbGUgMj4gL2Rldi9udWxsCisgCQkgICAgZWNobyBGYWlsZWQgY29tcGlsaW5n IHRoZSBNT0YgZmlsZXMuID4mMgorIAkJICAgIGV4aXQgMQorIAkgICAgZmkKKy0gICAgICAgIGlm IFsgLWUgJGluc3RtaWdmaWxlIF0KKy0gICAgICAgIHRoZW4KKy0gICAgICAgICAgICBybSAtZiAk aW5zdG1pZ2ZpbGUgMj4gL2Rldi9udWxsCistICAgICAgICBmaQorIAorICAgICAgICAgaWYgWyAi JGNvbXByZXNzIiA9ICIxIiBdCisgICAgICAgICB0aGVuCgpkaWZmIC0tZ2l0IGEvc2JsaW0tc2Zj Yi0xLjQuOS12YWxpZGF0ZS1pcGMtbXNnLnBhdGNoIGIvc2JsaW0tc2ZjYi0xLjQuOS12YWxpZGF0 ZS1pcGMtbXNnLnBhdGNoCm5ldyBmaWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAwMDAwMDAuLjY2ZmMy MDYKLS0tIC9kZXYvbnVsbAorKysgYi9zYmxpbS1zZmNiLTEuNC45LXZhbGlkYXRlLWlwYy1tc2cu cGF0Y2gKQEAgLTAsMCArMSw1MSBAQAorZGlmZiAtdXAgc2JsaW0tc2ZjYi0xLjQuOS9wcm92aWRl ck1nci5jLnZhbGlkYXRlLWlwYy1tc2cgc2JsaW0tc2ZjYi0xLjQuOS9wcm92aWRlck1nci5jCist LS0gc2JsaW0tc2ZjYi0xLjQuOS9wcm92aWRlck1nci5jLnZhbGlkYXRlLWlwYy1tc2cJMjAyNi0w Ny0yOSAwOTo0MTozNi45NzMwMzgxOTEgKzAyMDAKKysrKyBzYmxpbS1zZmNiLTEuNC45L3Byb3Zp ZGVyTWdyLmMJMjAyNi0wNy0yOSAwOTo0NzowMi4xNTcyNDcxOTIgKzAyMDAKK0BAIC0yNCw2ICsy NCw3IEBACisgI2luY2x1ZGUgPHRpbWUuaD4KKyAjaW5jbHVkZSA8cHRocmVhZC5oPgorICNpbmNs dWRlIDxzeXMvcmVzb3VyY2UuaD4KKysjaW5jbHVkZSA8c3RkaW50Lmg+CisgCisgI2luY2x1ZGUg ImNtcGkvY21waWR0LmgiCisgI2luY2x1ZGUgInByb3ZpZGVyUmVnaXN0ZXIuaCIKK0BAIC0xMDAz LDYgKzEwMDQsMTggQEAgc3RhdGljIE1nckhhbmRsZXIgbUhhbmRsZXJzW10gPSB7CisgICB7bm90 U3VwcG9ydGVkfSAgICAgICAgICAgICAgICAvLyBPUFNfRW51bWVyYXRpb25Db3VudCA0MworIH07 CisgCisrc3RhdGljIGludAorK3NlZ0luTXNnKHVuc2lnbmVkIGxvbmcgcmwsIE1zZ1NlZ21lbnQg c2VnKQorK3sKKysgIHVpbnRwdHJfdCBvZmYgPSAodWludHB0cl90KSBzZWcuZGF0YTsKKysgIHNp emVfdCBsZW4gPSAoc2l6ZV90KSBzZWcubGVuZ3RoOworKyAgaWYgKG9mZiA+IHJsKQorKyAgICBy ZXR1cm4gMDsKKysgIGlmIChsZW4gPiAoc2l6ZV90KShybCAtIG9mZikpCisrICAgIHJldHVybiAw OworKyAgcmV0dXJuIDE7CisrfQorKworIHZvaWQKKyBwcm9jZXNzUHJvdmlkZXJNZ3JSZXF1ZXN0 cygpCisgeworQEAgLTEwNjgsNiArMTA4MSwyMCBAQCBwcm9jZXNzUHJvdmlkZXJNZ3JSZXF1ZXN0 cygpCisgICAgICAgICAgc3BSZWN2UmVxKCZzZmNiU29ja2V0cy5yZWNlaXZlLCAmcmVxdWVzdG9y LCAodm9pZCAqKikgJnJlcSwgJnJsLAorICAgICAgICAgICAgICAgICAgICAmbXFnKSkgPT0gMCkg eworICAgICAgIGlmIChtcWcucmRvbmUpIHsKKysgICAgICAgIGlmIChybCA8IHNpemVvZihPcGVy YXRpb25IZHIpIHx8CisrICAgICAgICAgICAgIXNlZ0luTXNnKHJsLCByZXEtPm5hbWVTcGFjZSkg fHwKKysgICAgICAgICAgICAocmVxLT5jbGFzc05hbWUubGVuZ3RoICYmICFzZWdJbk1zZyhybCwg cmVxLT5jbGFzc05hbWUpKSB8fAorKyAgICAgICAgICAgIHJlcS0+dHlwZSA+PSAoc2l6ZW9mKG1I YW5kbGVycykgLyBzaXplb2YobUhhbmRsZXJzWzBdKSkgfHwKKysgICAgICAgICAgICBtSGFuZGxl cnNbcmVxLT50eXBlXS5oYW5kbGVyID09IE5VTEwpIHsKKysgICAgICAgICAgbWxvZ2YoTV9FUlJP UiwgTV9TSE9XLAorKyAgICAgICAgICAgICAgICAiLS0tIE1nciByZXF1ZXN0IHJlamVjdGVkOiBp bnZhbGlkIG1lc3NhZ2UgIgorKyAgICAgICAgICAgICAgICAiKGxlbj0lbHUpXG4iLCBybCk7Cisr ICAgICAgICAgIGZyZWUocmVxKTsKKysgICAgICAgICAgaWYgKChvcHRpb25zICYgT0hfSW50ZXJu YWwpID09IDApCisrICAgICAgICAgICAgY2xvc2UocmVxdWVzdG9yKTsKKysgICAgICAgICAgY29u dGludWU7CisrICAgICAgICB9CisrCisgICAgICAgICByZXEtPm5hbWVTcGFjZS5kYXRhID0KKyAg ICAgICAgICAgICAodm9pZCAqKSAoKGxvbmcpIHJlcS0+bmFtZVNwYWNlLmRhdGEgKyAoY2hhciAq KSByZXEpOworICAgICAgICAgaWYgKHJlcS0+Y2xhc3NOYW1lLmxlbmd0aCkKCmRpZmYgLS1naXQg YS9zYmxpbS1zZmNiLnNwZWMgYi9zYmxpbS1zZmNiLnNwZWMKaW5kZXggMDZiZTUwZS4uNjMxYTJk NiAxMDA2NDQKLS0tIGEvc2JsaW0tc2ZjYi5zcGVjCisrKyBiL3NibGltLXNmY2Iuc3BlYwpAQCAt OCw3ICs4LDcgQEAgTmFtZTogc2JsaW0tc2ZjYgogU3VtbWFyeTogU21hbGwgRm9vdHByaW50IENJ TSBCcm9rZXIKIFVSTDogaHR0cDovL3NibGltLndpa2kuc291cmNlZm9yZ2UubmV0LwogVmVyc2lv bjogMS40LjkKLVJlbGVhc2U6IDQzJXs/ZGlzdH0KK1JlbGVhc2U6IDQ0JXs/ZGlzdH0KIExpY2Vu c2U6IEVQTC0xLjAKIFNvdXJjZTA6IGh0dHA6Ly9kb3dubG9hZHMuc291cmNlZm9yZ2UubmV0L3Ni bGltLyV7bmFtZX0tJXt2ZXJzaW9ufS50YXIuYnoyCiBTb3VyY2UxOiBzZmNiLnNlcnZpY2UKQEAg LTU4LDYgKzU4LDE1IEBAIFBhdGNoMTU6IHNibGltLXNmY2ItMS40LjktZml4LWZ0ZWxsLW92ZXJm bG93LnBhdGNoCiBQYXRjaDE2OiBzYmxpbS1zZmNiLTEuNC45LWZpeC1kb3VibGUtZnJlZS5wYXRj aAogIyBQYXRjaDE3OiBmaXggaW5jb3JyZWN0IGZyZWUgb2Ygbm9uLWFsbG9jYXRlZCBwb2ludGVy CiBQYXRjaDE3OiBzYmxpbS1zZmNiLTEuNC45LWZpeC1pbmNvcnJlY3QtZnJlZS5wYXRjaAorIyBQ YXRjaDE4OiB2YWxpZGF0ZSBJUEMgbWVzc2FnZSBmaWVsZHMgaW4gcHJvY2Vzc1Byb3ZpZGVyTWdy UmVxdWVzdHMoKSBiZWZvcmUKKyMgICBwb2ludGVyIGZpeHVwIGFuZCBoYW5kbGVyIGRpc3BhdGNo IHRvIHByZXZlbnQgT09CIGFjY2VzcyB2aWEgbWFsZm9ybWVkCisjICAgT3BlcmF0aW9uSGRyIChD VkUtMjAyNi03MzU4MykKK1BhdGNoMTg6IHNibGltLXNmY2ItMS40LjktdmFsaWRhdGUtaXBjLW1z Zy5wYXRjaAorIyBQYXRjaDE5OiB1c2UgbWt0ZW1wIGZvciBzZmNicmVwb3MgaW5zdGFuY2UgbWln cmF0aW9uIHRlbXAgZmlsZSB0byBwcmV2ZW50CisjICAgVE9DVE9VIHN5bWxpbmsgYXR0YWNrIHZp YSAvdG1wL3NmY2JpbnN0Lm1vZiAoQ1ZFLTIwMjYtNzM1ODQpCitQYXRjaDE5OiBzYmxpbS1zZmNi LTEuNC45LXNlY3VyZS10bXBmaWxlLnBhdGNoCisKKwogUHJvdmlkZXM6IGNpbS1zZXJ2ZXIgPSAw CiBSZXF1aXJlczogY2ltLXNjaGVtYQogUmVxdWlyZXM6IHNibGltLXNmY0NvbW1vbgpAQCAtMTA1 LDYgKzExNCw4IEBAIFByb2dyYW1taW5nIEludGVyZmFjZSAoQ01QSSkuCiAlcGF0Y2ggLVAxNSAt cDEgLWIgLmZpeC1mdGVsbC1vdmVyZmxvdwogJXBhdGNoIC1QMTYgLXAxIC1iIC5maXgtZG91Ymxl LWZyZWUKICVwYXRjaCAtUDE3IC1wMSAtYiAuZml4LWluY29ycmVjdC1mcmVlCislcGF0Y2ggLVAx OCAtcDEgLWIgLnZhbGlkYXRlLWlwYy1tc2cKKyVwYXRjaCAtUDE5IC1wMSAtYiAuc2VjdXJlLXRt cGZpbGUKIAogIyBDcmVhdGUgYSBzeXN1c2Vycy5kIGNvbmZpZyBmaWxlCiBjYXQgPnNibGltLXNm Y2Iuc3lzdXNlcnMuY29uZiA8PEVPRgpAQCAtMTczLDYgKzE4NCwxMiBAQCBmaQogJXtfdG1wZmls ZXNkaXJ9L3NibGltLXNmY2IuY29uZgogCiAlY2hhbmdlbG9nCisqIE1vbiBTZXAgMDcgMjAyNiBW aXRlenNsYXYgQ3Job25layA8dmNyaG9uZWtAcmVkaGF0LmNvbT4gLSAxLjQuOS00NAorLSBWYWxp ZGF0ZSBJUEMgbWVzc2FnZSBpbiBwcm92aWRlci1tYW5hZ2VyIHRvIHByZXZlbnQgT09CIGFjY2Vz cworICB2aWEgbWFsZm9ybWVkIE9wZXJhdGlvbkhkciAoQ1ZFLTIwMjYtNzM1ODMpCistIFVzZSBt a3RlbXAgZm9yIHNmY2JyZXBvcyBpbnN0YW5jZSBtaWdyYXRpb24gdGVtcCBmaWxlIHRvIHByZXZl bnQKKyAgVE9DVE9VIHN5bWxpbmsgYXR0YWNrIHZpYSAvdG1wL3NmY2JpbnN0Lm1vZiAoQ1ZFLTIw MjYtNzM1ODQpCisKICogV2VkIEp1bCAyMiAyMDI2IFZpdGV6c2xhdiBDcmhvbmVrIDx2Y3Job25l a0ByZWRoYXQuY29tPiAtIDEuNC45LTQzCiAtIEZpeCBtdWx0aXBsZSBpc3N1ZXMgZGlzY292ZXJl ZCBieSBzdGF0aWMgYW5hbHlzaXMKIAo=