From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Vitezslav Crhonek To: git-commits@fedoraproject.org Subject: [rpms/sblim-sfcb] f45: Fix CVE-2026-73583 and CVE-2026-73584 Date: Mon, 07 Sep 2026 08:25:35 GMT Message-ID: <178876953594.1.8918562075235827475.rpms-sblim-sfcb-9ff7e331ab78@fedoraproject.org> List-ID: X-Git-Repo: rpms/sblim-sfcb X-Git-Branch: f45 X-Git-Rev: 9ff7e331ab780a234a4bfe938146438b52d19619 QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvc2JsaW0tc2ZjYgpC cmFuY2ggOiBmNDUKQ29tbWl0IDogOWZmN2UzMzFhYjc4MGEyMzRhNGJmZTkzODE0NjQzOGI1MmQx OTYxOQpBdXRob3IgOiBWaXRlenNsYXYgQ3Job25layA8dmNyaG9uZWtAcmVkaGF0LmNvbT4KRGF0 ZSAgIDogMjAyNi0wOS0wN1QxMDoyNToyNCswMjowMApTdGF0cyAgOiArMTI0Ly0xIGluIDMgZmls ZShzKQpVUkwgICAgOiBodHRwczovL3NyYy5mZWRvcmFwcm9qZWN0Lm9yZy9ycG1zL3NibGltLXNm Y2IvYy85ZmY3ZTMzMWFiNzgwYTIzNGE0YmZlOTM4MTQ2NDM4YjUyZDE5NjE5P2JyYW5jaD1mNDUK CkxvZzoKRml4IENWRS0yMDI2LTczNTgzIGFuZCBDVkUtMjAyNi03MzU4NAoKLS0tCmRpZmYgLS1n aXQgYS9zYmxpbS1zZmNiLTEuNC45LXNlY3VyZS10bXBmaWxlLnBhdGNoIGIvc2JsaW0tc2ZjYi0x LjQuOS1zZWN1cmUtdG1wZmlsZS5wYXRjaApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAw MDAwLi40Y2ViODlkCi0tLSAvZGV2L251bGwKKysrIGIvc2JsaW0tc2ZjYi0xLjQuOS1zZWN1cmUt dG1wZmlsZS5wYXRjaApAQCAtMCwwICsxLDU1IEBACitkaWZmIC11cCBzYmxpbS1zZmNiLTEuNC45 L3NmY2JyZXBvcy5zaC5pbi5zZWN1cmUtdG1wZmlsZSBzYmxpbS1zZmNiLTEuNC45L3NmY2JyZXBv cy5zaC5pbgorLS0tIHNibGltLXNmY2ItMS40Ljkvc2ZjYnJlcG9zLnNoLmluLnNlY3VyZS10bXBm aWxlCTIwMjYtMDctMjkgMTE6NTg6NTQuMTcxMTI0Njk2ICswMjAwCisrKysgc2JsaW0tc2ZjYi0x LjQuOS9zZmNicmVwb3Muc2guaW4JMjAyNi0wNy0yOSAxMTo1NjoxNS4yNzIwMTg0ODAgKzAyMDAK K0BAIC0xNzAsNyArMTcwLDkgQEAgdGhlbgorICAgICBmaQorIAorICAgICAjIENvbXBpbGUgYWxs IHN0YWdlZCBuYW1lc3BhY2UgZGlyZWN0b3JpZXMKKy0gICAgaW5zdG1pZ2ZpbGU9L3RtcC9zZmNi aW5zdC5tb2YKKysgICAgaW5zdG1pZ2ZpbGU9IiQobWt0ZW1wICIke1RNUERJUjotL3RtcH0vc2Zj Ymluc3QuWFhYWFhYLm1vZiIpIiB8fCBleGl0IDEKKysgICAgY2htb2QgNjAwICIkaW5zdG1pZ2Zp bGUiIHx8IGV4aXQgMQorKyAgICB0cmFwICdybSAtZiAtLSAiJGluc3RtaWdmaWxlIicgRVhJVAor ICAgICBtb2ZzdWJkaXJzPWBmaW5kICRzdGFnaW5nZGlyL21vZnMvKiAtdHlwZSBkIC1wcmludCAy PiAvZGV2L251bGxgCisgICAgIGlmIGxzICRzdGFnaW5nZGlyL21vZnMvKi5tb2YgPiAvZGV2L251 bGwgMj4mMQorICAgICB0aGVuCitAQCAtMTg2LDIxICsxODgsMjEgQEAgdGhlbgorIAkgICAgcmVw b3NpdG9yeWRpcj0kcmVnaXN0cmF0aW9uZGlyL3JlcG9zaXRvcnkvCisgCSAgICBbIC1kICRyZXBv c2l0b3J5ZGlyIF0gfHwgbWtkaXIgLXAgJHJlcG9zaXRvcnlkaXIKKyAKKy0gICAgICAgICNncmFi IGFsbCBub24tbW9mIHN0YXRpYyBpbnN0YW5jZXMsIG91dHB1dCB0byAvdG1wL3NmY2JpbnN0Lm1v ZgorKyAgICAgICAgI2dyYWIgYWxsIG5vbi1tb2Ygc3RhdGljIGluc3RhbmNlcywgb3V0cHV0IHRv IHRlbXAgZmlsZQorICAgICAgICAgaWYgWyAteiAiJGlnbm9yZV9pbnN0YW5jZXMiIF0KKyAgICAg ICAgIHRoZW4KKy0gICAgICAgICAgICBybSAtZiAkaW5zdG1pZ2ZpbGUgMj4gL2Rldi9udWxsCisr ICAgICAgICAgICAgOiA+ICIkaW5zdG1pZ2ZpbGUiCisgICAgICAgICAgICAgI2dldCBjbGFzcyBu YW1lcyAoZnJvbSBmaWxlbmFtZXMpLCBpZ25vcmluZyBzcGVjaWZpYyBmaWxlcywgZnJvbSByZXBv cy5wcmV2aW91cywgYXMgaXQncyBhbHJlYWR5IGJlZW4gbW92ZWQKKyAgICAgICAgICAgICBpZiBb IC1lICRyZWdpc3RyYXRpb25kaXIvcmVwb3NpdG9yeS5wcmV2aW91cy8kbmFtZXNwYWNlLyBdCisg ICAgICAgICAgICAgdGhlbgorICAgICAgICAgICAgICAgICBzdGF0aWNfaW5zdF9maWxlcz1gbHMg JHJlZ2lzdHJhdGlvbmRpci9yZXBvc2l0b3J5LnByZXZpb3VzLyRuYW1lc3BhY2UvIC1JIGNsYXNz U2NoZW1hcyAtSSBxdWFsaWZpZXJzIC1JICouaWR4YCA+IC9kZXYvbnVsbCAyPiYxCisgICAgICAg ICAgICAgICAgIGZvciBpbnN0ZmlsZSBpbiAkc3RhdGljX2luc3RfZmlsZXMKKyAgICAgICAgICAg ICAgICAgZG8KKy0gICAgICAgICAgICAgICAgICAgIHNmY2JpbnN0Mm1vZiAtbiAkbmFtZXNwYWNl IC1jICRpbnN0ZmlsZSAtbyAkaW5zdG1pZ2ZpbGUgLXIgJHJlZ2lzdHJhdGlvbmRpci9yZXBvc2l0 b3J5LnByZXZpb3VzLyAtZyAke0RFU1RESVJ9QHN5c2NvbmZkaXJAL3NmY2Ivc2ZjYi5jZmcgMj4g L2Rldi9udWxsCisrICAgICAgICAgICAgICAgICAgICBzZmNiaW5zdDJtb2YgLW4gIiRuYW1lc3Bh Y2UiIC1jICIkaW5zdGZpbGUiIC1vICIkaW5zdG1pZ2ZpbGUiIC1yICIkcmVnaXN0cmF0aW9uZGly L3JlcG9zaXRvcnkucHJldmlvdXMvIiAtZyAiJHtERVNURElSfUBzeXNjb25mZGlyQC9zZmNiL3Nm Y2IuY2ZnIiAyPiAvZGV2L251bGwKKyAgICAgICAgICAgICAgICAgZG9uZQorICAgICAgICAgICAg IGZpCisgICAgICAgICBmaQorLSAgICAgICAgaWYgWyAtZSAkaW5zdG1pZ2ZpbGUgXQorKyAgICAg ICAgaWYgWyAtcyAiJGluc3RtaWdmaWxlIiBdCisgICAgICAgICB0aGVuCisgICAgICAgICAgICAg aW5zdG1pZ29wdD0iLW0gJGluc3RtaWdmaWxlIgorICAgICAgICAgZWxzZQorQEAgLTIwOCwxNCAr MjEwLDkgQEAgdGhlbgorICAgICAgICAgZmkKKyAJICAgIGlmICEgc2ZjYm1vZiAtZCAkcmVwb3Np dG9yeWRpciAtbiAkbmFtZXNwYWNlIC1vIGNsYXNzU2NoZW1hcyAtSSAkY2ltc2NoZW1hZGlyIC1p IENJTV9TY2hlbWEubW9mICRjcGZvcm1hdCAkYmFja2VuZG9wdCAkaW5zdG1pZ29wdCAkbW9mZGly LyoubW9mICRnbG9iYWxtb2ZzCisgCSAgICB0aGVuCistICAgICAgICAgICAgcm0gLWYgJGluc3Rt aWdmaWxlIDI+IC9kZXYvbnVsbAorIAkJICAgIGVjaG8gRmFpbGVkIGNvbXBpbGluZyB0aGUgTU9G IGZpbGVzLiA+JjIKKyAJCSAgICBleGl0IDEKKyAJICAgIGZpCistICAgICAgICBpZiBbIC1lICRp bnN0bWlnZmlsZSBdCistICAgICAgICB0aGVuCistICAgICAgICAgICAgcm0gLWYgJGluc3RtaWdm aWxlIDI+IC9kZXYvbnVsbAorLSAgICAgICAgZmkKKyAKKyAgICAgICAgIGlmIFsgIiRjb21wcmVz cyIgPSAiMSIgXQorICAgICAgICAgdGhlbgoKZGlmZiAtLWdpdCBhL3NibGltLXNmY2ItMS40Ljkt dmFsaWRhdGUtaXBjLW1zZy5wYXRjaCBiL3NibGltLXNmY2ItMS40LjktdmFsaWRhdGUtaXBjLW1z Zy5wYXRjaApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwLi42NmZjMjA2Ci0tLSAv ZGV2L251bGwKKysrIGIvc2JsaW0tc2ZjYi0xLjQuOS12YWxpZGF0ZS1pcGMtbXNnLnBhdGNoCkBA IC0wLDAgKzEsNTEgQEAKK2RpZmYgLXVwIHNibGltLXNmY2ItMS40LjkvcHJvdmlkZXJNZ3IuYy52 YWxpZGF0ZS1pcGMtbXNnIHNibGltLXNmY2ItMS40LjkvcHJvdmlkZXJNZ3IuYworLS0tIHNibGlt LXNmY2ItMS40LjkvcHJvdmlkZXJNZ3IuYy52YWxpZGF0ZS1pcGMtbXNnCTIwMjYtMDctMjkgMDk6 NDE6MzYuOTczMDM4MTkxICswMjAwCisrKysgc2JsaW0tc2ZjYi0xLjQuOS9wcm92aWRlck1nci5j CTIwMjYtMDctMjkgMDk6NDc6MDIuMTU3MjQ3MTkyICswMjAwCitAQCAtMjQsNiArMjQsNyBAQAor ICNpbmNsdWRlIDx0aW1lLmg+CisgI2luY2x1ZGUgPHB0aHJlYWQuaD4KKyAjaW5jbHVkZSA8c3lz L3Jlc291cmNlLmg+CisrI2luY2x1ZGUgPHN0ZGludC5oPgorIAorICNpbmNsdWRlICJjbXBpL2Nt cGlkdC5oIgorICNpbmNsdWRlICJwcm92aWRlclJlZ2lzdGVyLmgiCitAQCAtMTAwMyw2ICsxMDA0 LDE4IEBAIHN0YXRpYyBNZ3JIYW5kbGVyIG1IYW5kbGVyc1tdID0geworICAge25vdFN1cHBvcnRl ZH0gICAgICAgICAgICAgICAgLy8gT1BTX0VudW1lcmF0aW9uQ291bnQgNDMKKyB9OworIAorK3N0 YXRpYyBpbnQKKytzZWdJbk1zZyh1bnNpZ25lZCBsb25nIHJsLCBNc2dTZWdtZW50IHNlZykKKyt7 CisrICB1aW50cHRyX3Qgb2ZmID0gKHVpbnRwdHJfdCkgc2VnLmRhdGE7CisrICBzaXplX3QgbGVu ID0gKHNpemVfdCkgc2VnLmxlbmd0aDsKKysgIGlmIChvZmYgPiBybCkKKysgICAgcmV0dXJuIDA7 CisrICBpZiAobGVuID4gKHNpemVfdCkocmwgLSBvZmYpKQorKyAgICByZXR1cm4gMDsKKysgIHJl dHVybiAxOworK30KKysKKyB2b2lkCisgcHJvY2Vzc1Byb3ZpZGVyTWdyUmVxdWVzdHMoKQorIHsK K0BAIC0xMDY4LDYgKzEwODEsMjAgQEAgcHJvY2Vzc1Byb3ZpZGVyTWdyUmVxdWVzdHMoKQorICAg ICAgICAgIHNwUmVjdlJlcSgmc2ZjYlNvY2tldHMucmVjZWl2ZSwgJnJlcXVlc3RvciwgKHZvaWQg KiopICZyZXEsICZybCwKKyAgICAgICAgICAgICAgICAgICAgJm1xZykpID09IDApIHsKKyAgICAg ICBpZiAobXFnLnJkb25lKSB7CisrICAgICAgICBpZiAocmwgPCBzaXplb2YoT3BlcmF0aW9uSGRy KSB8fAorKyAgICAgICAgICAgICFzZWdJbk1zZyhybCwgcmVxLT5uYW1lU3BhY2UpIHx8CisrICAg ICAgICAgICAgKHJlcS0+Y2xhc3NOYW1lLmxlbmd0aCAmJiAhc2VnSW5Nc2cocmwsIHJlcS0+Y2xh c3NOYW1lKSkgfHwKKysgICAgICAgICAgICByZXEtPnR5cGUgPj0gKHNpemVvZihtSGFuZGxlcnMp IC8gc2l6ZW9mKG1IYW5kbGVyc1swXSkpIHx8CisrICAgICAgICAgICAgbUhhbmRsZXJzW3JlcS0+ dHlwZV0uaGFuZGxlciA9PSBOVUxMKSB7CisrICAgICAgICAgIG1sb2dmKE1fRVJST1IsIE1fU0hP VywKKysgICAgICAgICAgICAgICAgIi0tLSBNZ3IgcmVxdWVzdCByZWplY3RlZDogaW52YWxpZCBt ZXNzYWdlICIKKysgICAgICAgICAgICAgICAgIihsZW49JWx1KVxuIiwgcmwpOworKyAgICAgICAg ICBmcmVlKHJlcSk7CisrICAgICAgICAgIGlmICgob3B0aW9ucyAmIE9IX0ludGVybmFsKSA9PSAw KQorKyAgICAgICAgICAgIGNsb3NlKHJlcXVlc3Rvcik7CisrICAgICAgICAgIGNvbnRpbnVlOwor KyAgICAgICAgfQorKworICAgICAgICAgcmVxLT5uYW1lU3BhY2UuZGF0YSA9CisgICAgICAgICAg ICAgKHZvaWQgKikgKChsb25nKSByZXEtPm5hbWVTcGFjZS5kYXRhICsgKGNoYXIgKikgcmVxKTsK KyAgICAgICAgIGlmIChyZXEtPmNsYXNzTmFtZS5sZW5ndGgpCgpkaWZmIC0tZ2l0IGEvc2JsaW0t c2ZjYi5zcGVjIGIvc2JsaW0tc2ZjYi5zcGVjCmluZGV4IDA2YmU1MGUuLjYzMWEyZDYgMTAwNjQ0 Ci0tLSBhL3NibGltLXNmY2Iuc3BlYworKysgYi9zYmxpbS1zZmNiLnNwZWMKQEAgLTgsNyArOCw3 IEBAIE5hbWU6IHNibGltLXNmY2IKIFN1bW1hcnk6IFNtYWxsIEZvb3RwcmludCBDSU0gQnJva2Vy CiBVUkw6IGh0dHA6Ly9zYmxpbS53aWtpLnNvdXJjZWZvcmdlLm5ldC8KIFZlcnNpb246IDEuNC45 Ci1SZWxlYXNlOiA0MyV7P2Rpc3R9CitSZWxlYXNlOiA0NCV7P2Rpc3R9CiBMaWNlbnNlOiBFUEwt MS4wCiBTb3VyY2UwOiBodHRwOi8vZG93bmxvYWRzLnNvdXJjZWZvcmdlLm5ldC9zYmxpbS8le25h bWV9LSV7dmVyc2lvbn0udGFyLmJ6MgogU291cmNlMTogc2ZjYi5zZXJ2aWNlCkBAIC01OCw2ICs1 OCwxNSBAQCBQYXRjaDE1OiBzYmxpbS1zZmNiLTEuNC45LWZpeC1mdGVsbC1vdmVyZmxvdy5wYXRj aAogUGF0Y2gxNjogc2JsaW0tc2ZjYi0xLjQuOS1maXgtZG91YmxlLWZyZWUucGF0Y2gKICMgUGF0 Y2gxNzogZml4IGluY29ycmVjdCBmcmVlIG9mIG5vbi1hbGxvY2F0ZWQgcG9pbnRlcgogUGF0Y2gx Nzogc2JsaW0tc2ZjYi0xLjQuOS1maXgtaW5jb3JyZWN0LWZyZWUucGF0Y2gKKyMgUGF0Y2gxODog dmFsaWRhdGUgSVBDIG1lc3NhZ2UgZmllbGRzIGluIHByb2Nlc3NQcm92aWRlck1nclJlcXVlc3Rz KCkgYmVmb3JlCisjICAgcG9pbnRlciBmaXh1cCBhbmQgaGFuZGxlciBkaXNwYXRjaCB0byBwcmV2 ZW50IE9PQiBhY2Nlc3MgdmlhIG1hbGZvcm1lZAorIyAgIE9wZXJhdGlvbkhkciAoQ1ZFLTIwMjYt NzM1ODMpCitQYXRjaDE4OiBzYmxpbS1zZmNiLTEuNC45LXZhbGlkYXRlLWlwYy1tc2cucGF0Y2gK KyMgUGF0Y2gxOTogdXNlIG1rdGVtcCBmb3Igc2ZjYnJlcG9zIGluc3RhbmNlIG1pZ3JhdGlvbiB0 ZW1wIGZpbGUgdG8gcHJldmVudAorIyAgIFRPQ1RPVSBzeW1saW5rIGF0dGFjayB2aWEgL3RtcC9z ZmNiaW5zdC5tb2YgKENWRS0yMDI2LTczNTg0KQorUGF0Y2gxOTogc2JsaW0tc2ZjYi0xLjQuOS1z ZWN1cmUtdG1wZmlsZS5wYXRjaAorCisKIFByb3ZpZGVzOiBjaW0tc2VydmVyID0gMAogUmVxdWly ZXM6IGNpbS1zY2hlbWEKIFJlcXVpcmVzOiBzYmxpbS1zZmNDb21tb24KQEAgLTEwNSw2ICsxMTQs OCBAQCBQcm9ncmFtbWluZyBJbnRlcmZhY2UgKENNUEkpLgogJXBhdGNoIC1QMTUgLXAxIC1iIC5m aXgtZnRlbGwtb3ZlcmZsb3cKICVwYXRjaCAtUDE2IC1wMSAtYiAuZml4LWRvdWJsZS1mcmVlCiAl cGF0Y2ggLVAxNyAtcDEgLWIgLmZpeC1pbmNvcnJlY3QtZnJlZQorJXBhdGNoIC1QMTggLXAxIC1i IC52YWxpZGF0ZS1pcGMtbXNnCislcGF0Y2ggLVAxOSAtcDEgLWIgLnNlY3VyZS10bXBmaWxlCiAK ICMgQ3JlYXRlIGEgc3lzdXNlcnMuZCBjb25maWcgZmlsZQogY2F0ID5zYmxpbS1zZmNiLnN5c3Vz ZXJzLmNvbmYgPDxFT0YKQEAgLTE3Myw2ICsxODQsMTIgQEAgZmkKICV7X3RtcGZpbGVzZGlyfS9z YmxpbS1zZmNiLmNvbmYKIAogJWNoYW5nZWxvZworKiBNb24gU2VwIDA3IDIwMjYgVml0ZXpzbGF2 IENyaG9uZWsgPHZjcmhvbmVrQHJlZGhhdC5jb20+IC0gMS40LjktNDQKKy0gVmFsaWRhdGUgSVBD IG1lc3NhZ2UgaW4gcHJvdmlkZXItbWFuYWdlciB0byBwcmV2ZW50IE9PQiBhY2Nlc3MKKyAgdmlh IG1hbGZvcm1lZCBPcGVyYXRpb25IZHIgKENWRS0yMDI2LTczNTgzKQorLSBVc2UgbWt0ZW1wIGZv ciBzZmNicmVwb3MgaW5zdGFuY2UgbWlncmF0aW9uIHRlbXAgZmlsZSB0byBwcmV2ZW50CisgIFRP Q1RPVSBzeW1saW5rIGF0dGFjayB2aWEgL3RtcC9zZmNiaW5zdC5tb2YgKENWRS0yMDI2LTczNTg0 KQorCiAqIFdlZCBKdWwgMjIgMjAyNiBWaXRlenNsYXYgQ3Job25layA8dmNyaG9uZWtAcmVkaGF0 LmNvbT4gLSAxLjQuOS00MwogLSBGaXggbXVsdGlwbGUgaXNzdWVzIGRpc2NvdmVyZWQgYnkgc3Rh dGljIGFuYWx5c2lzCiAK