From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Vitezslav Crhonek To: git-commits@fedoraproject.org Subject: [rpms/sblim-sfcb] f43: Fix CVE-2026-73583 and CVE-2026-73584 Date: Mon, 07 Sep 2026 09:32:45 GMT Message-ID: <178877356541.1.15840727885911375660.rpms-sblim-sfcb-b46263e7f5e0@fedoraproject.org> List-ID: X-Git-Repo: rpms/sblim-sfcb X-Git-Branch: f43 X-Git-Rev: b46263e7f5e088896defbb6eded55139a8477b3d QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvc2JsaW0tc2ZjYgpC cmFuY2ggOiBmNDMKQ29tbWl0IDogYjQ2MjYzZTdmNWUwODg4OTZkZWZiYjZlZGVkNTUxMzlhODQ3 N2IzZApBdXRob3IgOiBWaXRlenNsYXYgQ3Job25layA8dmNyaG9uZWtAcmVkaGF0LmNvbT4KRGF0 ZSAgIDogMjAyNi0wOS0wN1QxMTozMjozMiswMjowMApTdGF0cyAgOiArMTI0Ly0xIGluIDMgZmls ZShzKQpVUkwgICAgOiBodHRwczovL3NyYy5mZWRvcmFwcm9qZWN0Lm9yZy9ycG1zL3NibGltLXNm Y2IvYy9iNDYyNjNlN2Y1ZTA4ODg5NmRlZmJiNmVkZWQ1NTEzOWE4NDc3YjNkP2JyYW5jaD1mNDMK CkxvZzoKRml4IENWRS0yMDI2LTczNTgzIGFuZCBDVkUtMjAyNi03MzU4NAoKLS0tCmRpZmYgLS1n aXQgYS9zYmxpbS1zZmNiLTEuNC45LXNlY3VyZS10bXBmaWxlLnBhdGNoIGIvc2JsaW0tc2ZjYi0x LjQuOS1zZWN1cmUtdG1wZmlsZS5wYXRjaApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAw MDAwLi40Y2ViODlkCi0tLSAvZGV2L251bGwKKysrIGIvc2JsaW0tc2ZjYi0xLjQuOS1zZWN1cmUt dG1wZmlsZS5wYXRjaApAQCAtMCwwICsxLDU1IEBACitkaWZmIC11cCBzYmxpbS1zZmNiLTEuNC45 L3NmY2JyZXBvcy5zaC5pbi5zZWN1cmUtdG1wZmlsZSBzYmxpbS1zZmNiLTEuNC45L3NmY2JyZXBv cy5zaC5pbgorLS0tIHNibGltLXNmY2ItMS40Ljkvc2ZjYnJlcG9zLnNoLmluLnNlY3VyZS10bXBm aWxlCTIwMjYtMDctMjkgMTE6NTg6NTQuMTcxMTI0Njk2ICswMjAwCisrKysgc2JsaW0tc2ZjYi0x LjQuOS9zZmNicmVwb3Muc2guaW4JMjAyNi0wNy0yOSAxMTo1NjoxNS4yNzIwMTg0ODAgKzAyMDAK K0BAIC0xNzAsNyArMTcwLDkgQEAgdGhlbgorICAgICBmaQorIAorICAgICAjIENvbXBpbGUgYWxs IHN0YWdlZCBuYW1lc3BhY2UgZGlyZWN0b3JpZXMKKy0gICAgaW5zdG1pZ2ZpbGU9L3RtcC9zZmNi aW5zdC5tb2YKKysgICAgaW5zdG1pZ2ZpbGU9IiQobWt0ZW1wICIke1RNUERJUjotL3RtcH0vc2Zj Ymluc3QuWFhYWFhYLm1vZiIpIiB8fCBleGl0IDEKKysgICAgY2htb2QgNjAwICIkaW5zdG1pZ2Zp bGUiIHx8IGV4aXQgMQorKyAgICB0cmFwICdybSAtZiAtLSAiJGluc3RtaWdmaWxlIicgRVhJVAor ICAgICBtb2ZzdWJkaXJzPWBmaW5kICRzdGFnaW5nZGlyL21vZnMvKiAtdHlwZSBkIC1wcmludCAy PiAvZGV2L251bGxgCisgICAgIGlmIGxzICRzdGFnaW5nZGlyL21vZnMvKi5tb2YgPiAvZGV2L251 bGwgMj4mMQorICAgICB0aGVuCitAQCAtMTg2LDIxICsxODgsMjEgQEAgdGhlbgorIAkgICAgcmVw b3NpdG9yeWRpcj0kcmVnaXN0cmF0aW9uZGlyL3JlcG9zaXRvcnkvCisgCSAgICBbIC1kICRyZXBv c2l0b3J5ZGlyIF0gfHwgbWtkaXIgLXAgJHJlcG9zaXRvcnlkaXIKKyAKKy0gICAgICAgICNncmFi IGFsbCBub24tbW9mIHN0YXRpYyBpbnN0YW5jZXMsIG91dHB1dCB0byAvdG1wL3NmY2JpbnN0Lm1v ZgorKyAgICAgICAgI2dyYWIgYWxsIG5vbi1tb2Ygc3RhdGljIGluc3RhbmNlcywgb3V0cHV0IHRv IHRlbXAgZmlsZQorICAgICAgICAgaWYgWyAteiAiJGlnbm9yZV9pbnN0YW5jZXMiIF0KKyAgICAg ICAgIHRoZW4KKy0gICAgICAgICAgICBybSAtZiAkaW5zdG1pZ2ZpbGUgMj4gL2Rldi9udWxsCisr ICAgICAgICAgICAgOiA+ICIkaW5zdG1pZ2ZpbGUiCisgICAgICAgICAgICAgI2dldCBjbGFzcyBu YW1lcyAoZnJvbSBmaWxlbmFtZXMpLCBpZ25vcmluZyBzcGVjaWZpYyBmaWxlcywgZnJvbSByZXBv cy5wcmV2aW91cywgYXMgaXQncyBhbHJlYWR5IGJlZW4gbW92ZWQKKyAgICAgICAgICAgICBpZiBb IC1lICRyZWdpc3RyYXRpb25kaXIvcmVwb3NpdG9yeS5wcmV2aW91cy8kbmFtZXNwYWNlLyBdCisg ICAgICAgICAgICAgdGhlbgorICAgICAgICAgICAgICAgICBzdGF0aWNfaW5zdF9maWxlcz1gbHMg JHJlZ2lzdHJhdGlvbmRpci9yZXBvc2l0b3J5LnByZXZpb3VzLyRuYW1lc3BhY2UvIC1JIGNsYXNz U2NoZW1hcyAtSSBxdWFsaWZpZXJzIC1JICouaWR4YCA+IC9kZXYvbnVsbCAyPiYxCisgICAgICAg ICAgICAgICAgIGZvciBpbnN0ZmlsZSBpbiAkc3RhdGljX2luc3RfZmlsZXMKKyAgICAgICAgICAg ICAgICAgZG8KKy0gICAgICAgICAgICAgICAgICAgIHNmY2JpbnN0Mm1vZiAtbiAkbmFtZXNwYWNl IC1jICRpbnN0ZmlsZSAtbyAkaW5zdG1pZ2ZpbGUgLXIgJHJlZ2lzdHJhdGlvbmRpci9yZXBvc2l0 b3J5LnByZXZpb3VzLyAtZyAke0RFU1RESVJ9QHN5c2NvbmZkaXJAL3NmY2Ivc2ZjYi5jZmcgMj4g L2Rldi9udWxsCisrICAgICAgICAgICAgICAgICAgICBzZmNiaW5zdDJtb2YgLW4gIiRuYW1lc3Bh Y2UiIC1jICIkaW5zdGZpbGUiIC1vICIkaW5zdG1pZ2ZpbGUiIC1yICIkcmVnaXN0cmF0aW9uZGly L3JlcG9zaXRvcnkucHJldmlvdXMvIiAtZyAiJHtERVNURElSfUBzeXNjb25mZGlyQC9zZmNiL3Nm Y2IuY2ZnIiAyPiAvZGV2L251bGwKKyAgICAgICAgICAgICAgICAgZG9uZQorICAgICAgICAgICAg IGZpCisgICAgICAgICBmaQorLSAgICAgICAgaWYgWyAtZSAkaW5zdG1pZ2ZpbGUgXQorKyAgICAg ICAgaWYgWyAtcyAiJGluc3RtaWdmaWxlIiBdCisgICAgICAgICB0aGVuCisgICAgICAgICAgICAg aW5zdG1pZ29wdD0iLW0gJGluc3RtaWdmaWxlIgorICAgICAgICAgZWxzZQorQEAgLTIwOCwxNCAr MjEwLDkgQEAgdGhlbgorICAgICAgICAgZmkKKyAJICAgIGlmICEgc2ZjYm1vZiAtZCAkcmVwb3Np dG9yeWRpciAtbiAkbmFtZXNwYWNlIC1vIGNsYXNzU2NoZW1hcyAtSSAkY2ltc2NoZW1hZGlyIC1p IENJTV9TY2hlbWEubW9mICRjcGZvcm1hdCAkYmFja2VuZG9wdCAkaW5zdG1pZ29wdCAkbW9mZGly LyoubW9mICRnbG9iYWxtb2ZzCisgCSAgICB0aGVuCistICAgICAgICAgICAgcm0gLWYgJGluc3Rt aWdmaWxlIDI+IC9kZXYvbnVsbAorIAkJICAgIGVjaG8gRmFpbGVkIGNvbXBpbGluZyB0aGUgTU9G IGZpbGVzLiA+JjIKKyAJCSAgICBleGl0IDEKKyAJICAgIGZpCistICAgICAgICBpZiBbIC1lICRp bnN0bWlnZmlsZSBdCistICAgICAgICB0aGVuCistICAgICAgICAgICAgcm0gLWYgJGluc3RtaWdm aWxlIDI+IC9kZXYvbnVsbAorLSAgICAgICAgZmkKKyAKKyAgICAgICAgIGlmIFsgIiRjb21wcmVz cyIgPSAiMSIgXQorICAgICAgICAgdGhlbgoKZGlmZiAtLWdpdCBhL3NibGltLXNmY2ItMS40Ljkt dmFsaWRhdGUtaXBjLW1zZy5wYXRjaCBiL3NibGltLXNmY2ItMS40LjktdmFsaWRhdGUtaXBjLW1z Zy5wYXRjaApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwLi42NmZjMjA2Ci0tLSAv ZGV2L251bGwKKysrIGIvc2JsaW0tc2ZjYi0xLjQuOS12YWxpZGF0ZS1pcGMtbXNnLnBhdGNoCkBA IC0wLDAgKzEsNTEgQEAKK2RpZmYgLXVwIHNibGltLXNmY2ItMS40LjkvcHJvdmlkZXJNZ3IuYy52 YWxpZGF0ZS1pcGMtbXNnIHNibGltLXNmY2ItMS40LjkvcHJvdmlkZXJNZ3IuYworLS0tIHNibGlt LXNmY2ItMS40LjkvcHJvdmlkZXJNZ3IuYy52YWxpZGF0ZS1pcGMtbXNnCTIwMjYtMDctMjkgMDk6 NDE6MzYuOTczMDM4MTkxICswMjAwCisrKysgc2JsaW0tc2ZjYi0xLjQuOS9wcm92aWRlck1nci5j CTIwMjYtMDctMjkgMDk6NDc6MDIuMTU3MjQ3MTkyICswMjAwCitAQCAtMjQsNiArMjQsNyBAQAor ICNpbmNsdWRlIDx0aW1lLmg+CisgI2luY2x1ZGUgPHB0aHJlYWQuaD4KKyAjaW5jbHVkZSA8c3lz L3Jlc291cmNlLmg+CisrI2luY2x1ZGUgPHN0ZGludC5oPgorIAorICNpbmNsdWRlICJjbXBpL2Nt cGlkdC5oIgorICNpbmNsdWRlICJwcm92aWRlclJlZ2lzdGVyLmgiCitAQCAtMTAwMyw2ICsxMDA0 LDE4IEBAIHN0YXRpYyBNZ3JIYW5kbGVyIG1IYW5kbGVyc1tdID0geworICAge25vdFN1cHBvcnRl ZH0gICAgICAgICAgICAgICAgLy8gT1BTX0VudW1lcmF0aW9uQ291bnQgNDMKKyB9OworIAorK3N0 YXRpYyBpbnQKKytzZWdJbk1zZyh1bnNpZ25lZCBsb25nIHJsLCBNc2dTZWdtZW50IHNlZykKKyt7 CisrICB1aW50cHRyX3Qgb2ZmID0gKHVpbnRwdHJfdCkgc2VnLmRhdGE7CisrICBzaXplX3QgbGVu ID0gKHNpemVfdCkgc2VnLmxlbmd0aDsKKysgIGlmIChvZmYgPiBybCkKKysgICAgcmV0dXJuIDA7 CisrICBpZiAobGVuID4gKHNpemVfdCkocmwgLSBvZmYpKQorKyAgICByZXR1cm4gMDsKKysgIHJl dHVybiAxOworK30KKysKKyB2b2lkCisgcHJvY2Vzc1Byb3ZpZGVyTWdyUmVxdWVzdHMoKQorIHsK K0BAIC0xMDY4LDYgKzEwODEsMjAgQEAgcHJvY2Vzc1Byb3ZpZGVyTWdyUmVxdWVzdHMoKQorICAg ICAgICAgIHNwUmVjdlJlcSgmc2ZjYlNvY2tldHMucmVjZWl2ZSwgJnJlcXVlc3RvciwgKHZvaWQg KiopICZyZXEsICZybCwKKyAgICAgICAgICAgICAgICAgICAgJm1xZykpID09IDApIHsKKyAgICAg ICBpZiAobXFnLnJkb25lKSB7CisrICAgICAgICBpZiAocmwgPCBzaXplb2YoT3BlcmF0aW9uSGRy KSB8fAorKyAgICAgICAgICAgICFzZWdJbk1zZyhybCwgcmVxLT5uYW1lU3BhY2UpIHx8CisrICAg ICAgICAgICAgKHJlcS0+Y2xhc3NOYW1lLmxlbmd0aCAmJiAhc2VnSW5Nc2cocmwsIHJlcS0+Y2xh c3NOYW1lKSkgfHwKKysgICAgICAgICAgICByZXEtPnR5cGUgPj0gKHNpemVvZihtSGFuZGxlcnMp IC8gc2l6ZW9mKG1IYW5kbGVyc1swXSkpIHx8CisrICAgICAgICAgICAgbUhhbmRsZXJzW3JlcS0+ dHlwZV0uaGFuZGxlciA9PSBOVUxMKSB7CisrICAgICAgICAgIG1sb2dmKE1fRVJST1IsIE1fU0hP VywKKysgICAgICAgICAgICAgICAgIi0tLSBNZ3IgcmVxdWVzdCByZWplY3RlZDogaW52YWxpZCBt ZXNzYWdlICIKKysgICAgICAgICAgICAgICAgIihsZW49JWx1KVxuIiwgcmwpOworKyAgICAgICAg ICBmcmVlKHJlcSk7CisrICAgICAgICAgIGlmICgob3B0aW9ucyAmIE9IX0ludGVybmFsKSA9PSAw KQorKyAgICAgICAgICAgIGNsb3NlKHJlcXVlc3Rvcik7CisrICAgICAgICAgIGNvbnRpbnVlOwor KyAgICAgICAgfQorKworICAgICAgICAgcmVxLT5uYW1lU3BhY2UuZGF0YSA9CisgICAgICAgICAg ICAgKHZvaWQgKikgKChsb25nKSByZXEtPm5hbWVTcGFjZS5kYXRhICsgKGNoYXIgKikgcmVxKTsK KyAgICAgICAgIGlmIChyZXEtPmNsYXNzTmFtZS5sZW5ndGgpCgpkaWZmIC0tZ2l0IGEvc2JsaW0t c2ZjYi5zcGVjIGIvc2JsaW0tc2ZjYi5zcGVjCmluZGV4IGNkMDg0ZGUuLjEzMDVlYzQgMTAwNjQ0 Ci0tLSBhL3NibGltLXNmY2Iuc3BlYworKysgYi9zYmxpbS1zZmNiLnNwZWMKQEAgLTgsNyArOCw3 IEBAIE5hbWU6IHNibGltLXNmY2IKIFN1bW1hcnk6IFNtYWxsIEZvb3RwcmludCBDSU0gQnJva2Vy CiBVUkw6IGh0dHA6Ly9zYmxpbS53aWtpLnNvdXJjZWZvcmdlLm5ldC8KIFZlcnNpb246IDEuNC45 Ci1SZWxlYXNlOiAzNyV7P2Rpc3R9CitSZWxlYXNlOiAzOCV7P2Rpc3R9CiBMaWNlbnNlOiBFUEwt MS4wCiBTb3VyY2UwOiBodHRwOi8vZG93bmxvYWRzLnNvdXJjZWZvcmdlLm5ldC9zYmxpbS8le25h bWV9LSV7dmVyc2lvbn0udGFyLmJ6MgogU291cmNlMTogc2ZjYi5zZXJ2aWNlCkBAIC00NCw2ICs0 NCwxNSBAQCBQYXRjaDEwOiBzYmxpbS1zZmNiLTEuNC45LWRvY2Rpci1saWNlbnNlLnBhdGNoCiAj IFBhdGNoMTE6IGFkZHMgY29uZmlndXJhdGlvbiBvcHRpb25zIHRvIHNwZWNpZnkgZmFsbGJhY2sg U1NMIGNlcnQva2V5IHBhaXIKICMgICBhbmQgZGlzYWJsZXMgZGVmYXVsdCBFQ0RIIGVwaGVtZXJh bCBrZXkgZ2VuZXJhdGlvbgogUGF0Y2gxMTogc2JsaW0tc2ZjYi0xLjQuOS1wb3N0LXF1YW50dW0u cGF0Y2gKKyMgUGF0Y2gxMjogdmFsaWRhdGUgSVBDIG1lc3NhZ2UgZmllbGRzIGluIHByb2Nlc3NQ cm92aWRlck1nclJlcXVlc3RzKCkgYmVmb3JlCisjICAgcG9pbnRlciBmaXh1cCBhbmQgaGFuZGxl ciBkaXNwYXRjaCB0byBwcmV2ZW50IE9PQiBhY2Nlc3MgdmlhIG1hbGZvcm1lZAorIyAgIE9wZXJh dGlvbkhkciAoQ1ZFLTIwMjYtNzM1ODMpCitQYXRjaDEyOiBzYmxpbS1zZmNiLTEuNC45LXZhbGlk YXRlLWlwYy1tc2cucGF0Y2gKKyMgUGF0Y2gxMzogdXNlIG1rdGVtcCBmb3Igc2ZjYnJlcG9zIGlu c3RhbmNlIG1pZ3JhdGlvbiB0ZW1wIGZpbGUgdG8gcHJldmVudAorIyAgIFRPQ1RPVSBzeW1saW5r IGF0dGFjayB2aWEgL3RtcC9zZmNiaW5zdC5tb2YgKENWRS0yMDI2LTczNTg0KQorUGF0Y2gxMzog c2JsaW0tc2ZjYi0xLjQuOS1zZWN1cmUtdG1wZmlsZS5wYXRjaAorCisKIFByb3ZpZGVzOiBjaW0t c2VydmVyID0gMAogUmVxdWlyZXM6IGNpbS1zY2hlbWEKIFJlcXVpcmVzOiBzYmxpbS1zZmNDb21t b24KQEAgLTg2LDYgKzk1LDggQEAgUHJvZ3JhbW1pbmcgSW50ZXJmYWNlIChDTVBJKS4KICVwYXRj aCAtUDkgLXAxIC1iIC5maXgtcHBjLW9wdGltaXphdGlvbi1sZXZlbAogJXBhdGNoIC1QMTAgLXAx IC1iIC5kb2NkaXItbGljZW5zZQogJXBhdGNoIC1QMTEgLXAxIC1iIC5wb3N0LXF1YW50dW0KKyVw YXRjaCAtUDEyIC1wMSAtYiAudmFsaWRhdGUtaXBjLW1zZworJXBhdGNoIC1QMTMgLXAxIC1iIC5z ZWN1cmUtdG1wZmlsZQogCiAjIENyZWF0ZSBhIHN5c3VzZXJzLmQgY29uZmlnIGZpbGUKIGNhdCA+ c2JsaW0tc2ZjYi5zeXN1c2Vycy5jb25mIDw8RU9GCkBAIC0xNDUsNiArMTU2LDEyIEBAIGluc3Rh bGwgLW0wNjQ0IC1EIHNibGltLXNmY2Iuc3lzdXNlcnMuY29uZiAle2J1aWxkcm9vdH0le19zeXN1 c2Vyc2Rpcn0vc2JsaW0tc2ZjCiAle19zeXN1c2Vyc2Rpcn0vc2JsaW0tc2ZjYi5jb25mCiAKICVj aGFuZ2Vsb2cKKyogTW9uIFNlcCAwNyAyMDI2IFZpdGV6c2xhdiBDcmhvbmVrIDx2Y3Job25la0By ZWRoYXQuY29tPiAtIDEuNC45LTM4CistIFZhbGlkYXRlIElQQyBtZXNzYWdlIGluIHByb3ZpZGVy LW1hbmFnZXIgdG8gcHJldmVudCBPT0IgYWNjZXNzCisgIHZpYSBtYWxmb3JtZWQgT3BlcmF0aW9u SGRyIChDVkUtMjAyNi03MzU4MykKKy0gVXNlIG1rdGVtcCBmb3Igc2ZjYnJlcG9zIGluc3RhbmNl IG1pZ3JhdGlvbiB0ZW1wIGZpbGUgdG8gcHJldmVudAorICBUT0NUT1Ugc3ltbGluayBhdHRhY2sg dmlhIC90bXAvc2ZjYmluc3QubW9mIChDVkUtMjAyNi03MzU4NCkKKwogKiBGcmkgSnVsIDI1IDIw MjUgRmVkb3JhIFJlbGVhc2UgRW5naW5lZXJpbmcgPHJlbGVuZ0BmZWRvcmFwcm9qZWN0Lm9yZz4g LSAxLjQuOS0zNwogLSBSZWJ1aWx0IGZvciBodHRwczovL2ZlZG9yYXByb2plY3Qub3JnL3dpa2kv RmVkb3JhXzQzX01hc3NfUmVidWlsZAogCg==