From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Jan Macku To: git-commits@fedoraproject.org Subject: [rpms/curl] f44: Resolves: CVE-2026-11564 - Native CA trust persist Date: Tue, 08 Sep 2026 13:41:14 GMT Message-ID: <178887487401.1.9281551909882825145.rpms-curl-fbb3044b76e9@fedoraproject.org> List-ID: X-Git-Repo: rpms/curl X-Git-Branch: f44 X-Git-Rev: fbb3044b76e9dc5b5950db2353eb510d59ed0ceb QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvY3VybApCcmFuY2gg OiBmNDQKQ29tbWl0IDogZmJiMzA0NGI3NmU5ZGM1YjU5NTBkYjIzNTNlYjUxMGQ1OWVkMGNlYgpB dXRob3IgOiBKYW4gTWFja3UgPGphbWFja3VAcmVkaGF0LmNvbT4KRGF0ZSAgIDogMjAyNi0wOC0y N1QxNTo1NDoyNiswMjowMApTdGF0cyAgOiArMTI4Ly0wIGluIDIgZmlsZShzKQpVUkwgICAgOiBo dHRwczovL3NyYy5mZWRvcmFwcm9qZWN0Lm9yZy9ycG1zL2N1cmwvYy9mYmIzMDQ0Yjc2ZTlkYzVi NTk1MGRiMjM1M2ViNTEwZDU5ZWQwY2ViP2JyYW5jaD1mNDQKCkxvZzoKUmVzb2x2ZXM6IENWRS0y MDI2LTExNTY0IC0gTmF0aXZlIENBIHRydXN0IHBlcnNpc3QKCi0tLQpkaWZmIC0tZ2l0IGEvMDAy My1jdXJsLTguMTguMC1DVkUtMjAyNi0xMTU2NC5wYXRjaCBiLzAwMjMtY3VybC04LjE4LjAtQ1ZF LTIwMjYtMTE1NjQucGF0Y2gKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXggMDAwMDAwMC4uMjY0 MzNjYwotLS0gL2Rldi9udWxsCisrKyBiLzAwMjMtY3VybC04LjE4LjAtQ1ZFLTIwMjYtMTE1NjQu cGF0Y2gKQEAgLTAsMCArMSwxMjQgQEAKK0Zyb20gOTAwYmJmMjFmMWJjMTNiMTIzZmQ2YmQwYzFm NWM0ZDMxMTk3MzMwZCBNb24gU2VwIDE3IDAwOjAwOjAwIDIwMDEKK0Zyb206IFN0ZWZhbiBFaXNz aW5nIDxzdGVmYW5AZWlzc2luZy5vcmc+CitEYXRlOiBNb24sIDggSnVuIDIwMjYgMTA6MTE6MzAg KzAyMDAKK1N1YmplY3Q6IFtQQVRDSF0gc3NsIG5hdGl2ZV9jYV9zdG9yZTogYWx3YXlzIHJlaW5p dAorCitBZGQgYml0IGBuYXRpdmVfY2Ffc3RvcmVfb3B0YCB0byBrZWVwIHRoZSBzZXR0aW5nIG9m CitDVVJMT1BUXyhQUk9YWV8pU1NMX09QVElPTlMgYW5kIHVzZSB0aGF0IHRvIGNhbGN1bGF0ZSBl dmVyeSBlYXN5Cit0cmFuc2ZlciBpZiBhIG5hdGl2ZSBDQSBzdG9yZSBzaGFsbCBiZSB1c2VkIG9y IG5vdC4KKworVGhpcyBhdm9pZHMgYG5hdGl2ZV9jYV9zdG9yZWAgZ2V0dGluZyBzdHVjayBvbiBU UlVFIGFmdGVyIGJlaW5nIHNldAorb25jZS4KKworQ2xvc2VzICMyMTkwMgorCisoY2hlcnJ5IHBp Y2tlZCBmcm9tIGNvbW1pdCBkNjliZmFkM2ZhM2RhZjVlNzIzMzFmNjg3MDY2NzYwNzgyOGQ1ODkx KQorLS0tCisgbGliL2RvaC5jICAgICAgIHwgIDMgKystCisgbGliL3NldG9wdC5jICAgIHwgMjAg KystLS0tLS0tLS0tLS0tLS0tLS0KKyBsaWIvdnRscy92dGxzLmMgfCAxOSArKysrKysrKysrKysr KysrKysrCisgMyBmaWxlcyBjaGFuZ2VkLCAyMyBpbnNlcnRpb25zKCspLCAxOSBkZWxldGlvbnMo LSkKKworZGlmZiAtLWdpdCBhL2xpYi9kb2guYyBiL2xpYi9kb2guYworaW5kZXggOTA1MmZhYjI2 Yi4uMTM0OTdlMDI1MyAxMDA2NDQKKy0tLSBhL2xpYi9kb2guYworKysrIGIvbGliL2RvaC5jCitA QCAtNDAwLDcgKzQwMCw4IEBAIHN0YXRpYyBDVVJMY29kZSBkb2hfcHJvYmVfcnVuKHN0cnVjdCBD dXJsX2Vhc3kgKmRhdGEsCisgICB9CisgCisgICAodm9pZCljdXJsX2Vhc3lfc2V0b3B0KGRvaCwg Q1VSTE9QVF9TU0xfT1BUSU9OUywKKy0gICAgICAgICAgICAgICAgICAgICAgICAgKGxvbmcpZGF0 YS0+c2V0LnNzbC5wcmltYXJ5LnNzbF9vcHRpb25zKTsKKysgICAgICAgICAgICAgICAgICAgICAg ICAgKChsb25nKWRhdGEtPnNldC5zc2wucHJpbWFyeS5zc2xfb3B0aW9ucyAmCisrICAgICAgICAg ICAgICAgICAgICAgICAgICAgfkNVUkxTU0xPUFRfQVVUT19DTElFTlRfQ0VSVCkpOworIAorICAg ZG9oLT5zdGF0ZS5pbnRlcm5hbCA9IFRSVUU7CisgICBkb2gtPm1hc3Rlcl9taWQgPSBkYXRhLT5t aWQ7IC8qIG1hc3RlciB0cmFuc2ZlciBvZiB0aGlzIG9uZSAqLworZGlmZiAtLWdpdCBhL2xpYi9z ZXRvcHQuYyBiL2xpYi9zZXRvcHQuYworaW5kZXggMzU1YTU5YzBhMS4uMDg5MzkwMDMwYyAxMDA2 NDQKKy0tLSBhL2xpYi9zZXRvcHQuYworKysrIGIvbGliL3NldG9wdC5jCitAQCAtNDE0LDIyICs0 MTQsNiBAQCBzdGF0aWMgQ1VSTGNvZGUgc2V0b3B0X1JUU1BfUkVRVUVTVChzdHJ1Y3QgQ3VybF9l YXN5ICpkYXRhLCBsb25nIGFyZykKKyB9CisgI2VuZGlmIC8qICFDVVJMX0RJU0FCTEVfUlRTUCAq LworIAorLSNpZmRlZiBVU0VfU1NMCistc3RhdGljIHZvaWQgc2V0X3NzbF9vcHRpb25zKHN0cnVj dCBzc2xfY29uZmlnX2RhdGEgKnNzbCwKKy0gICAgICAgICAgICAgICAgICAgICAgICAgICAgc3Ry dWN0IHNzbF9wcmltYXJ5X2NvbmZpZyAqY29uZmlnLAorLSAgICAgICAgICAgICAgICAgICAgICAg ICAgICBsb25nIGFyZykKKy17CistICBjb25maWctPnNzbF9vcHRpb25zID0gKHVuc2lnbmVkIGNo YXIpKGFyZyAmIDB4ZmYpOworLSAgc3NsLT5lbmFibGVfYmVhc3QgPSAhIShhcmcgJiBDVVJMU1NM T1BUX0FMTE9XX0JFQVNUKTsKKy0gIHNzbC0+bm9fcmV2b2tlID0gISEoYXJnICYgQ1VSTFNTTE9Q VF9OT19SRVZPS0UpOworLSAgc3NsLT5ub19wYXJ0aWFsY2hhaW4gPSAhIShhcmcgJiBDVVJMU1NM T1BUX05PX1BBUlRJQUxDSEFJTik7CistICBzc2wtPnJldm9rZV9iZXN0X2VmZm9ydCA9ICEhKGFy ZyAmIENVUkxTU0xPUFRfUkVWT0tFX0JFU1RfRUZGT1JUKTsKKy0gIHNzbC0+bmF0aXZlX2NhX3N0 b3JlID0gISEoYXJnICYgQ1VSTFNTTE9QVF9OQVRJVkVfQ0EpOworLSAgc3NsLT5hdXRvX2NsaWVu dF9jZXJ0ID0gISEoYXJnICYgQ1VSTFNTTE9QVF9BVVRPX0NMSUVOVF9DRVJUKTsKKy0gIHNzbC0+ ZWFybHlkYXRhID0gISEoYXJnICYgQ1VSTFNTTE9QVF9FQVJMWURBVEEpOworLX0KKy0jZW5kaWYK Ky0KKyBzdGF0aWMgQ1VSTGNvZGUgc2V0b3B0X2Jvb2woc3RydWN0IEN1cmxfZWFzeSAqZGF0YSwg Q1VSTG9wdGlvbiBvcHRpb24sCisgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGxvbmcgYXJn LCBib29sICpzZXQpCisgeworQEAgLTExMjcsMTIgKzExMTEsMTIgQEAgc3RhdGljIENVUkxjb2Rl IHNldG9wdF9sb25nKHN0cnVjdCBDdXJsX2Vhc3kgKmRhdGEsIENVUkxvcHRpb24gb3B0aW9uLAor ICAgICBzLT51c2Vfc3NsID0gKHVuc2lnbmVkIGNoYXIpYXJnOworICAgICBicmVhazsKKyAgIGNh c2UgQ1VSTE9QVF9TU0xfT1BUSU9OUzoKKy0gICAgc2V0X3NzbF9vcHRpb25zKCZzLT5zc2wsICZz LT5zc2wucHJpbWFyeSwgYXJnKTsKKysgICAgcy0+c3NsLnByaW1hcnkuc3NsX29wdGlvbnMgPSAo dW5zaWduZWQgY2hhcikoYXJnICYgMHhmZik7CisgICAgIGJyZWFrOworIAorICNpZm5kZWYgQ1VS TF9ESVNBQkxFX1BST1hZCisgICBjYXNlIENVUkxPUFRfUFJPWFlfU1NMX09QVElPTlM6CistICAg IHNldF9zc2xfb3B0aW9ucygmcy0+cHJveHlfc3NsLCAmcy0+cHJveHlfc3NsLnByaW1hcnksIGFy Zyk7CisrICAgIHMtPnByb3h5X3NzbC5wcmltYXJ5LnNzbF9vcHRpb25zID0gKHVuc2lnbmVkIGNo YXIpKGFyZyAmIDB4ZmYpOworICAgICBicmVhazsKKyAjZW5kaWYKKyAKK2RpZmYgLS1naXQgYS9s aWIvdnRscy92dGxzLmMgYi9saWIvdnRscy92dGxzLmMKK2luZGV4IGJlMGMwMzJiZmYuLjg1MWJj MzQxYTkgMTAwNjQ0CistLS0gYS9saWIvdnRscy92dGxzLmMKKysrKyBiL2xpYi92dGxzL3Z0bHMu YworQEAgLTI4Niw2ICsyODYsMjEgQEAgc3RhdGljIHZvaWQgZnJlZV9wcmltYXJ5X3NzbF9jb25m aWcoc3RydWN0IHNzbF9wcmltYXJ5X2NvbmZpZyAqc3NsYykKKyAjZW5kaWYKKyB9CisgCisrc3Rh dGljIHZvaWQgc3NsX2Vhc3lfY29uZmlnX2NvbXBsX29wdGlvbnMoc3RydWN0IHNzbF9jb25maWdf ZGF0YSAqc3NsYykKKyt7CisrICB1bnNpZ25lZCBjaGFyIG9wdGlvbnMgPSBzc2xjLT5wcmltYXJ5 LnNzbF9vcHRpb25zOworKyAgLyogSWYgc2V0IHZpYSBDVVJMT1BUXyhQUk9YWV8pU1NMX09QVElP TlMsIHdlIGRlZmluaXRlbHkgdXNlIGl0LgorKyAgICogSWYgbm90LCB3ZSBzd2l0Y2ggaXQgb24g Zm9yIHN1cHBvcnRlZCBiYWNrZW5kcyBpZiBubyBjdXN0b20KKysgICAqIGNhIHNldHRpbmdzIGV4 aXN0LiAqLworKyAgc3NsYy0+bmF0aXZlX2NhX3N0b3JlID0gISEob3B0aW9ucyAmIENVUkxTU0xP UFRfTkFUSVZFX0NBKTsKKysgIHNzbGMtPmVuYWJsZV9iZWFzdCA9ICEhKG9wdGlvbnMgJiBDVVJM U1NMT1BUX0FMTE9XX0JFQVNUKTsKKysgIHNzbGMtPm5vX3BhcnRpYWxjaGFpbiA9ICEhKG9wdGlv bnMgJiBDVVJMU1NMT1BUX05PX1BBUlRJQUxDSEFJTik7CisrICBzc2xjLT5ub19yZXZva2UgPSAh IShvcHRpb25zICYgQ1VSTFNTTE9QVF9OT19SRVZPS0UpOworKyAgc3NsYy0+cmV2b2tlX2Jlc3Rf ZWZmb3J0ID0gISEob3B0aW9ucyAmIENVUkxTU0xPUFRfUkVWT0tFX0JFU1RfRUZGT1JUKTsKKysg IHNzbGMtPmF1dG9fY2xpZW50X2NlcnQgPSAhIShvcHRpb25zICYgQ1VSTFNTTE9QVF9BVVRPX0NM SUVOVF9DRVJUKTsKKysgIHNzbGMtPmVhcmx5ZGF0YSA9ICEhKG9wdGlvbnMgJiBDVVJMU1NMT1BU X0VBUkxZREFUQSk7CisrfQorKworIENVUkxjb2RlIEN1cmxfc3NsX2Vhc3lfY29uZmlnX2NvbXBs ZXRlKHN0cnVjdCBDdXJsX2Vhc3kgKmRhdGEpCisgeworICAgc3RydWN0IHNzbF9jb25maWdfZGF0 YSAqc3NsYyA9ICZkYXRhLT5zZXQuc3NsOworQEAgLTI5NCw2ICszMDksOCBAQCBDVVJMY29kZSBD dXJsX3NzbF9lYXN5X2NvbmZpZ19jb21wbGV0ZShzdHJ1Y3QgQ3VybF9lYXN5ICpkYXRhKQorICAg Q1VSTGNvZGUgcmVzdWx0OworICNlbmRpZgorIAorKyAgc3NsX2Vhc3lfY29uZmlnX2NvbXBsX29w dGlvbnMoc3NsYyk7CisrCisgICBpZihDdXJsX3NzbF9iYWNrZW5kKCkgIT0gQ1VSTFNTTEJBQ0tF TkRfU0NIQU5ORUwpIHsKKyAjaWZkZWYgVVNFX0FQUExFX1NFQ1RSVVNUCisgICAgIGlmKCFzc2xj LT5jdXN0b21fY2FwYXRoICYmICFzc2xjLT5jdXN0b21fY2FmaWxlICYmICFzc2xjLT5jdXN0b21f Y2FibG9iKQorQEAgLTM0MCw2ICszNTcsOCBAQCBDVVJMY29kZSBDdXJsX3NzbF9lYXN5X2NvbmZp Z19jb21wbGV0ZShzdHJ1Y3QgQ3VybF9lYXN5ICpkYXRhKQorIAorICNpZm5kZWYgQ1VSTF9ESVNB QkxFX1BST1hZCisgICBzc2xjID0gJmRhdGEtPnNldC5wcm94eV9zc2w7CisrICBzc2xfZWFzeV9j b25maWdfY29tcGxfb3B0aW9ucyhzc2xjKTsKKysKKyAgIGlmKEN1cmxfc3NsX2JhY2tlbmQoKSAh PSBDVVJMU1NMQkFDS0VORF9TQ0hBTk5FTCkgeworICNpZmRlZiBVU0VfQVBQTEVfU0VDVFJVU1QK KyAgICAgaWYoIXNzbGMtPmN1c3RvbV9jYXBhdGggJiYgIXNzbGMtPmN1c3RvbV9jYWZpbGUgJiYg IXNzbGMtPmN1c3RvbV9jYWJsb2IpCistLSAKKzIuNTUuMAorCgpkaWZmIC0tZ2l0IGEvY3VybC5z cGVjIGIvY3VybC5zcGVjCmluZGV4IDE5NmY1MDUuLmZhNTgzNzIgMTAwNjQ0Ci0tLSBhL2N1cmwu c3BlYworKysgYi9jdXJsLnNwZWMKQEAgLTkwLDYgKzkwLDkgQEAgUGF0Y2gwMjE6IDAwMjEtY3Vy bC04LjE4LjAtQ1ZFLTIwMjYtOTA4MC5wYXRjaAogIyBGaXggSFRUUC8yIHN0cmVhbS1kZXBlbmRl bmN5IHRyZWUgVUFGIChDVkUtMjAyNi0xMDUzNikKIFBhdGNoMDIyOiAwMDIyLWN1cmwtOC4xOC4w LUNWRS0yMDI2LTEwNTM2LnBhdGNoCiAKKyMgRml4IE5hdGl2ZSBDQSB0cnVzdCBwZXJzaXN0IChD VkUtMjAyNi0xMTU2NCkKK1BhdGNoMDIzOiAwMDIzLWN1cmwtOC4xOC4wLUNWRS0yMDI2LTExNTY0 LnBhdGNoCisKICMgcGF0Y2ggbWFraW5nIGxpYmN1cmwgbXVsdGlsaWIgcmVhZHkKIFBhdGNoMTAx OiAwMTAxLWN1cmwtNy4zMi4wLW11bHRpbGliLnBhdGNoCiAKQEAgLTUxOCw2ICs1MjEsNyBAQCBy bSAtZiAke1JQTV9CVUlMRF9ST09UfSV7X21hbmRpcn0vbWFuMS93Y3VybC4xKgogJWNoYW5nZWxv ZwogKiBUdWUgU2VwIDA4IDIwMjYgSmFuIE1hY2t1IDxqYW1hY2t1QHJlZGhhdC5jb20+IC0gOC4x OC4wLTEwCiAtIEZpeCBIVFRQLzIgc3RyZWFtLWRlcGVuZGVuY3kgdHJlZSBVQUYgKENWRS0yMDI2 LTEwNTM2KQorLSBGaXggTmF0aXZlIENBIHRydXN0IHBlcnNpc3QgKENWRS0yMDI2LTExNTY0KQog CiAqIE1vbiBBdWcgMjQgMjAyNiBKYW4gTWFja3UgPGphbWFja3VAcmVkaGF0LmNvbT4gLSA4LjE4 LjAtOQogLSBGaXggUVVJQyB6ZXJvLWxlbmd0aCBVRFAgZGF0YWdyYW1zIGJ1c3ktbG9vcCAoQ1ZF LTIwMjYtMTEzNTIpCg==