From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Benjamin A. Beasley To: git-commits@fedoraproject.org Subject: [rpms/stb] rawhide: Patch stb_sprintf: security fix for CVE-2026-79516 Date: Thu, 10 Sep 2026 09:11:52 GMT Message-ID: <178903151209.1.14363431179718546284.rpms-stb-d6aead5f22e6@fedoraproject.org> List-ID: X-Git-Repo: rpms/stb X-Git-Branch: rawhide X-Git-Rev: d6aead5f22e6f229075e9ba720c28601b9b28408 ICAgICAgICAgICAgQSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KCiAgICAgICAgICAgIFJl cG8gICA6IHJwbXMvc3RiCiAgICAgICAgICAgIEJyYW5jaCA6IHJhd2hpZGUKICAgICAgICAgICAg Q29tbWl0IDogZDZhZWFkNWYyMmU2ZjIyOTA3NWU5YmE3MjBjMjg2MDFiOWIyODQwOAogICAgICAg ICAgICBBdXRob3IgOiBCZW5qYW1pbiBBLiBCZWFzbGV5IDxjb2RlQG11c2ljaW5teWJyYWluLm5l dD4KICAgICAgICAgICAgRGF0ZSAgIDogMjAyNi0wOS0xMFQxMDowODo0MiswMTowMAogICAgICAg ICAgICBTdGF0cyAgOiArNTEvLTAgaW4gMiBmaWxlKHMpCiAgICAgICAgICAgIFVSTCAgICA6IGh0 dHBzOi8vc3JjLmZlZG9yYXByb2plY3Qub3JnL3JwbXMvc3RiL2MvZDZhZWFkNWYyMmU2ZjIyOTA3 NWU5YmE3MjBjMjg2MDFiOWIyODQwOD9icmFuY2g9cmF3aGlkZQoKICAgICAgICAgICAgTG9nOgog ICAgICAgICAgICBQYXRjaCBzdGJfc3ByaW50Zjogc2VjdXJpdHkgZml4IGZvciBDVkUtMjAyNi03 OTUxNgoKLSBGaXhlcyBSSEJaIzI1MzEyOTE7IEZpeGVzIFJIQlojMjUzMTI5MAoKLS0tCmRpZmYg LS1naXQgYS8xOTk1LnBhdGNoIGIvMTk5NS5wYXRjaApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRl eCAwMDAwMDAwLi4xZTI3OWNkCi0tLSAvZGV2L251bGwKKysrIGIvMTk5NS5wYXRjaApAQCAtMCww ICsxLDM5IEBACitGcm9tIDFmZDdmZjlmZGI5N2YzMDEyNjQyMjYzMDJhNGQ3MGIxMDc0YTZiNjYg TW9uIFNlcCAxNyAwMDowMDowMCAyMDAxCitGcm9tOiBCcmFuZG9uIEJhcnJhbnRlIDxhZXRoZXJh aUBhZXRoZXJzeXN0ZW1zLm5ldD4KK0RhdGU6IFN1biwgNiBTZXAgMjAyNiAxOTowNDozOSAtMDQw MAorU3ViamVjdDogW1BBVENIXSBzdGJfc3ByaW50ZjogZG9uJ3Qgd3JpdGUgYnVmWy0xXSBvbiBz bnByaW50ZihidWYsIDAsIC4uLikKKyAoZml4ZXMgIzE5NjMpCisKK1RoZSB0b3AgZ2F0ZSBpbiBT VEJfU1BSSU5URl9ERUNPUkFURSh2c25wcmludGYpIG9ubHkgZW50ZXJlZCB0aGUgY291bnQtb25s eSBwYXRoIHdoZW4gYm90aCBjb3VudCA9PSAwIEFORCBidWYgd2FzIE5VTEwuIEEgY2FsbGVyIHBh c3NpbmcgYSB2YWxpZCBidWZmZXIgd2l0aCBjb3VudCA9PSAwICh0aGUgc2hhcGUgY2FsbGVycyB1 c2UgdG8gYXNrICdob3cgYmlnIHdvdWxkIHRoaXMgYmU/JykgZmVsbCB0aHJvdWdoIHRvIHRoZSBl bHNlIGJyYW5jaCwgY29tcHV0ZWQgbCA9IChpbnQpKGMuYnVmIC0gYnVmKSA9IDAsIGhpdCB0aGUg bCA+PSBjb3VudCBjbGFtcCwgZHJvcHBlZCB0byBsID0gY291bnQgLSAxID0gLTEsIGFuZCBleGVj dXRlZCBidWZbLTFdID0gMCAtLSBvbmUgYnl0ZSBvdXQtb2YtYm91bmRzIGJlZm9yZSB0aGUgY2Fs bGVyJ3MgYnVmZmVyLgorCitUaGUgQyBzdGFuZGFyZCBpcyBleHBsaWNpdCB0aGF0IHNucHJpbnRm KGJ1ZiwgMCwgLi4uKSBtdXN0IG5vdCB3cml0ZS4gZ2xpYmMsIG11c2wgYW5kIHRoZSBCU0Qgc25w cmludGYgYWxsIHNraXAgdGhlIG51bGwgdGVybWluYXRvciB3aGVuIGNvdW50ID09IDAuCisKK0V4 dGVuZCB0aGUgZ2F0ZSB0byBjb3VudCA8PSAwIHNvIHRoZSBjb3VudC1vbmx5IHBhdGggaGFuZGxl cyBib3RoIHRoZSBudWxsLWJ1ZiBhbmQgdGhlIG5vbi1udWxsLWJ1ZiBjYXNlcyB0aGUgc2FtZSB3 YXkuIFRoZSBjb3VudC1vbmx5IHBhdGggdXNlcyBzdGJzcF9fY291bnRfY2xhbXBfY2FsbGJhY2sg d2hpY2ggb25seSBhY2N1bXVsYXRlcyBsZW5ndGggYW5kIG5ldmVyIGRlcmVmZXJlbmNlcyBidWYs IHNvIGl0J3Mgc2FmZSB3aXRoIGJ1ZiA9PSBOVUxMLiBCZWhhdmlvciBmb3IgY291bnQgPiAwIGlz IHVuY2hhbmdlZC4KKworVmVyaWZpZWQgdW5kZXIgQVNhbi9VQlNhbiBvbiBtYXN0ZXIgMmM5ODBi YjU6IHN0YWNrIGxheW91dCBwdXRzIHBhZF9hZnRlciBpbW1lZGlhdGVseSBiZWZvcmUgYnVmOyBi ZWZvcmUgdGhlIGZpeCwgc25wcmludGYoYnVmLCAwLCAuLi4pIHNldHMgcGFkX2FmdGVyWzE1XSB0 byAweDAwOyBhZnRlciB0aGUgZml4IGl0IHN0YXlzIGFzICdCJy4gUG9zaXRpdmUgY29udHJvbHMg KG5vcm1hbCBzbnByaW50ZiwgdHJ1bmNhdGlvbiwgY291bnQ9MSwgY291bnQ9MC13aXRoLW51bGwt YnVmKSBhbGwgc3RpbGwgcGFzcy4KKworRml4ZXM6ICMxOTYzCitSZXBvcnRlZC1ieTogSmVycnlH VyAoZ2l0aHViLmNvbS9KZXJyeUdXKQorU2lnbmVkLW9mZi1ieTogQnJhbmRvbiBCYXJyYW50ZSA8 YWV0aGVyYWlAYWV0aGVyc3lzdGVtcy5uZXQ+CistLS0KKyBzdGJfc3ByaW50Zi5oIHwgNiArKysr Ky0KKyAxIGZpbGUgY2hhbmdlZCwgNSBpbnNlcnRpb25zKCspLCAxIGRlbGV0aW9uKC0pCisKK2Rp ZmYgLS1naXQgYS9zdGJfc3ByaW50Zi5oIGIvc3RiX3NwcmludGYuaAoraW5kZXggY2E0MzJhNmJj YS4uNjYyNWQ2ZWVkMCAxMDA2NDQKKy0tLSBhL3N0Yl9zcHJpbnRmLmgKKysrKyBiL3N0Yl9zcHJp bnRmLmgKK0BAIC0xNDMxLDggKzE0MzEsMTIgQEAgU1RCU1BfX1BVQkxJQ0RFRiBpbnQgU1RCX1NQ UklOVEZfREVDT1JBVEUoIHZzbnByaW50ZiApKCBjaGFyICogYnVmLCBpbnQgY291bnQsIGMKKyB7 CisgICAgc3Ric3BfX2NvbnRleHQgYzsKKyAKKy0gICBpZiAoIChjb3VudCA9PSAwKSAmJiAhYnVm ICkKKysgICBpZiAoIGNvdW50IDw9IDAgKQorICAgIHsKKysgICAgICAvLyBDIHN0YW5kYXJkOiBz bnByaW50ZihidWYsIDAsIC4uLikgd3JpdGVzIG5vdGhpbmcsIHJldHVybnMgdGhlIGNvdW50Cisr ICAgICAgLy8gdGhlIGZ1bGwgb3V0cHV0IHdvdWxkIGhhdmUgdGFrZW4uIEhhbmRsZSB0aGlzIHdo ZXRoZXIgb3Igbm90IHRoZQorKyAgICAgIC8vIGNhbGxlciBwYXNzZWQgYSB2YWxpZCBidWZmZXIg LS0gd3JpdGluZyBidWZbY291bnQgLSAxXSB3aXRoIGNvdW50ID09IDAKKysgICAgICAvLyBpcyBh biBvdXQtb2YtYm91bmRzIHdyaXRlIGJlZm9yZSB0aGUgY2FsbGVyJ3MgYnVmZmVyLgorICAgICAg IGMubGVuZ3RoID0gMDsKKyAKKyAgICAgICBTVEJfU1BSSU5URl9ERUNPUkFURSggdnNwcmludGZj YiApKCBzdGJzcF9fY291bnRfY2xhbXBfY2FsbGJhY2ssICZjLCBjLnRtcCwgZm10LCB2YSApOwoK ZGlmZiAtLWdpdCBhL3N0Yi5zcGVjIGIvc3RiLnNwZWMKaW5kZXggNmIzOGY0Yy4uMjY5ZTc0NyAx MDA2NDQKLS0tIGEvc3RiLnNwZWMKKysrIGIvc3RiLnNwZWMKQEAgLTIyNiw2ICsyMjYsMTggQEAg UGF0Y2g6ICAgICAgICAgICV7dXJsfS9wdWxsLzE4NjMucGF0Y2gKICMgaHR0cHM6Ly9naXRodWIu Y29tL25vdGhpbmdzL3N0Yi9pc3N1ZXMvMTkyOQogUGF0Y2g6ICAgICAgICAgIGlzc3VlLTE5Mjku cGF0Y2gKIAorIyBzdGJfc3ByaW50ZjogZG9uJ3Qgd3JpdGUgYnVmWy0xXSBvbiBzbnByaW50Zihi dWYsIDAsIC4uLikgKGZpeGVzICMxOTYzKQorIyBodHRwczovL2dpdGh1Yi5jb20vbm90aGluZ3Mv c3RiL3B1bGwvMTk5NQorIworIyBGaXhlcyBDVkUtMjAyNi03OTUxNjoKKyMKKyMgW1NFQ1VSSVRZ XSBzdGJzcF9zbnByaW50ZiB3aXRoIGNvdW50PTAgd3JpdGVzIG51bGwgdGVybWluYXRvciBiZWZv cmUgYnVmZmVyCisjIGh0dHBzOi8vZ2l0aHViLmNvbS9ub3RoaW5ncy9zdGIvaXNzdWVzLzE5NjMK KyMKKyMgUGF0Y2ggcmVqZWN0ZWQgdXBzdHJlYW0gd2l0aG91dCBjb21tZW50LCBwcmVzdW1hYmx5 IGJlY2F1c2UgdGhlIFBSIHdhcworIyBkcmFmdGVkIHdpdGggQUkvTExNIGFzc2lzdGFuY2UuCitQ YXRjaDogICAgICAgICAgJXt1cmx9L3B1bGwvMTk5NS5wYXRjaAorCiAlZ2xvYmFsIHN0Yl9jX2xl eGVyX3ZlcnNpb24gMC4xMgogJWdsb2JhbCBzdGJfY29ubmVjdGVkX2NvbXBvbmVudHNfdmVyc2lv biAwLjk2CiAlZ2xvYmFsIHN0Yl9kaXZpZGVfdmVyc2lvbiAwLjk0Cg==