From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Benjamin A. Beasley To: git-commits@fedoraproject.org Subject: [rpms/stb] epel10: Patch stb_sprintf: security fix for CVE-2026-79516 Date: Thu, 10 Sep 2026 09:50:31 GMT Message-ID: <178903383126.1.10884273246769899419.rpms-stb-d6aead5f22e6@fedoraproject.org> List-ID: X-Git-Repo: rpms/stb X-Git-Branch: epel10 X-Git-Rev: d6aead5f22e6f229075e9ba720c28601b9b28408 ICAgICAgICAgICAgQSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KCiAgICAgICAgICAgIFJl cG8gICA6IHJwbXMvc3RiCiAgICAgICAgICAgIEJyYW5jaCA6IGVwZWwxMAogICAgICAgICAgICBD b21taXQgOiBkNmFlYWQ1ZjIyZTZmMjI5MDc1ZTliYTcyMGMyODYwMWI5YjI4NDA4CiAgICAgICAg ICAgIEF1dGhvciA6IEJlbmphbWluIEEuIEJlYXNsZXkgPGNvZGVAbXVzaWNpbm15YnJhaW4ubmV0 PgogICAgICAgICAgICBEYXRlICAgOiAyMDI2LTA5LTEwVDEwOjA4OjQyKzAxOjAwCiAgICAgICAg ICAgIFN0YXRzICA6ICs1MS8tMCBpbiAyIGZpbGUocykKICAgICAgICAgICAgVVJMICAgIDogaHR0 cHM6Ly9zcmMuZmVkb3JhcHJvamVjdC5vcmcvcnBtcy9zdGIvYy9kNmFlYWQ1ZjIyZTZmMjI5MDc1 ZTliYTcyMGMyODYwMWI5YjI4NDA4P2JyYW5jaD1lcGVsMTAKCiAgICAgICAgICAgIExvZzoKICAg ICAgICAgICAgUGF0Y2ggc3RiX3NwcmludGY6IHNlY3VyaXR5IGZpeCBmb3IgQ1ZFLTIwMjYtNzk1 MTYKCi0gRml4ZXMgUkhCWiMyNTMxMjkxOyBGaXhlcyBSSEJaIzI1MzEyOTAKCi0tLQpkaWZmIC0t Z2l0IGEvMTk5NS5wYXRjaCBiLzE5OTUucGF0Y2gKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXgg MDAwMDAwMC4uMWUyNzljZAotLS0gL2Rldi9udWxsCisrKyBiLzE5OTUucGF0Y2gKQEAgLTAsMCAr MSwzOSBAQAorRnJvbSAxZmQ3ZmY5ZmRiOTdmMzAxMjY0MjI2MzAyYTRkNzBiMTA3NGE2YjY2IE1v biBTZXAgMTcgMDA6MDA6MDAgMjAwMQorRnJvbTogQnJhbmRvbiBCYXJyYW50ZSA8YWV0aGVyYWlA YWV0aGVyc3lzdGVtcy5uZXQ+CitEYXRlOiBTdW4sIDYgU2VwIDIwMjYgMTk6MDQ6MzkgLTA0MDAK K1N1YmplY3Q6IFtQQVRDSF0gc3RiX3NwcmludGY6IGRvbid0IHdyaXRlIGJ1ZlstMV0gb24gc25w cmludGYoYnVmLCAwLCAuLi4pCisgKGZpeGVzICMxOTYzKQorCitUaGUgdG9wIGdhdGUgaW4gU1RC X1NQUklOVEZfREVDT1JBVEUodnNucHJpbnRmKSBvbmx5IGVudGVyZWQgdGhlIGNvdW50LW9ubHkg cGF0aCB3aGVuIGJvdGggY291bnQgPT0gMCBBTkQgYnVmIHdhcyBOVUxMLiBBIGNhbGxlciBwYXNz aW5nIGEgdmFsaWQgYnVmZmVyIHdpdGggY291bnQgPT0gMCAodGhlIHNoYXBlIGNhbGxlcnMgdXNl IHRvIGFzayAnaG93IGJpZyB3b3VsZCB0aGlzIGJlPycpIGZlbGwgdGhyb3VnaCB0byB0aGUgZWxz ZSBicmFuY2gsIGNvbXB1dGVkIGwgPSAoaW50KShjLmJ1ZiAtIGJ1ZikgPSAwLCBoaXQgdGhlIGwg Pj0gY291bnQgY2xhbXAsIGRyb3BwZWQgdG8gbCA9IGNvdW50IC0gMSA9IC0xLCBhbmQgZXhlY3V0 ZWQgYnVmWy0xXSA9IDAgLS0gb25lIGJ5dGUgb3V0LW9mLWJvdW5kcyBiZWZvcmUgdGhlIGNhbGxl cidzIGJ1ZmZlci4KKworVGhlIEMgc3RhbmRhcmQgaXMgZXhwbGljaXQgdGhhdCBzbnByaW50Zihi dWYsIDAsIC4uLikgbXVzdCBub3Qgd3JpdGUuIGdsaWJjLCBtdXNsIGFuZCB0aGUgQlNEIHNucHJp bnRmIGFsbCBza2lwIHRoZSBudWxsIHRlcm1pbmF0b3Igd2hlbiBjb3VudCA9PSAwLgorCitFeHRl bmQgdGhlIGdhdGUgdG8gY291bnQgPD0gMCBzbyB0aGUgY291bnQtb25seSBwYXRoIGhhbmRsZXMg Ym90aCB0aGUgbnVsbC1idWYgYW5kIHRoZSBub24tbnVsbC1idWYgY2FzZXMgdGhlIHNhbWUgd2F5 LiBUaGUgY291bnQtb25seSBwYXRoIHVzZXMgc3Ric3BfX2NvdW50X2NsYW1wX2NhbGxiYWNrIHdo aWNoIG9ubHkgYWNjdW11bGF0ZXMgbGVuZ3RoIGFuZCBuZXZlciBkZXJlZmVyZW5jZXMgYnVmLCBz byBpdCdzIHNhZmUgd2l0aCBidWYgPT0gTlVMTC4gQmVoYXZpb3IgZm9yIGNvdW50ID4gMCBpcyB1 bmNoYW5nZWQuCisKK1ZlcmlmaWVkIHVuZGVyIEFTYW4vVUJTYW4gb24gbWFzdGVyIDJjOTgwYmI1 OiBzdGFjayBsYXlvdXQgcHV0cyBwYWRfYWZ0ZXIgaW1tZWRpYXRlbHkgYmVmb3JlIGJ1ZjsgYmVm b3JlIHRoZSBmaXgsIHNucHJpbnRmKGJ1ZiwgMCwgLi4uKSBzZXRzIHBhZF9hZnRlclsxNV0gdG8g MHgwMDsgYWZ0ZXIgdGhlIGZpeCBpdCBzdGF5cyBhcyAnQicuIFBvc2l0aXZlIGNvbnRyb2xzIChu b3JtYWwgc25wcmludGYsIHRydW5jYXRpb24sIGNvdW50PTEsIGNvdW50PTAtd2l0aC1udWxsLWJ1 ZikgYWxsIHN0aWxsIHBhc3MuCisKK0ZpeGVzOiAjMTk2MworUmVwb3J0ZWQtYnk6IEplcnJ5R1cg KGdpdGh1Yi5jb20vSmVycnlHVykKK1NpZ25lZC1vZmYtYnk6IEJyYW5kb24gQmFycmFudGUgPGFl dGhlcmFpQGFldGhlcnN5c3RlbXMubmV0PgorLS0tCisgc3RiX3NwcmludGYuaCB8IDYgKysrKyst CisgMSBmaWxlIGNoYW5nZWQsIDUgaW5zZXJ0aW9ucygrKSwgMSBkZWxldGlvbigtKQorCitkaWZm IC0tZ2l0IGEvc3RiX3NwcmludGYuaCBiL3N0Yl9zcHJpbnRmLmgKK2luZGV4IGNhNDMyYTZiY2Eu LjY2MjVkNmVlZDAgMTAwNjQ0CistLS0gYS9zdGJfc3ByaW50Zi5oCisrKysgYi9zdGJfc3ByaW50 Zi5oCitAQCAtMTQzMSw4ICsxNDMxLDEyIEBAIFNUQlNQX19QVUJMSUNERUYgaW50IFNUQl9TUFJJ TlRGX0RFQ09SQVRFKCB2c25wcmludGYgKSggY2hhciAqIGJ1ZiwgaW50IGNvdW50LCBjCisgewor ICAgIHN0YnNwX19jb250ZXh0IGM7CisgCistICAgaWYgKCAoY291bnQgPT0gMCkgJiYgIWJ1ZiAp CisrICAgaWYgKCBjb3VudCA8PSAwICkKKyAgICB7CisrICAgICAgLy8gQyBzdGFuZGFyZDogc25w cmludGYoYnVmLCAwLCAuLi4pIHdyaXRlcyBub3RoaW5nLCByZXR1cm5zIHRoZSBjb3VudAorKyAg ICAgIC8vIHRoZSBmdWxsIG91dHB1dCB3b3VsZCBoYXZlIHRha2VuLiBIYW5kbGUgdGhpcyB3aGV0 aGVyIG9yIG5vdCB0aGUKKysgICAgICAvLyBjYWxsZXIgcGFzc2VkIGEgdmFsaWQgYnVmZmVyIC0t IHdyaXRpbmcgYnVmW2NvdW50IC0gMV0gd2l0aCBjb3VudCA9PSAwCisrICAgICAgLy8gaXMgYW4g b3V0LW9mLWJvdW5kcyB3cml0ZSBiZWZvcmUgdGhlIGNhbGxlcidzIGJ1ZmZlci4KKyAgICAgICBj Lmxlbmd0aCA9IDA7CisgCisgICAgICAgU1RCX1NQUklOVEZfREVDT1JBVEUoIHZzcHJpbnRmY2Ig KSggc3Ric3BfX2NvdW50X2NsYW1wX2NhbGxiYWNrLCAmYywgYy50bXAsIGZtdCwgdmEgKTsKCmRp ZmYgLS1naXQgYS9zdGIuc3BlYyBiL3N0Yi5zcGVjCmluZGV4IDZiMzhmNGMuLjI2OWU3NDcgMTAw NjQ0Ci0tLSBhL3N0Yi5zcGVjCisrKyBiL3N0Yi5zcGVjCkBAIC0yMjYsNiArMjI2LDE4IEBAIFBh dGNoOiAgICAgICAgICAle3VybH0vcHVsbC8xODYzLnBhdGNoCiAjIGh0dHBzOi8vZ2l0aHViLmNv bS9ub3RoaW5ncy9zdGIvaXNzdWVzLzE5MjkKIFBhdGNoOiAgICAgICAgICBpc3N1ZS0xOTI5LnBh dGNoCiAKKyMgc3RiX3NwcmludGY6IGRvbid0IHdyaXRlIGJ1ZlstMV0gb24gc25wcmludGYoYnVm LCAwLCAuLi4pIChmaXhlcyAjMTk2MykKKyMgaHR0cHM6Ly9naXRodWIuY29tL25vdGhpbmdzL3N0 Yi9wdWxsLzE5OTUKKyMKKyMgRml4ZXMgQ1ZFLTIwMjYtNzk1MTY6CisjCisjIFtTRUNVUklUWV0g c3Ric3Bfc25wcmludGYgd2l0aCBjb3VudD0wIHdyaXRlcyBudWxsIHRlcm1pbmF0b3IgYmVmb3Jl IGJ1ZmZlcgorIyBodHRwczovL2dpdGh1Yi5jb20vbm90aGluZ3Mvc3RiL2lzc3Vlcy8xOTYzCisj CisjIFBhdGNoIHJlamVjdGVkIHVwc3RyZWFtIHdpdGhvdXQgY29tbWVudCwgcHJlc3VtYWJseSBi ZWNhdXNlIHRoZSBQUiB3YXMKKyMgZHJhZnRlZCB3aXRoIEFJL0xMTSBhc3Npc3RhbmNlLgorUGF0 Y2g6ICAgICAgICAgICV7dXJsfS9wdWxsLzE5OTUucGF0Y2gKKwogJWdsb2JhbCBzdGJfY19sZXhl cl92ZXJzaW9uIDAuMTIKICVnbG9iYWwgc3RiX2Nvbm5lY3RlZF9jb21wb25lbnRzX3ZlcnNpb24g MC45NgogJWdsb2JhbCBzdGJfZGl2aWRlX3ZlcnNpb24gMC45NAo=