From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Benjamin A. Beasley To: git-commits@fedoraproject.org Subject: [rpms/stb] epel10.3: Patch stb_sprintf: security fix for CVE-2026-79516 Date: Thu, 10 Sep 2026 17:49:33 GMT Message-ID: <178906257323.1.16152815461578159985.rpms-stb-d6aead5f22e6@fedoraproject.org> List-ID: X-Git-Repo: rpms/stb X-Git-Branch: epel10.3 X-Git-Rev: d6aead5f22e6f229075e9ba720c28601b9b28408 ICAgICAgICAgICAgQSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KCiAgICAgICAgICAgIFJl cG8gICA6IHJwbXMvc3RiCiAgICAgICAgICAgIEJyYW5jaCA6IGVwZWwxMC4zCiAgICAgICAgICAg IENvbW1pdCA6IGQ2YWVhZDVmMjJlNmYyMjkwNzVlOWJhNzIwYzI4NjAxYjliMjg0MDgKICAgICAg ICAgICAgQXV0aG9yIDogQmVuamFtaW4gQS4gQmVhc2xleSA8Y29kZUBtdXNpY2lubXlicmFpbi5u ZXQ+CiAgICAgICAgICAgIERhdGUgICA6IDIwMjYtMDktMTBUMTA6MDg6NDIrMDE6MDAKICAgICAg ICAgICAgU3RhdHMgIDogKzUxLy0wIGluIDIgZmlsZShzKQogICAgICAgICAgICBVUkwgICAgOiBo dHRwczovL3NyYy5mZWRvcmFwcm9qZWN0Lm9yZy9ycG1zL3N0Yi9jL2Q2YWVhZDVmMjJlNmYyMjkw NzVlOWJhNzIwYzI4NjAxYjliMjg0MDg/YnJhbmNoPWVwZWwxMC4zCgogICAgICAgICAgICBMb2c6 CiAgICAgICAgICAgIFBhdGNoIHN0Yl9zcHJpbnRmOiBzZWN1cml0eSBmaXggZm9yIENWRS0yMDI2 LTc5NTE2CgotIEZpeGVzIFJIQlojMjUzMTI5MTsgRml4ZXMgUkhCWiMyNTMxMjkwCgotLS0KZGlm ZiAtLWdpdCBhLzE5OTUucGF0Y2ggYi8xOTk1LnBhdGNoCm5ldyBmaWxlIG1vZGUgMTAwNjQ0Cmlu ZGV4IDAwMDAwMDAuLjFlMjc5Y2QKLS0tIC9kZXYvbnVsbAorKysgYi8xOTk1LnBhdGNoCkBAIC0w LDAgKzEsMzkgQEAKK0Zyb20gMWZkN2ZmOWZkYjk3ZjMwMTI2NDIyNjMwMmE0ZDcwYjEwNzRhNmI2 NiBNb24gU2VwIDE3IDAwOjAwOjAwIDIwMDEKK0Zyb206IEJyYW5kb24gQmFycmFudGUgPGFldGhl cmFpQGFldGhlcnN5c3RlbXMubmV0PgorRGF0ZTogU3VuLCA2IFNlcCAyMDI2IDE5OjA0OjM5IC0w NDAwCitTdWJqZWN0OiBbUEFUQ0hdIHN0Yl9zcHJpbnRmOiBkb24ndCB3cml0ZSBidWZbLTFdIG9u IHNucHJpbnRmKGJ1ZiwgMCwgLi4uKQorIChmaXhlcyAjMTk2MykKKworVGhlIHRvcCBnYXRlIGlu IFNUQl9TUFJJTlRGX0RFQ09SQVRFKHZzbnByaW50Zikgb25seSBlbnRlcmVkIHRoZSBjb3VudC1v bmx5IHBhdGggd2hlbiBib3RoIGNvdW50ID09IDAgQU5EIGJ1ZiB3YXMgTlVMTC4gQSBjYWxsZXIg cGFzc2luZyBhIHZhbGlkIGJ1ZmZlciB3aXRoIGNvdW50ID09IDAgKHRoZSBzaGFwZSBjYWxsZXJz IHVzZSB0byBhc2sgJ2hvdyBiaWcgd291bGQgdGhpcyBiZT8nKSBmZWxsIHRocm91Z2ggdG8gdGhl IGVsc2UgYnJhbmNoLCBjb21wdXRlZCBsID0gKGludCkoYy5idWYgLSBidWYpID0gMCwgaGl0IHRo ZSBsID49IGNvdW50IGNsYW1wLCBkcm9wcGVkIHRvIGwgPSBjb3VudCAtIDEgPSAtMSwgYW5kIGV4 ZWN1dGVkIGJ1ZlstMV0gPSAwIC0tIG9uZSBieXRlIG91dC1vZi1ib3VuZHMgYmVmb3JlIHRoZSBj YWxsZXIncyBidWZmZXIuCisKK1RoZSBDIHN0YW5kYXJkIGlzIGV4cGxpY2l0IHRoYXQgc25wcmlu dGYoYnVmLCAwLCAuLi4pIG11c3Qgbm90IHdyaXRlLiBnbGliYywgbXVzbCBhbmQgdGhlIEJTRCBz bnByaW50ZiBhbGwgc2tpcCB0aGUgbnVsbCB0ZXJtaW5hdG9yIHdoZW4gY291bnQgPT0gMC4KKwor RXh0ZW5kIHRoZSBnYXRlIHRvIGNvdW50IDw9IDAgc28gdGhlIGNvdW50LW9ubHkgcGF0aCBoYW5k bGVzIGJvdGggdGhlIG51bGwtYnVmIGFuZCB0aGUgbm9uLW51bGwtYnVmIGNhc2VzIHRoZSBzYW1l IHdheS4gVGhlIGNvdW50LW9ubHkgcGF0aCB1c2VzIHN0YnNwX19jb3VudF9jbGFtcF9jYWxsYmFj ayB3aGljaCBvbmx5IGFjY3VtdWxhdGVzIGxlbmd0aCBhbmQgbmV2ZXIgZGVyZWZlcmVuY2VzIGJ1 Ziwgc28gaXQncyBzYWZlIHdpdGggYnVmID09IE5VTEwuIEJlaGF2aW9yIGZvciBjb3VudCA+IDAg aXMgdW5jaGFuZ2VkLgorCitWZXJpZmllZCB1bmRlciBBU2FuL1VCU2FuIG9uIG1hc3RlciAyYzk4 MGJiNTogc3RhY2sgbGF5b3V0IHB1dHMgcGFkX2FmdGVyIGltbWVkaWF0ZWx5IGJlZm9yZSBidWY7 IGJlZm9yZSB0aGUgZml4LCBzbnByaW50ZihidWYsIDAsIC4uLikgc2V0cyBwYWRfYWZ0ZXJbMTVd IHRvIDB4MDA7IGFmdGVyIHRoZSBmaXggaXQgc3RheXMgYXMgJ0InLiBQb3NpdGl2ZSBjb250cm9s cyAobm9ybWFsIHNucHJpbnRmLCB0cnVuY2F0aW9uLCBjb3VudD0xLCBjb3VudD0wLXdpdGgtbnVs bC1idWYpIGFsbCBzdGlsbCBwYXNzLgorCitGaXhlczogIzE5NjMKK1JlcG9ydGVkLWJ5OiBKZXJy eUdXIChnaXRodWIuY29tL0plcnJ5R1cpCitTaWduZWQtb2ZmLWJ5OiBCcmFuZG9uIEJhcnJhbnRl IDxhZXRoZXJhaUBhZXRoZXJzeXN0ZW1zLm5ldD4KKy0tLQorIHN0Yl9zcHJpbnRmLmggfCA2ICsr KysrLQorIDEgZmlsZSBjaGFuZ2VkLCA1IGluc2VydGlvbnMoKyksIDEgZGVsZXRpb24oLSkKKwor ZGlmZiAtLWdpdCBhL3N0Yl9zcHJpbnRmLmggYi9zdGJfc3ByaW50Zi5oCitpbmRleCBjYTQzMmE2 YmNhLi42NjI1ZDZlZWQwIDEwMDY0NAorLS0tIGEvc3RiX3NwcmludGYuaAorKysrIGIvc3RiX3Nw cmludGYuaAorQEAgLTE0MzEsOCArMTQzMSwxMiBAQCBTVEJTUF9fUFVCTElDREVGIGludCBTVEJf U1BSSU5URl9ERUNPUkFURSggdnNucHJpbnRmICkoIGNoYXIgKiBidWYsIGludCBjb3VudCwgYwor IHsKKyAgICBzdGJzcF9fY29udGV4dCBjOworIAorLSAgIGlmICggKGNvdW50ID09IDApICYmICFi dWYgKQorKyAgIGlmICggY291bnQgPD0gMCApCisgICAgeworKyAgICAgIC8vIEMgc3RhbmRhcmQ6 IHNucHJpbnRmKGJ1ZiwgMCwgLi4uKSB3cml0ZXMgbm90aGluZywgcmV0dXJucyB0aGUgY291bnQK KysgICAgICAvLyB0aGUgZnVsbCBvdXRwdXQgd291bGQgaGF2ZSB0YWtlbi4gSGFuZGxlIHRoaXMg d2hldGhlciBvciBub3QgdGhlCisrICAgICAgLy8gY2FsbGVyIHBhc3NlZCBhIHZhbGlkIGJ1ZmZl ciAtLSB3cml0aW5nIGJ1Zltjb3VudCAtIDFdIHdpdGggY291bnQgPT0gMAorKyAgICAgIC8vIGlz IGFuIG91dC1vZi1ib3VuZHMgd3JpdGUgYmVmb3JlIHRoZSBjYWxsZXIncyBidWZmZXIuCisgICAg ICAgYy5sZW5ndGggPSAwOworIAorICAgICAgIFNUQl9TUFJJTlRGX0RFQ09SQVRFKCB2c3ByaW50 ZmNiICkoIHN0YnNwX19jb3VudF9jbGFtcF9jYWxsYmFjaywgJmMsIGMudG1wLCBmbXQsIHZhICk7 CgpkaWZmIC0tZ2l0IGEvc3RiLnNwZWMgYi9zdGIuc3BlYwppbmRleCA2YjM4ZjRjLi4yNjllNzQ3 IDEwMDY0NAotLS0gYS9zdGIuc3BlYworKysgYi9zdGIuc3BlYwpAQCAtMjI2LDYgKzIyNiwxOCBA QCBQYXRjaDogICAgICAgICAgJXt1cmx9L3B1bGwvMTg2My5wYXRjaAogIyBodHRwczovL2dpdGh1 Yi5jb20vbm90aGluZ3Mvc3RiL2lzc3Vlcy8xOTI5CiBQYXRjaDogICAgICAgICAgaXNzdWUtMTky OS5wYXRjaAogCisjIHN0Yl9zcHJpbnRmOiBkb24ndCB3cml0ZSBidWZbLTFdIG9uIHNucHJpbnRm KGJ1ZiwgMCwgLi4uKSAoZml4ZXMgIzE5NjMpCisjIGh0dHBzOi8vZ2l0aHViLmNvbS9ub3RoaW5n cy9zdGIvcHVsbC8xOTk1CisjCisjIEZpeGVzIENWRS0yMDI2LTc5NTE2OgorIworIyBbU0VDVVJJ VFldIHN0YnNwX3NucHJpbnRmIHdpdGggY291bnQ9MCB3cml0ZXMgbnVsbCB0ZXJtaW5hdG9yIGJl Zm9yZSBidWZmZXIKKyMgaHR0cHM6Ly9naXRodWIuY29tL25vdGhpbmdzL3N0Yi9pc3N1ZXMvMTk2 MworIworIyBQYXRjaCByZWplY3RlZCB1cHN0cmVhbSB3aXRob3V0IGNvbW1lbnQsIHByZXN1bWFi bHkgYmVjYXVzZSB0aGUgUFIgd2FzCisjIGRyYWZ0ZWQgd2l0aCBBSS9MTE0gYXNzaXN0YW5jZS4K K1BhdGNoOiAgICAgICAgICAle3VybH0vcHVsbC8xOTk1LnBhdGNoCisKICVnbG9iYWwgc3RiX2Nf bGV4ZXJfdmVyc2lvbiAwLjEyCiAlZ2xvYmFsIHN0Yl9jb25uZWN0ZWRfY29tcG9uZW50c192ZXJz aW9uIDAuOTYKICVnbG9iYWwgc3RiX2RpdmlkZV92ZXJzaW9uIDAuOTQK