From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Benjamin A. Beasley To: git-commits@fedoraproject.org Subject: [rpms/stb] epel9: Patch stb_sprintf: security fix for CVE-2026-79516 Date: Thu, 10 Sep 2026 18:08:41 GMT Message-ID: <178906372192.1.6006454842570978458.rpms-stb-4c8719e6ca36@fedoraproject.org> List-ID: X-Git-Repo: rpms/stb X-Git-Branch: epel9 X-Git-Rev: 4c8719e6ca3622447f2cf4ef94fbb29a42d19313 ICAgICAgICAgICAgQSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KCiAgICAgICAgICAgIFJl cG8gICA6IHJwbXMvc3RiCiAgICAgICAgICAgIEJyYW5jaCA6IGVwZWw5CiAgICAgICAgICAgIENv bW1pdCA6IDRjODcxOWU2Y2EzNjIyNDQ3ZjJjZjRlZjk0ZmJiMjlhNDJkMTkzMTMKICAgICAgICAg ICAgQXV0aG9yIDogQmVuamFtaW4gQS4gQmVhc2xleSA8Y29kZUBtdXNpY2lubXlicmFpbi5uZXQ+ CiAgICAgICAgICAgIERhdGUgICA6IDIwMjYtMDktMTBUMTk6MDY6NTgrMDE6MDAKICAgICAgICAg ICAgU3RhdHMgIDogKzUxLy0wIGluIDIgZmlsZShzKQogICAgICAgICAgICBVUkwgICAgOiBodHRw czovL3NyYy5mZWRvcmFwcm9qZWN0Lm9yZy9ycG1zL3N0Yi9jLzRjODcxOWU2Y2EzNjIyNDQ3ZjJj ZjRlZjk0ZmJiMjlhNDJkMTkzMTM/YnJhbmNoPWVwZWw5CgogICAgICAgICAgICBMb2c6CiAgICAg ICAgICAgIFBhdGNoIHN0Yl9zcHJpbnRmOiBzZWN1cml0eSBmaXggZm9yIENWRS0yMDI2LTc5NTE2 CgotIEZpeGVzIFJIQlojMjUzMTI5MTsgRml4ZXMgUkhCWiMyNTMxMjkwCgotLS0KZGlmZiAtLWdp dCBhLzE5OTUucGF0Y2ggYi8xOTk1LnBhdGNoCm5ldyBmaWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAw MDAwMDAuLjFlMjc5Y2QKLS0tIC9kZXYvbnVsbAorKysgYi8xOTk1LnBhdGNoCkBAIC0wLDAgKzEs MzkgQEAKK0Zyb20gMWZkN2ZmOWZkYjk3ZjMwMTI2NDIyNjMwMmE0ZDcwYjEwNzRhNmI2NiBNb24g U2VwIDE3IDAwOjAwOjAwIDIwMDEKK0Zyb206IEJyYW5kb24gQmFycmFudGUgPGFldGhlcmFpQGFl dGhlcnN5c3RlbXMubmV0PgorRGF0ZTogU3VuLCA2IFNlcCAyMDI2IDE5OjA0OjM5IC0wNDAwCitT dWJqZWN0OiBbUEFUQ0hdIHN0Yl9zcHJpbnRmOiBkb24ndCB3cml0ZSBidWZbLTFdIG9uIHNucHJp bnRmKGJ1ZiwgMCwgLi4uKQorIChmaXhlcyAjMTk2MykKKworVGhlIHRvcCBnYXRlIGluIFNUQl9T UFJJTlRGX0RFQ09SQVRFKHZzbnByaW50Zikgb25seSBlbnRlcmVkIHRoZSBjb3VudC1vbmx5IHBh dGggd2hlbiBib3RoIGNvdW50ID09IDAgQU5EIGJ1ZiB3YXMgTlVMTC4gQSBjYWxsZXIgcGFzc2lu ZyBhIHZhbGlkIGJ1ZmZlciB3aXRoIGNvdW50ID09IDAgKHRoZSBzaGFwZSBjYWxsZXJzIHVzZSB0 byBhc2sgJ2hvdyBiaWcgd291bGQgdGhpcyBiZT8nKSBmZWxsIHRocm91Z2ggdG8gdGhlIGVsc2Ug YnJhbmNoLCBjb21wdXRlZCBsID0gKGludCkoYy5idWYgLSBidWYpID0gMCwgaGl0IHRoZSBsID49 IGNvdW50IGNsYW1wLCBkcm9wcGVkIHRvIGwgPSBjb3VudCAtIDEgPSAtMSwgYW5kIGV4ZWN1dGVk IGJ1ZlstMV0gPSAwIC0tIG9uZSBieXRlIG91dC1vZi1ib3VuZHMgYmVmb3JlIHRoZSBjYWxsZXIn cyBidWZmZXIuCisKK1RoZSBDIHN0YW5kYXJkIGlzIGV4cGxpY2l0IHRoYXQgc25wcmludGYoYnVm LCAwLCAuLi4pIG11c3Qgbm90IHdyaXRlLiBnbGliYywgbXVzbCBhbmQgdGhlIEJTRCBzbnByaW50 ZiBhbGwgc2tpcCB0aGUgbnVsbCB0ZXJtaW5hdG9yIHdoZW4gY291bnQgPT0gMC4KKworRXh0ZW5k IHRoZSBnYXRlIHRvIGNvdW50IDw9IDAgc28gdGhlIGNvdW50LW9ubHkgcGF0aCBoYW5kbGVzIGJv dGggdGhlIG51bGwtYnVmIGFuZCB0aGUgbm9uLW51bGwtYnVmIGNhc2VzIHRoZSBzYW1lIHdheS4g VGhlIGNvdW50LW9ubHkgcGF0aCB1c2VzIHN0YnNwX19jb3VudF9jbGFtcF9jYWxsYmFjayB3aGlj aCBvbmx5IGFjY3VtdWxhdGVzIGxlbmd0aCBhbmQgbmV2ZXIgZGVyZWZlcmVuY2VzIGJ1Ziwgc28g aXQncyBzYWZlIHdpdGggYnVmID09IE5VTEwuIEJlaGF2aW9yIGZvciBjb3VudCA+IDAgaXMgdW5j aGFuZ2VkLgorCitWZXJpZmllZCB1bmRlciBBU2FuL1VCU2FuIG9uIG1hc3RlciAyYzk4MGJiNTog c3RhY2sgbGF5b3V0IHB1dHMgcGFkX2FmdGVyIGltbWVkaWF0ZWx5IGJlZm9yZSBidWY7IGJlZm9y ZSB0aGUgZml4LCBzbnByaW50ZihidWYsIDAsIC4uLikgc2V0cyBwYWRfYWZ0ZXJbMTVdIHRvIDB4 MDA7IGFmdGVyIHRoZSBmaXggaXQgc3RheXMgYXMgJ0InLiBQb3NpdGl2ZSBjb250cm9scyAobm9y bWFsIHNucHJpbnRmLCB0cnVuY2F0aW9uLCBjb3VudD0xLCBjb3VudD0wLXdpdGgtbnVsbC1idWYp IGFsbCBzdGlsbCBwYXNzLgorCitGaXhlczogIzE5NjMKK1JlcG9ydGVkLWJ5OiBKZXJyeUdXIChn aXRodWIuY29tL0plcnJ5R1cpCitTaWduZWQtb2ZmLWJ5OiBCcmFuZG9uIEJhcnJhbnRlIDxhZXRo ZXJhaUBhZXRoZXJzeXN0ZW1zLm5ldD4KKy0tLQorIHN0Yl9zcHJpbnRmLmggfCA2ICsrKysrLQor IDEgZmlsZSBjaGFuZ2VkLCA1IGluc2VydGlvbnMoKyksIDEgZGVsZXRpb24oLSkKKworZGlmZiAt LWdpdCBhL3N0Yl9zcHJpbnRmLmggYi9zdGJfc3ByaW50Zi5oCitpbmRleCBjYTQzMmE2YmNhLi42 NjI1ZDZlZWQwIDEwMDY0NAorLS0tIGEvc3RiX3NwcmludGYuaAorKysrIGIvc3RiX3NwcmludGYu aAorQEAgLTE0MzEsOCArMTQzMSwxMiBAQCBTVEJTUF9fUFVCTElDREVGIGludCBTVEJfU1BSSU5U Rl9ERUNPUkFURSggdnNucHJpbnRmICkoIGNoYXIgKiBidWYsIGludCBjb3VudCwgYworIHsKKyAg ICBzdGJzcF9fY29udGV4dCBjOworIAorLSAgIGlmICggKGNvdW50ID09IDApICYmICFidWYgKQor KyAgIGlmICggY291bnQgPD0gMCApCisgICAgeworKyAgICAgIC8vIEMgc3RhbmRhcmQ6IHNucHJp bnRmKGJ1ZiwgMCwgLi4uKSB3cml0ZXMgbm90aGluZywgcmV0dXJucyB0aGUgY291bnQKKysgICAg ICAvLyB0aGUgZnVsbCBvdXRwdXQgd291bGQgaGF2ZSB0YWtlbi4gSGFuZGxlIHRoaXMgd2hldGhl ciBvciBub3QgdGhlCisrICAgICAgLy8gY2FsbGVyIHBhc3NlZCBhIHZhbGlkIGJ1ZmZlciAtLSB3 cml0aW5nIGJ1Zltjb3VudCAtIDFdIHdpdGggY291bnQgPT0gMAorKyAgICAgIC8vIGlzIGFuIG91 dC1vZi1ib3VuZHMgd3JpdGUgYmVmb3JlIHRoZSBjYWxsZXIncyBidWZmZXIuCisgICAgICAgYy5s ZW5ndGggPSAwOworIAorICAgICAgIFNUQl9TUFJJTlRGX0RFQ09SQVRFKCB2c3ByaW50ZmNiICko IHN0YnNwX19jb3VudF9jbGFtcF9jYWxsYmFjaywgJmMsIGMudG1wLCBmbXQsIHZhICk7CgpkaWZm IC0tZ2l0IGEvc3RiLnNwZWMgYi9zdGIuc3BlYwppbmRleCAxMGZlNDZmLi5kZDI3ZmQwIDEwMDY0 NAotLS0gYS9zdGIuc3BlYworKysgYi9zdGIuc3BlYwpAQCAtMjI2LDYgKzIyNiwxOCBAQCBQYXRj aDogICAgICAgICAgJXt1cmx9L3B1bGwvMTg2My5wYXRjaAogIyBodHRwczovL2dpdGh1Yi5jb20v bm90aGluZ3Mvc3RiL2lzc3Vlcy8xOTI5CiBQYXRjaDogICAgICAgICAgaXNzdWUtMTkyOS5wYXRj aAogCisjIHN0Yl9zcHJpbnRmOiBkb24ndCB3cml0ZSBidWZbLTFdIG9uIHNucHJpbnRmKGJ1Ziwg MCwgLi4uKSAoZml4ZXMgIzE5NjMpCisjIGh0dHBzOi8vZ2l0aHViLmNvbS9ub3RoaW5ncy9zdGIv cHVsbC8xOTk1CisjCisjIEZpeGVzIENWRS0yMDI2LTc5NTE2OgorIworIyBbU0VDVVJJVFldIHN0 YnNwX3NucHJpbnRmIHdpdGggY291bnQ9MCB3cml0ZXMgbnVsbCB0ZXJtaW5hdG9yIGJlZm9yZSBi dWZmZXIKKyMgaHR0cHM6Ly9naXRodWIuY29tL25vdGhpbmdzL3N0Yi9pc3N1ZXMvMTk2MworIwor IyBQYXRjaCByZWplY3RlZCB1cHN0cmVhbSB3aXRob3V0IGNvbW1lbnQsIHByZXN1bWFibHkgYmVj YXVzZSB0aGUgUFIgd2FzCisjIGRyYWZ0ZWQgd2l0aCBBSS9MTE0gYXNzaXN0YW5jZS4KK1BhdGNo OiAgICAgICAgICAle3VybH0vcHVsbC8xOTk1LnBhdGNoCisKICVnbG9iYWwgc3RiX2NfbGV4ZXJf dmVyc2lvbiAwLjEyCiAlZ2xvYmFsIHN0Yl9jb25uZWN0ZWRfY29tcG9uZW50c192ZXJzaW9uIDAu OTYKICVnbG9iYWwgc3RiX2RpdmlkZV92ZXJzaW9uIDAuOTQK