From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Benjamin A. Beasley To: git-commits@fedoraproject.org Subject: [rpms/stb] epel8: Patch stb_sprintf: security fix for CVE-2026-79516 Date: Thu, 10 Sep 2026 21:26:30 GMT Message-ID: <178907559092.1.2760146478285013035.rpms-stb-24e86d82d5c2@fedoraproject.org> List-ID: X-Git-Repo: rpms/stb X-Git-Branch: epel8 X-Git-Rev: 24e86d82d5c2bc5a889b397ff6fb454d76d2d0e8 ICAgICAgICAgICAgQSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KCiAgICAgICAgICAgIFJl cG8gICA6IHJwbXMvc3RiCiAgICAgICAgICAgIEJyYW5jaCA6IGVwZWw4CiAgICAgICAgICAgIENv bW1pdCA6IDI0ZTg2ZDgyZDVjMmJjNWE4ODliMzk3ZmY2ZmI0NTRkNzZkMmQwZTgKICAgICAgICAg ICAgQXV0aG9yIDogQmVuamFtaW4gQS4gQmVhc2xleSA8Y29kZUBtdXNpY2lubXlicmFpbi5uZXQ+ CiAgICAgICAgICAgIERhdGUgICA6IDIwMjYtMDktMTBUMjI6MjQ6MzgrMDE6MDAKICAgICAgICAg ICAgU3RhdHMgIDogKzUxLy0wIGluIDIgZmlsZShzKQogICAgICAgICAgICBVUkwgICAgOiBodHRw czovL3NyYy5mZWRvcmFwcm9qZWN0Lm9yZy9ycG1zL3N0Yi9jLzI0ZTg2ZDgyZDVjMmJjNWE4ODli Mzk3ZmY2ZmI0NTRkNzZkMmQwZTg/YnJhbmNoPWVwZWw4CgogICAgICAgICAgICBMb2c6CiAgICAg ICAgICAgIFBhdGNoIHN0Yl9zcHJpbnRmOiBzZWN1cml0eSBmaXggZm9yIENWRS0yMDI2LTc5NTE2 CgotIEZpeGVzIFJIQlojMjUzMTI5MTsgRml4ZXMgUkhCWiMyNTMxMjkwCgotLS0KZGlmZiAtLWdp dCBhLzE5OTUucGF0Y2ggYi8xOTk1LnBhdGNoCm5ldyBmaWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAw MDAwMDAuLjFlMjc5Y2QKLS0tIC9kZXYvbnVsbAorKysgYi8xOTk1LnBhdGNoCkBAIC0wLDAgKzEs MzkgQEAKK0Zyb20gMWZkN2ZmOWZkYjk3ZjMwMTI2NDIyNjMwMmE0ZDcwYjEwNzRhNmI2NiBNb24g U2VwIDE3IDAwOjAwOjAwIDIwMDEKK0Zyb206IEJyYW5kb24gQmFycmFudGUgPGFldGhlcmFpQGFl dGhlcnN5c3RlbXMubmV0PgorRGF0ZTogU3VuLCA2IFNlcCAyMDI2IDE5OjA0OjM5IC0wNDAwCitT dWJqZWN0OiBbUEFUQ0hdIHN0Yl9zcHJpbnRmOiBkb24ndCB3cml0ZSBidWZbLTFdIG9uIHNucHJp bnRmKGJ1ZiwgMCwgLi4uKQorIChmaXhlcyAjMTk2MykKKworVGhlIHRvcCBnYXRlIGluIFNUQl9T UFJJTlRGX0RFQ09SQVRFKHZzbnByaW50Zikgb25seSBlbnRlcmVkIHRoZSBjb3VudC1vbmx5IHBh dGggd2hlbiBib3RoIGNvdW50ID09IDAgQU5EIGJ1ZiB3YXMgTlVMTC4gQSBjYWxsZXIgcGFzc2lu ZyBhIHZhbGlkIGJ1ZmZlciB3aXRoIGNvdW50ID09IDAgKHRoZSBzaGFwZSBjYWxsZXJzIHVzZSB0 byBhc2sgJ2hvdyBiaWcgd291bGQgdGhpcyBiZT8nKSBmZWxsIHRocm91Z2ggdG8gdGhlIGVsc2Ug YnJhbmNoLCBjb21wdXRlZCBsID0gKGludCkoYy5idWYgLSBidWYpID0gMCwgaGl0IHRoZSBsID49 IGNvdW50IGNsYW1wLCBkcm9wcGVkIHRvIGwgPSBjb3VudCAtIDEgPSAtMSwgYW5kIGV4ZWN1dGVk IGJ1ZlstMV0gPSAwIC0tIG9uZSBieXRlIG91dC1vZi1ib3VuZHMgYmVmb3JlIHRoZSBjYWxsZXIn cyBidWZmZXIuCisKK1RoZSBDIHN0YW5kYXJkIGlzIGV4cGxpY2l0IHRoYXQgc25wcmludGYoYnVm LCAwLCAuLi4pIG11c3Qgbm90IHdyaXRlLiBnbGliYywgbXVzbCBhbmQgdGhlIEJTRCBzbnByaW50 ZiBhbGwgc2tpcCB0aGUgbnVsbCB0ZXJtaW5hdG9yIHdoZW4gY291bnQgPT0gMC4KKworRXh0ZW5k IHRoZSBnYXRlIHRvIGNvdW50IDw9IDAgc28gdGhlIGNvdW50LW9ubHkgcGF0aCBoYW5kbGVzIGJv dGggdGhlIG51bGwtYnVmIGFuZCB0aGUgbm9uLW51bGwtYnVmIGNhc2VzIHRoZSBzYW1lIHdheS4g VGhlIGNvdW50LW9ubHkgcGF0aCB1c2VzIHN0YnNwX19jb3VudF9jbGFtcF9jYWxsYmFjayB3aGlj aCBvbmx5IGFjY3VtdWxhdGVzIGxlbmd0aCBhbmQgbmV2ZXIgZGVyZWZlcmVuY2VzIGJ1Ziwgc28g aXQncyBzYWZlIHdpdGggYnVmID09IE5VTEwuIEJlaGF2aW9yIGZvciBjb3VudCA+IDAgaXMgdW5j aGFuZ2VkLgorCitWZXJpZmllZCB1bmRlciBBU2FuL1VCU2FuIG9uIG1hc3RlciAyYzk4MGJiNTog c3RhY2sgbGF5b3V0IHB1dHMgcGFkX2FmdGVyIGltbWVkaWF0ZWx5IGJlZm9yZSBidWY7IGJlZm9y ZSB0aGUgZml4LCBzbnByaW50ZihidWYsIDAsIC4uLikgc2V0cyBwYWRfYWZ0ZXJbMTVdIHRvIDB4 MDA7IGFmdGVyIHRoZSBmaXggaXQgc3RheXMgYXMgJ0InLiBQb3NpdGl2ZSBjb250cm9scyAobm9y bWFsIHNucHJpbnRmLCB0cnVuY2F0aW9uLCBjb3VudD0xLCBjb3VudD0wLXdpdGgtbnVsbC1idWYp IGFsbCBzdGlsbCBwYXNzLgorCitGaXhlczogIzE5NjMKK1JlcG9ydGVkLWJ5OiBKZXJyeUdXIChn aXRodWIuY29tL0plcnJ5R1cpCitTaWduZWQtb2ZmLWJ5OiBCcmFuZG9uIEJhcnJhbnRlIDxhZXRo ZXJhaUBhZXRoZXJzeXN0ZW1zLm5ldD4KKy0tLQorIHN0Yl9zcHJpbnRmLmggfCA2ICsrKysrLQor IDEgZmlsZSBjaGFuZ2VkLCA1IGluc2VydGlvbnMoKyksIDEgZGVsZXRpb24oLSkKKworZGlmZiAt LWdpdCBhL3N0Yl9zcHJpbnRmLmggYi9zdGJfc3ByaW50Zi5oCitpbmRleCBjYTQzMmE2YmNhLi42 NjI1ZDZlZWQwIDEwMDY0NAorLS0tIGEvc3RiX3NwcmludGYuaAorKysrIGIvc3RiX3NwcmludGYu aAorQEAgLTE0MzEsOCArMTQzMSwxMiBAQCBTVEJTUF9fUFVCTElDREVGIGludCBTVEJfU1BSSU5U Rl9ERUNPUkFURSggdnNucHJpbnRmICkoIGNoYXIgKiBidWYsIGludCBjb3VudCwgYworIHsKKyAg ICBzdGJzcF9fY29udGV4dCBjOworIAorLSAgIGlmICggKGNvdW50ID09IDApICYmICFidWYgKQor KyAgIGlmICggY291bnQgPD0gMCApCisgICAgeworKyAgICAgIC8vIEMgc3RhbmRhcmQ6IHNucHJp bnRmKGJ1ZiwgMCwgLi4uKSB3cml0ZXMgbm90aGluZywgcmV0dXJucyB0aGUgY291bnQKKysgICAg ICAvLyB0aGUgZnVsbCBvdXRwdXQgd291bGQgaGF2ZSB0YWtlbi4gSGFuZGxlIHRoaXMgd2hldGhl ciBvciBub3QgdGhlCisrICAgICAgLy8gY2FsbGVyIHBhc3NlZCBhIHZhbGlkIGJ1ZmZlciAtLSB3 cml0aW5nIGJ1Zltjb3VudCAtIDFdIHdpdGggY291bnQgPT0gMAorKyAgICAgIC8vIGlzIGFuIG91 dC1vZi1ib3VuZHMgd3JpdGUgYmVmb3JlIHRoZSBjYWxsZXIncyBidWZmZXIuCisgICAgICAgYy5s ZW5ndGggPSAwOworIAorICAgICAgIFNUQl9TUFJJTlRGX0RFQ09SQVRFKCB2c3ByaW50ZmNiICko IHN0YnNwX19jb3VudF9jbGFtcF9jYWxsYmFjaywgJmMsIGMudG1wLCBmbXQsIHZhICk7CgpkaWZm IC0tZ2l0IGEvc3RiLnNwZWMgYi9zdGIuc3BlYwppbmRleCAxOWQyOWNjLi5jZjU0NmE5IDEwMDY0 NAotLS0gYS9zdGIuc3BlYworKysgYi9zdGIuc3BlYwpAQCAtMjIzLDYgKzIyMywxOCBAQCBQYXRj aDIwOiAgICAgICAgJXt1cmx9L3B1bGwvMTg2My5wYXRjaAogIyBodHRwczovL2dpdGh1Yi5jb20v bm90aGluZ3Mvc3RiL2lzc3Vlcy8xOTI5CiBQYXRjaDIxOiAgICAgICAgICBpc3N1ZS0xOTI5LnBh dGNoCiAKKyMgc3RiX3NwcmludGY6IGRvbid0IHdyaXRlIGJ1ZlstMV0gb24gc25wcmludGYoYnVm LCAwLCAuLi4pIChmaXhlcyAjMTk2MykKKyMgaHR0cHM6Ly9naXRodWIuY29tL25vdGhpbmdzL3N0 Yi9wdWxsLzE5OTUKKyMKKyMgRml4ZXMgQ1ZFLTIwMjYtNzk1MTY6CisjCisjIFtTRUNVUklUWV0g c3Ric3Bfc25wcmludGYgd2l0aCBjb3VudD0wIHdyaXRlcyBudWxsIHRlcm1pbmF0b3IgYmVmb3Jl IGJ1ZmZlcgorIyBodHRwczovL2dpdGh1Yi5jb20vbm90aGluZ3Mvc3RiL2lzc3Vlcy8xOTYzCisj CisjIFBhdGNoIHJlamVjdGVkIHVwc3RyZWFtIHdpdGhvdXQgY29tbWVudCwgcHJlc3VtYWJseSBi ZWNhdXNlIHRoZSBQUiB3YXMKKyMgZHJhZnRlZCB3aXRoIEFJL0xMTSBhc3Npc3RhbmNlLgorUGF0 Y2g6ICAgICAgICAgICV7dXJsfS9wdWxsLzE5OTUucGF0Y2gKKwogJWdsb2JhbCBzdGJfY19sZXhl cl92ZXJzaW9uIDAuMTIKICVnbG9iYWwgc3RiX2Nvbm5lY3RlZF9jb21wb25lbnRzX3ZlcnNpb24g MC45NgogJWdsb2JhbCBzdGJfZGl2aWRlX3ZlcnNpb24gMC45NAo=