From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Michal Ruprich To: git-commits@fedoraproject.org Subject: [rpms/wget1] f44: Fix for CVE-2026-16599 Date: Mon, 14 Sep 2026 13:51:40 GMT Message-ID: <178939390038.1.13761516749681132333.rpms-wget1-b7173da051c2@fedoraproject.org> List-ID: X-Git-Repo: rpms/wget1 X-Git-Branch: f44 X-Git-Rev: b7173da051c2cdd74534c2a1d447b23c173e413d QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvd2dldDEKQnJhbmNo IDogZjQ0CkNvbW1pdCA6IGI3MTczZGEwNTFjMmNkZDc0NTM0YzJhMWQ0NDdiMjNjMTczZTQxM2QK QXV0aG9yIDogTWljaGFsIFJ1cHJpY2ggPG1ydXByaWNoQHJlZGhhdC5jb20+CkRhdGUgICA6IDIw MjYtMDktMTRUMTM6MDk6MTgrMDI6MDAKU3RhdHMgIDogKzY4Ly0xIGluIDIgZmlsZShzKQpVUkwg ICAgOiBodHRwczovL3NyYy5mZWRvcmFwcm9qZWN0Lm9yZy9ycG1zL3dnZXQxL2MvYjcxNzNkYTA1 MWMyY2RkNzQ1MzRjMmExZDQ0N2IyM2MxNzNlNDEzZD9icmFuY2g9ZjQ0CgpMb2c6CkZpeCBmb3Ig Q1ZFLTIwMjYtMTY1OTkKCi0tLQpkaWZmIC0tZ2l0IGEvd2dldC0xLjI1LWZpeC1jdmUtMjAyNi0x NjU5OS5wYXRjaCBiL3dnZXQtMS4yNS1maXgtY3ZlLTIwMjYtMTY1OTkucGF0Y2gKbmV3IGZpbGUg bW9kZSAxMDA2NDQKaW5kZXggMDAwMDAwMC4uMTRhY2JiMAotLS0gL2Rldi9udWxsCisrKyBiL3dn ZXQtMS4yNS1maXgtY3ZlLTIwMjYtMTY1OTkucGF0Y2gKQEAgLTAsMCArMSw2MiBAQAorRnJvbSBl OTY5N2Q5OGU3MjQ5YjBmNjhhNmJlMDQwYTRmM2RjYzViYzEwMWZhIE1vbiBTZXAgMTcgMDA6MDA6 MDAgMjAwMQorRnJvbTogPT9VVEYtOD9xP1RpbT0yMFI9QzM9QkNoc2VuPz0gPHRpbS5ydWVoc2Vu QGdteC5kZT4KK0RhdGU6IFNhdCwgMjAgSnVuIDIwMjYgMTQ6Mzk6NTQgKzAyMDAKK1N1YmplY3Q6 IFtQQVRDSF0gRml4IHNlcnZlci1jb250cm9sbGVkIHVuYm91bmRlZCBNRDUgbG9vcCBpbiBGVFAg T1BJRQorTUlNRS1WZXJzaW9uOiAxLjAKK0NvbnRlbnQtVHlwZTogdGV4dC9wbGFpbjsgY2hhcnNl dD1VVEYtOAorQ29udGVudC1UcmFuc2Zlci1FbmNvZGluZzogOGJpdAorCisqIHNyYy9mdHAtYmFz aWMuYyAoZnRwX2xvZ2luKTogTGltaXQgdGhlIHNrZXkgc2VxdWVuY2UgdG8gOTk5OS4KKworUmVw b3J0Ogord2dldCBhY2NlcHRzIGFuIHVuYm91bmRlZCBzZXJ2ZXItY29udHJvbGxlZCBpbnRlZ2Vy IGFzIHRoZSBpdGVyYXRpb24KK2NvdW50IGZvciBpdHMgT1BJRS9TLUtFWSBNRDUga2V5LWRlcml2 YXRpb24gbG9vcC4gTm8gdXBwZXIgYm91bmQgaXMKK2VuZm9yY2VkIG9uIHRoZSBzZXF1ZW5jZSBu dW1iZXIgc3VwcGxpZWQgYnkgdGhlIHNlcnZlciBpbiB0aGUgRlRQCitjaGFsbGVuZ2UgbGluZS4g VGhlIHZhbHVlIGlzIHBhc3NlZCBkaXJlY3RseSB0byBza2V5X3Jlc3BvbnNlKCkgYXMgYQorbG9v cCBjb3VudGVyLCBjYXVzaW5nIHdnZXQgdG8gcGVyZm9ybSB1cCB0byB+Mi4xIGJpbGxpb24gZnVs bCBNRDUKK2NvbXB1dGF0aW9ucyBiZWZvcmUgcmVzcG9uZGluZyB0byB0aGUgYXV0aGVudGljYXRp b24gY2hhbGxlbmdlLgorCitSZXBvcnRlZC1ieTogTWljaGHFgiBNYWpjaHJvd2ljeiBhbmQgTWFy Y2luIFd5Y3plY2hvd3NraQorLS0tCisgc3JjL2Z0cC1iYXNpYy5jIHwgMTUgKysrKysrKysrKyst LS0tCisgMSBmaWxlIGNoYW5nZWQsIDExIGluc2VydGlvbnMoKyksIDQgZGVsZXRpb25zKC0pCisK K2RpZmYgLS1naXQgYS9zcmMvZnRwLWJhc2ljLmMgYi9zcmMvZnRwLWJhc2ljLmMKK2luZGV4IDBm NGJiODIxLi5hZjM4YTY5YSAxMDA2NDQKKy0tLSBhL3NyYy9mdHAtYmFzaWMuYworKysrIGIvc3Jj L2Z0cC1iYXNpYy5jCitAQCAtMjA0LDEyICsyMDQsMTEgQEAgZnRwX2xvZ2luIChpbnQgY3NvY2ss IGNvbnN0IGNoYXIgKmFjYywgY29uc3QgY2hhciAqcGFzcykKKyAgICAgICAiMzMxIHMva2V5ICIs CisgICAgICAgIjMzMSBvcGlla2V5ICIKKyAgICAgfTsKKy0gICAgc2l6ZV90IGk7CisgICAgIGNv bnN0IGNoYXIgKnNlZWQgPSBOVUxMOworIAorLSAgICBmb3IgKGkgPSAwOyBpIDwgY291bnRvZiAo c2tleV9oZWFkKTsgaSsrKQorKyAgICBmb3IgKHNpemVfdCBpID0gMDsgaSA8IGNvdW50b2YgKHNr ZXlfaGVhZCk7IGkrKykKKyAgICAgICB7CistICAgICAgICBpbnQgbCA9IHN0cmxlbiAoc2tleV9o ZWFkW2ldKTsKKysgICAgICAgIHNpemVfdCBsID0gc3RybGVuIChza2V5X2hlYWRbaV0pOworICAg ICAgICAgaWYgKDAgPT0gY19zdHJuY2FzZWNtcCAoc2tleV9oZWFkW2ldLCByZXNwbGluZSwgbCkp CisgICAgICAgICAgIHsKKyAgICAgICAgICAgICBzZWVkID0gcmVzcGxpbmUgKyBsOworQEAgLTIy Miw3ICsyMjEsMTUgQEAgZnRwX2xvZ2luIChpbnQgY3NvY2ssIGNvbnN0IGNoYXIgKmFjYywgY29u c3QgY2hhciAqcGFzcykKKyAKKyAgICAgICAgIC8qIEV4dHJhY3QgdGhlIHNlcXVlbmNlIGZyb20g U0VFRC4gICovCisgICAgICAgICBmb3IgKDsgY19pc2RpZ2l0ICgqc2VlZCk7IHNlZWQrKykKKy0g ICAgICAgICAgc2tleV9zZXF1ZW5jZSA9IDEwICogc2tleV9zZXF1ZW5jZSArICpzZWVkIC0gJzAn OworKyAgICAgICAgICB7CisrICAgICAgICAgICAgc2tleV9zZXF1ZW5jZSA9IDEwICogc2tleV9z ZXF1ZW5jZSArICpzZWVkIC0gJzAnOworKyAgICAgICAgICAgIGlmIChza2V5X3NlcXVlbmNlID4g OTk5OSkKKysgICAgICAgICAgICAgIHsKKysgICAgICAgICAgICAgICAgeGZyZWUgKHJlc3BsaW5l KTsKKysgICAgICAgICAgICAgICAgcmV0dXJuIEZUUExPR1JFRlVTRUQ7CisrICAgICAgICAgICAg ICB9CisrICAgICAgICAgIH0KKysKKyAgICAgICAgIGlmICgqc2VlZCA9PSAnICcpCisgICAgICAg ICAgICsrc2VlZDsKKyAgICAgICAgIGVsc2UKKy0tIAorR2l0TGFiCisKCmRpZmYgLS1naXQgYS93 Z2V0MS5zcGVjIGIvd2dldDEuc3BlYwppbmRleCAxNGE2ZjdkLi40NDAyMTg1IDEwMDY0NAotLS0g YS93Z2V0MS5zcGVjCisrKyBiL3dnZXQxLnNwZWMKQEAgLTEsNyArMSw3IEBACiBTdW1tYXJ5OiBB IHV0aWxpdHkgZm9yIHJldHJpZXZpbmcgZmlsZXMgdXNpbmcgdGhlIEhUVFAgb3IgRlRQIHByb3Rv Y29scwogTmFtZTogd2dldDEKIFZlcnNpb246IDEuMjUuMAotUmVsZWFzZTogNCV7P2Rpc3R9CitS ZWxlYXNlOiA1JXs/ZGlzdH0KICMgR2VuZXJhbGx5IHdnZXQgaXMgZGlzdHJpYnV0ZWQgdW5kZXIg R1BMdjMgb3IgbGF0ZXIgYnV0IHRoZXJlIGFyZSBmaWxlcyBpbiBsaWIvIGRpcmVjdG9yeQogIyB3 aGljaCBhcmUgdW5kZXIgTEdQTHYyLjEgb3IgbGF0ZXIgYW5kIGFyZSBhY3R1YWxseSBidWlsdCBp bnRvIHRoZSByZXN1bHRpbmcgcnBtLgogIyBUaGlzIHZlcnNpb24gb2Ygd2dldCBpcyBidWlsdCB3 aXRoIGdudXRscyBzbyBJIGJlbGlldmUgdGhhdCB0aGUgJ3dpdGggb3BlbnNzbCcKQEAgLTE1LDYg KzE1LDggQEAgUGF0Y2gyOiB3Z2V0LTEuMjUtZml4LWN2ZS0yMDI2LTE1MTQ2LnBhdGNoCiBQYXRj aDM6IHdnZXQtMS4yNS1maXgtY3ZlLTIwMjYtNTg0NzAucGF0Y2gKIFBhdGNoNDogd2dldC0xLjI1 LWZpeC1jdmUtMjAyNi01ODQ3MS5wYXRjaAogUGF0Y2g1OiB3Z2V0LTEuMjUtZml4LWN2ZS0yMDI2 LTU4NDcyLnBhdGNoCisjIGh0dHBzOi8vZ2l0bGFiLmNvbS9nbnV3Z2V0L3dnZXQvLS9jb21taXQv ZTk2OTdkOTgKK1BhdGNoNjogd2dldC0xLjI1LWZpeC1jdmUtMjAyNi0xNjU5OS5wYXRjaAogCiBQ cm92aWRlczogYnVuZGxlZChnbnVsaWIpIAogIyBuZWVkZWQgZm9yIHRlc3Qgc3VpdGUKQEAgLTEx Niw2ICsxMTgsOSBAQCBlY2hvICIuc28gbWFuMS8le25hbWV9LjEiID4gJXtidWlsZHJvb3R9JXtf bWFuZGlyfS9tYW4xL3dnZXQuMQogJWNvbmZpZyhub3JlcGxhY2UpICV7X3N5c2NvbmZkaXJ9L3dn ZXRyYwogCiAlY2hhbmdlbG9nCisqIE1vbiBTZXAgMTQgMjAyNiBNaWNoYWwgUnVwcmljaCA8bXJ1 cHJpY2hAcmVkaGF0LmNvbT4gLSAxLjI1LjAtNQorLSBGaXggZm9yIENWRS0yMDI2LTE2NTk5CisK ICogVGh1IEp1bCAxNiAyMDI2IE1pY2hhbCBSdXByaWNoIDxtcnVwcmljaEByZWRoYXQuY29tPiAt IDEuMjUuMC00CiAtIEZpeCBmb3IgQ1ZFLTIwMjYtMTUxNDYsIENWRS0yMDI2LTU4NDcwLCBDVkUt MjAyNi01ODQ3MSwgQ1ZFLTIwMjYtNTg0NzIKIAo=