From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Michal Ruprich To: git-commits@fedoraproject.org Subject: [rpms/wget1] rawhide: Fix for CVE-2026-16599 Date: Mon, 14 Sep 2026 14:18:50 GMT Message-ID: <178939553061.1.9475964926341778137.rpms-wget1-7e171a9a1549@fedoraproject.org> List-ID: X-Git-Repo: rpms/wget1 X-Git-Branch: rawhide X-Git-Rev: 7e171a9a15490dfbf320257290e6e5d9f6677f39 QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvd2dldDEKQnJhbmNo IDogcmF3aGlkZQpDb21taXQgOiA3ZTE3MWE5YTE1NDkwZGZiZjMyMDI1NzI5MGU2ZTVkOWY2Njc3 ZjM5CkF1dGhvciA6IE1pY2hhbCBSdXByaWNoIDxtcnVwcmljaEByZWRoYXQuY29tPgpEYXRlICAg OiAyMDI2LTA5LTE0VDEzOjEzOjM0KzAyOjAwClN0YXRzICA6ICs2OC8tMSBpbiAyIGZpbGUocykK VVJMICAgIDogaHR0cHM6Ly9zcmMuZmVkb3JhcHJvamVjdC5vcmcvcnBtcy93Z2V0MS9jLzdlMTcx YTlhMTU0OTBkZmJmMzIwMjU3MjkwZTZlNWQ5ZjY2NzdmMzk/YnJhbmNoPXJhd2hpZGUKCkxvZzoK Rml4IGZvciBDVkUtMjAyNi0xNjU5OQoKLS0tCmRpZmYgLS1naXQgYS93Z2V0LTEuMjUtZml4LWN2 ZS0yMDI2LTE2NTk5LnBhdGNoIGIvd2dldC0xLjI1LWZpeC1jdmUtMjAyNi0xNjU5OS5wYXRjaApu ZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwLi4xNGFjYmIwCi0tLSAvZGV2L251bGwK KysrIGIvd2dldC0xLjI1LWZpeC1jdmUtMjAyNi0xNjU5OS5wYXRjaApAQCAtMCwwICsxLDYyIEBA CitGcm9tIGU5Njk3ZDk4ZTcyNDliMGY2OGE2YmUwNDBhNGYzZGNjNWJjMTAxZmEgTW9uIFNlcCAx NyAwMDowMDowMCAyMDAxCitGcm9tOiA9P1VURi04P3E/VGltPTIwUj1DMz1CQ2hzZW4/PSA8dGlt LnJ1ZWhzZW5AZ214LmRlPgorRGF0ZTogU2F0LCAyMCBKdW4gMjAyNiAxNDozOTo1NCArMDIwMAor U3ViamVjdDogW1BBVENIXSBGaXggc2VydmVyLWNvbnRyb2xsZWQgdW5ib3VuZGVkIE1ENSBsb29w IGluIEZUUCBPUElFCitNSU1FLVZlcnNpb246IDEuMAorQ29udGVudC1UeXBlOiB0ZXh0L3BsYWlu OyBjaGFyc2V0PVVURi04CitDb250ZW50LVRyYW5zZmVyLUVuY29kaW5nOiA4Yml0CisKKyogc3Jj L2Z0cC1iYXNpYy5jIChmdHBfbG9naW4pOiBMaW1pdCB0aGUgc2tleSBzZXF1ZW5jZSB0byA5OTk5 LgorCitSZXBvcnQ6Cit3Z2V0IGFjY2VwdHMgYW4gdW5ib3VuZGVkIHNlcnZlci1jb250cm9sbGVk IGludGVnZXIgYXMgdGhlIGl0ZXJhdGlvbgorY291bnQgZm9yIGl0cyBPUElFL1MtS0VZIE1ENSBr ZXktZGVyaXZhdGlvbiBsb29wLiBObyB1cHBlciBib3VuZCBpcworZW5mb3JjZWQgb24gdGhlIHNl cXVlbmNlIG51bWJlciBzdXBwbGllZCBieSB0aGUgc2VydmVyIGluIHRoZSBGVFAKK2NoYWxsZW5n ZSBsaW5lLiBUaGUgdmFsdWUgaXMgcGFzc2VkIGRpcmVjdGx5IHRvIHNrZXlfcmVzcG9uc2UoKSBh cyBhCitsb29wIGNvdW50ZXIsIGNhdXNpbmcgd2dldCB0byBwZXJmb3JtIHVwIHRvIH4yLjEgYmls bGlvbiBmdWxsIE1ENQorY29tcHV0YXRpb25zIGJlZm9yZSByZXNwb25kaW5nIHRvIHRoZSBhdXRo ZW50aWNhdGlvbiBjaGFsbGVuZ2UuCisKK1JlcG9ydGVkLWJ5OiBNaWNoYcWCIE1hamNocm93aWN6 IGFuZCBNYXJjaW4gV3ljemVjaG93c2tpCistLS0KKyBzcmMvZnRwLWJhc2ljLmMgfCAxNSArKysr KysrKysrKy0tLS0KKyAxIGZpbGUgY2hhbmdlZCwgMTEgaW5zZXJ0aW9ucygrKSwgNCBkZWxldGlv bnMoLSkKKworZGlmZiAtLWdpdCBhL3NyYy9mdHAtYmFzaWMuYyBiL3NyYy9mdHAtYmFzaWMuYwor aW5kZXggMGY0YmI4MjEuLmFmMzhhNjlhIDEwMDY0NAorLS0tIGEvc3JjL2Z0cC1iYXNpYy5jCisr KysgYi9zcmMvZnRwLWJhc2ljLmMKK0BAIC0yMDQsMTIgKzIwNCwxMSBAQCBmdHBfbG9naW4gKGlu dCBjc29jaywgY29uc3QgY2hhciAqYWNjLCBjb25zdCBjaGFyICpwYXNzKQorICAgICAgICIzMzEg cy9rZXkgIiwKKyAgICAgICAiMzMxIG9waWVrZXkgIgorICAgICB9OworLSAgICBzaXplX3QgaTsK KyAgICAgY29uc3QgY2hhciAqc2VlZCA9IE5VTEw7CisgCistICAgIGZvciAoaSA9IDA7IGkgPCBj b3VudG9mIChza2V5X2hlYWQpOyBpKyspCisrICAgIGZvciAoc2l6ZV90IGkgPSAwOyBpIDwgY291 bnRvZiAoc2tleV9oZWFkKTsgaSsrKQorICAgICAgIHsKKy0gICAgICAgIGludCBsID0gc3RybGVu IChza2V5X2hlYWRbaV0pOworKyAgICAgICAgc2l6ZV90IGwgPSBzdHJsZW4gKHNrZXlfaGVhZFtp XSk7CisgICAgICAgICBpZiAoMCA9PSBjX3N0cm5jYXNlY21wIChza2V5X2hlYWRbaV0sIHJlc3Bs aW5lLCBsKSkKKyAgICAgICAgICAgeworICAgICAgICAgICAgIHNlZWQgPSByZXNwbGluZSArIGw7 CitAQCAtMjIyLDcgKzIyMSwxNSBAQCBmdHBfbG9naW4gKGludCBjc29jaywgY29uc3QgY2hhciAq YWNjLCBjb25zdCBjaGFyICpwYXNzKQorIAorICAgICAgICAgLyogRXh0cmFjdCB0aGUgc2VxdWVu Y2UgZnJvbSBTRUVELiAgKi8KKyAgICAgICAgIGZvciAoOyBjX2lzZGlnaXQgKCpzZWVkKTsgc2Vl ZCsrKQorLSAgICAgICAgICBza2V5X3NlcXVlbmNlID0gMTAgKiBza2V5X3NlcXVlbmNlICsgKnNl ZWQgLSAnMCc7CisrICAgICAgICAgIHsKKysgICAgICAgICAgICBza2V5X3NlcXVlbmNlID0gMTAg KiBza2V5X3NlcXVlbmNlICsgKnNlZWQgLSAnMCc7CisrICAgICAgICAgICAgaWYgKHNrZXlfc2Vx dWVuY2UgPiA5OTk5KQorKyAgICAgICAgICAgICAgeworKyAgICAgICAgICAgICAgICB4ZnJlZSAo cmVzcGxpbmUpOworKyAgICAgICAgICAgICAgICByZXR1cm4gRlRQTE9HUkVGVVNFRDsKKysgICAg ICAgICAgICAgIH0KKysgICAgICAgICAgfQorKworICAgICAgICAgaWYgKCpzZWVkID09ICcgJykK KyAgICAgICAgICAgKytzZWVkOworICAgICAgICAgZWxzZQorLS0gCitHaXRMYWIKKwoKZGlmZiAt LWdpdCBhL3dnZXQxLnNwZWMgYi93Z2V0MS5zcGVjCmluZGV4IDEwY2M0YTcuLmYwZjkyZDQgMTAw NjQ0Ci0tLSBhL3dnZXQxLnNwZWMKKysrIGIvd2dldDEuc3BlYwpAQCAtMSw3ICsxLDcgQEAKIFN1 bW1hcnk6IEEgdXRpbGl0eSBmb3IgcmV0cmlldmluZyBmaWxlcyB1c2luZyB0aGUgSFRUUCBvciBG VFAgcHJvdG9jb2xzCiBOYW1lOiB3Z2V0MQogVmVyc2lvbjogMS4yNS4wCi1SZWxlYXNlOiA1JXs/ ZGlzdH0KK1JlbGVhc2U6IDYlez9kaXN0fQogIyBHZW5lcmFsbHkgd2dldCBpcyBkaXN0cmlidXRl ZCB1bmRlciBHUEx2MyBvciBsYXRlciBidXQgdGhlcmUgYXJlIGZpbGVzIGluIGxpYi8gZGlyZWN0 b3J5CiAjIHdoaWNoIGFyZSB1bmRlciBMR1BMdjIuMSBvciBsYXRlciBhbmQgYXJlIGFjdHVhbGx5 IGJ1aWx0IGludG8gdGhlIHJlc3VsdGluZyBycG0uCiAjIFRoaXMgdmVyc2lvbiBvZiB3Z2V0IGlz IGJ1aWx0IHdpdGggZ251dGxzIHNvIEkgYmVsaWV2ZSB0aGF0IHRoZSAnd2l0aCBvcGVuc3NsJwpA QCAtMTYsNiArMTYsOCBAQCBQYXRjaDM6IHdnZXQtMS4yNS1maXgtY3ZlLTIwMjYtNTg0NzAucGF0 Y2gKIFBhdGNoNDogd2dldC0xLjI1LWZpeC1jdmUtMjAyNi01ODQ3MS5wYXRjaAogUGF0Y2g1OiB3 Z2V0LTEuMjUtZml4LWN2ZS0yMDI2LTU4NDcyLnBhdGNoCiBQYXRjaDY6IHdnZXQtMS4yNC41LW5v LW5ldHRsZS5wYXRjaAorIyBodHRwczovL2dpdGxhYi5jb20vZ251d2dldC93Z2V0Ly0vY29tbWl0 L2U5Njk3ZDk4CitQYXRjaDc6IHdnZXQtMS4yNS1maXgtY3ZlLTIwMjYtMTY1OTkucGF0Y2gKIAog UHJvdmlkZXM6IGJ1bmRsZWQoZ251bGliKSAKICMgbmVlZGVkIGZvciB0ZXN0IHN1aXRlCkBAIC0x MTcsNiArMTE5LDkgQEAgZWNobyAiLnNvIG1hbjEvJXtuYW1lfS4xIiA+ICV7YnVpbGRyb290fSV7 X21hbmRpcn0vbWFuMS93Z2V0LjEKICVjb25maWcobm9yZXBsYWNlKSAle19zeXNjb25mZGlyfS93 Z2V0cmMKIAogJWNoYW5nZWxvZworKiBNb24gU2VwIDE0IDIwMjYgTWljaGFsIFJ1cHJpY2ggPG1y dXByaWNoQHJlZGhhdC5jb20+IC0gMS4yNS4wLTYKKy0gRml4IGZvciBDVkUtMjAyNi0xNjU5OQor CiAqIFR1ZSBBdWcgMTggMjAyNiBZYWFrb3YgU2Vsa293aXR6IDx5c2Vsa293aUByZWRoYXQuY29t PiAtIDEuMjUuMC01CiAtIFVzZSBnbnV0bHMgZm9yIE5UTE0gY3J5cHRvCiAK