From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Sandro Mani To: git-commits@fedoraproject.org Subject: [rpms/mingw-gdk-pixbuf] rawhide: Apply patches for CVE-2026-16768 and CVE-2026-81893 Date: Wed, 16 Sep 2026 07:08:27 GMT Message-ID: <178954250771.1.5657333093846680903.rpms-mingw-gdk-pixbuf-06e5ede59d21@fedoraproject.org> List-ID: X-Git-Repo: rpms/mingw-gdk-pixbuf X-Git-Branch: rawhide X-Git-Rev: 06e5ede59d218ebb195e5e6b50b199d94b2f02d1 QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvbWluZ3ctZ2RrLXBp eGJ1ZgpCcmFuY2ggOiByYXdoaWRlCkNvbW1pdCA6IDA2ZTVlZGU1OWQyMThlYmIxOTVlNWU2YjUw YjE5OWQ5NGIyZjAyZDEKQXV0aG9yIDogU2FuZHJvIE1hbmkgPG1hbmlzYW5kcm9AZ21haWwuY29t PgpEYXRlICAgOiAyMDI2LTA5LTE2VDA5OjA4OjE4KzAyOjAwClN0YXRzICA6ICsxMDEvLTEgaW4g MyBmaWxlKHMpClVSTCAgICA6IGh0dHBzOi8vc3JjLmZlZG9yYXByb2plY3Qub3JnL3JwbXMvbWlu Z3ctZ2RrLXBpeGJ1Zi9jLzA2ZTVlZGU1OWQyMThlYmIxOTVlNWU2YjUwYjE5OWQ5NGIyZjAyZDE/ YnJhbmNoPXJhd2hpZGUKCkxvZzoKQXBwbHkgcGF0Y2hlcyBmb3IgQ1ZFLTIwMjYtMTY3NjggYW5k IENWRS0yMDI2LTgxODkzCgotLS0KZGlmZiAtLWdpdCBhLzI3OS5wYXRjaCBiLzI3OS5wYXRjaApu ZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwLi44YmFjNmU0Ci0tLSAvZGV2L251bGwK KysrIGIvMjc5LnBhdGNoCkBAIC0wLDAgKzEsODAgQEAKK2RpZmYgLXJ1cE4gLS1uby1kZXJlZmVy ZW5jZSBnZGstcGl4YnVmLTIuNDQuOC9nZGstcGl4YnVmL2lvLWljby5jIGdkay1waXhidWYtMi40 NC44LW5ldy9nZGstcGl4YnVmL2lvLWljby5jCistLS0gZ2RrLXBpeGJ1Zi0yLjQ0LjgvZ2RrLXBp eGJ1Zi9pby1pY28uYwkyMDI2LTA4LTEyIDE1OjE2OjU3LjAwMDAwMDAwMCArMDIwMAorKysrIGdk ay1waXhidWYtMi40NC44LW5ldy9nZGstcGl4YnVmL2lvLWljby5jCTIwMjYtMDktMTYgMDk6MDc6 MzYuNDM3ODYyNDM2ICswMjAwCitAQCAtNzI1LDYgKzcyNSw3IEBAIHN0YXRpYyB2b2lkIE9uZUxp bmU4KHN0cnVjdCBpY29fcHJvZ3Jlc3MKKyAJZ2ludCBYOworIAlndWNoYXIgKlBpeGVsczsKKyAJ Z3NpemUgcm93c3RyaWRlID0gZ2RrX3BpeGJ1Zl9nZXRfcm93c3RyaWRlIChjb250ZXh0LT5waXhi dWYpOworKwlnaW50IHBhbGV0dGVfc2l6ZSA9IChjb250ZXh0LT5IZWFkZXJTaXplIC0gSU5GT0hF QURFUl9TSVpFIC0gY29udGV4dC0+RElCb2Zmc2V0KSAvIDQ7CisgCisgCVggPSAwOworIAlpZiAo Y29udGV4dC0+SGVhZGVyLk5lZ2F0aXZlID09IDApCitAQCAtNzM0LDEzICs3MzUsMTcgQEAgc3Rh dGljIHZvaWQgT25lTGluZTgoc3RydWN0IGljb19wcm9ncmVzcworIAkJUGl4ZWxzID0gKGdka19w aXhidWZfZ2V0X3BpeGVscyAoY29udGV4dC0+cGl4YnVmKSArCisgCQkJICByb3dzdHJpZGUgKiBj b250ZXh0LT5MaW5lcyk7CisgCXdoaWxlIChYIDwgY29udGV4dC0+SGVhZGVyLndpZHRoKSB7Cisr CQlndWludDggaWR4ID0gY29udGV4dC0+TGluZUJ1ZltYXTsKKysJCWlmIChpZHggPj0gcGFsZXR0 ZV9zaXplKQorKwkJCWlkeCA9IDA7CisrCisgCQkvKiBUaGUgam95cyBvZiBoYXZpbmcgYSBCR1Ig Ynl0ZW9yZGVyICovCisgCQlQaXhlbHNbWCAqIDQgKyAwXSA9CistCQkgICAgY29udGV4dC0+SGVh ZGVyQnVmWzQgKiBjb250ZXh0LT5MaW5lQnVmW1hdICsgSU5GT0hFQURFUl9TSVpFICsgMiArIGNv bnRleHQtPkRJQm9mZnNldF07CisrCQkgICAgY29udGV4dC0+SGVhZGVyQnVmWzQgKiBpZHggKyBJ TkZPSEVBREVSX1NJWkUgKyAyICsgY29udGV4dC0+RElCb2Zmc2V0XTsKKyAJCVBpeGVsc1tYICog NCArIDFdID0KKy0JCSAgICBjb250ZXh0LT5IZWFkZXJCdWZbNCAqIGNvbnRleHQtPkxpbmVCdWZb WF0gKyBJTkZPSEVBREVSX1NJWkUgKyAxICtjb250ZXh0LT5ESUJvZmZzZXRdOworKwkJICAgIGNv bnRleHQtPkhlYWRlckJ1Zls0ICogaWR4ICsgSU5GT0hFQURFUl9TSVpFICsgMSArY29udGV4dC0+ RElCb2Zmc2V0XTsKKyAJCVBpeGVsc1tYICogNCArIDJdID0KKy0JCSAgICBjb250ZXh0LT5IZWFk ZXJCdWZbNCAqIGNvbnRleHQtPkxpbmVCdWZbWF0gKyBJTkZPSEVBREVSX1NJWkUgK2NvbnRleHQt PkRJQm9mZnNldF07CisrCQkgICAgY29udGV4dC0+SGVhZGVyQnVmWzQgKiBpZHggKyBJTkZPSEVB REVSX1NJWkUgK2NvbnRleHQtPkRJQm9mZnNldF07CisgCQlQaXhlbHNbWCAqIDQgKyAzXSA9IDB4 ZmY7CisgCQlYKys7CisgCX0KK0BAIC03NTAsNiArNzU1LDcgQEAgc3RhdGljIHZvaWQgT25lTGlu ZTQoc3RydWN0IGljb19wcm9ncmVzcworIAlnaW50IFg7CisgCWd1Y2hhciAqUGl4ZWxzOworIAln c2l6ZSByb3dzdHJpZGUgPSBnZGtfcGl4YnVmX2dldF9yb3dzdHJpZGUgKGNvbnRleHQtPnBpeGJ1 Zik7CisrCWdpbnQgcGFsZXR0ZV9zaXplID0gKGNvbnRleHQtPkhlYWRlclNpemUgLSBJTkZPSEVB REVSX1NJWkUgLSBjb250ZXh0LT5ESUJvZmZzZXQpIC8gNDsKKyAKKyAJWCA9IDA7CisgCWlmIChj b250ZXh0LT5IZWFkZXIuTmVnYXRpdmUgPT0gMCkKK0BAIC03NjEsMjUgKzc2NywzMiBAQCBzdGF0 aWMgdm9pZCBPbmVMaW5lNChzdHJ1Y3QgaWNvX3Byb2dyZXNzCisgCQorIAl3aGlsZSAoWCA8IGNv bnRleHQtPkhlYWRlci53aWR0aCkgeworIAkJZ3VjaGFyIFBpeDsKKysJCWd1aW50OCBpZHg7Cisg CQkKKyAJCVBpeCA9IGNvbnRleHQtPkxpbmVCdWZbWC8yXTsKKysJCWlkeCA9IFBpeCA+PiA0Owor KwkJaWYgKGlkeCA+PSBwYWxldHRlX3NpemUpCisrCQkJaWR4ID0gMDsKKyAKKyAJCVBpeGVsc1tY ICogNCArIDBdID0KKy0JCSAgICBjb250ZXh0LT5IZWFkZXJCdWZbNCAqIChQaXg+PjQpICsgSU5G T0hFQURFUl9TSVpFICsgMiArIGNvbnRleHQtPkRJQm9mZnNldF07CisrCQkgICAgY29udGV4dC0+ SGVhZGVyQnVmWzQgKiBpZHggKyBJTkZPSEVBREVSX1NJWkUgKyAyICsgY29udGV4dC0+RElCb2Zm c2V0XTsKKyAJCVBpeGVsc1tYICogNCArIDFdID0KKy0JCSAgICBjb250ZXh0LT5IZWFkZXJCdWZb NCAqIChQaXg+PjQpICsgSU5GT0hFQURFUl9TSVpFICsgMSArY29udGV4dC0+RElCb2Zmc2V0XTsK KysJCSAgICBjb250ZXh0LT5IZWFkZXJCdWZbNCAqIGlkeCArIElORk9IRUFERVJfU0laRSArIDEg K2NvbnRleHQtPkRJQm9mZnNldF07CisgCQlQaXhlbHNbWCAqIDQgKyAyXSA9CistCQkgICAgY29u dGV4dC0+SGVhZGVyQnVmWzQgKiAoUGl4Pj40KSArIElORk9IRUFERVJfU0laRSArIGNvbnRleHQt PkRJQm9mZnNldF07CisrCQkgICAgY29udGV4dC0+SGVhZGVyQnVmWzQgKiBpZHggKyBJTkZPSEVB REVSX1NJWkUgKyBjb250ZXh0LT5ESUJvZmZzZXRdOworIAkJUGl4ZWxzW1ggKiA0ICsgM10gPSAw eGZmOworIAkJWCsrOworLQkJaWYgKFg8Y29udGV4dC0+SGVhZGVyLndpZHRoKSB7IAorKwkJaWYg KFg8Y29udGV4dC0+SGVhZGVyLndpZHRoKSB7CisgCQkJLyogSGFuZGxlIHRoZSBvdGhlciA0IGJp dCBwaXhlbCBvbmx5IHdoZW4gdGhlcmUgaXMgb25lICovCisrCQkJaWR4ID0gUGl4ICYgMTU7Cisr CQkJaWYgKGlkeCA+PSBwYWxldHRlX3NpemUpCisrCQkJCWlkeCA9IDA7CisgCQkJUGl4ZWxzW1gg KiA0ICsgMF0gPQorLQkJCSAgICBjb250ZXh0LT5IZWFkZXJCdWZbNCAqIChQaXgmMTUpICsgSU5G T0hFQURFUl9TSVpFICsgMiArIGNvbnRleHQtPkRJQm9mZnNldF07CisrCQkJICAgIGNvbnRleHQt PkhlYWRlckJ1Zls0ICogaWR4ICsgSU5GT0hFQURFUl9TSVpFICsgMiArIGNvbnRleHQtPkRJQm9m ZnNldF07CisgCQkJUGl4ZWxzW1ggKiA0ICsgMV0gPQorLQkJCSAgICBjb250ZXh0LT5IZWFkZXJC dWZbNCAqIChQaXgmMTUpICsgSU5GT0hFQURFUl9TSVpFICsgMSArIGNvbnRleHQtPkRJQm9mZnNl dF07CisrCQkJICAgIGNvbnRleHQtPkhlYWRlckJ1Zls0ICogaWR4ICsgSU5GT0hFQURFUl9TSVpF ICsgMSArIGNvbnRleHQtPkRJQm9mZnNldF07CisgCQkJUGl4ZWxzW1ggKiA0ICsgMl0gPQorLQkJ CSAgICBjb250ZXh0LT5IZWFkZXJCdWZbNCAqIChQaXgmMTUpICsgSU5GT0hFQURFUl9TSVpFICsg Y29udGV4dC0+RElCb2Zmc2V0XTsKKysJCQkgICAgY29udGV4dC0+SGVhZGVyQnVmWzQgKiBpZHgg KyBJTkZPSEVBREVSX1NJWkUgKyBjb250ZXh0LT5ESUJvZmZzZXRdOworIAkJCVBpeGVsc1tYICog NCArIDNdID0gMHhmZjsKKyAJCQlYKys7CisgCQl9CgpkaWZmIC0tZ2l0IGEvZWZlNjU4Njc0YmQx MDNkMWM5YmY1MDgwOWQ1NzY3YTNmNmRkNWEwMS5wYXRjaCBiL2VmZTY1ODY3NGJkMTAzZDFjOWJm NTA4MDlkNTc2N2EzZjZkZDVhMDEucGF0Y2gKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXggMDAw MDAwMC4uODFmMGJlNQotLS0gL2Rldi9udWxsCisrKyBiL2VmZTY1ODY3NGJkMTAzZDFjOWJmNTA4 MDlkNTc2N2EzZjZkZDVhMDEucGF0Y2gKQEAgLTAsMCArMSwxMiBAQAorZGlmZiAtcnVwTiAtLW5v LWRlcmVmZXJlbmNlIGdkay1waXhidWYtMi40NC44L2dkay1waXhidWYvaW8tanBlZy5jIGdkay1w aXhidWYtMi40NC44LW5ldy9nZGstcGl4YnVmL2lvLWpwZWcuYworLS0tIGdkay1waXhidWYtMi40 NC44L2dkay1waXhidWYvaW8tanBlZy5jCTIwMjYtMDgtMTIgMTU6MTY6NTcuMDAwMDAwMDAwICsw MjAwCisrKysgZ2RrLXBpeGJ1Zi0yLjQ0LjgtbmV3L2dkay1waXhidWYvaW8tanBlZy5jCTIwMjYt MDktMTYgMDk6MDc6MzYuNTU1ODEzNDUyICswMjAwCitAQCAtMzg5LDYgKzM4OSw4IEBAIG91dDoK KyAgICAgICAgIGlmICghcmV0KSB7CisgICAgICAgICAgICAgICAgIGdfZnJlZSAoY29udGV4dC0+ aWNjX3Byb2ZpbGUpOworICAgICAgICAgICAgICAgICBjb250ZXh0LT5pY2NfcHJvZmlsZSA9IE5V TEw7CisrICAgICAgICAgICAgICAgIGNvbnRleHQtPmljY19wcm9maWxlX3NpemUgPSAwOworKyAg ICAgICAgICAgICAgICBjb250ZXh0LT5pY2NfcHJvZmlsZV9zaXplX2FsbG9jYXRlZCA9IDA7Cisg ICAgICAgICB9CisgCXJldHVybiByZXQ7CisgfQoKZGlmZiAtLWdpdCBhL21pbmd3LWdkay1waXhi dWYuc3BlYyBiL21pbmd3LWdkay1waXhidWYuc3BlYwppbmRleCBiNWEzYWRmLi43NjY1YmIxIDEw MDY0NAotLS0gYS9taW5ndy1nZGstcGl4YnVmLnNwZWMKKysrIGIvbWluZ3ctZ2RrLXBpeGJ1Zi5z cGVjCkBAIC01LDcgKzUsNyBAQAogCiBOYW1lOiAgICAgICAgICAgbWluZ3ctZ2RrLXBpeGJ1Zgog VmVyc2lvbjogICAgICAgIDIuNDQuOAotUmVsZWFzZTogICAgICAgIDElez9kaXN0fQorUmVsZWFz ZTogICAgICAgIDIlez9kaXN0fQogU3VtbWFyeTogICAgICAgIE1pbkdXIFdpbmRvd3MgR0RLIFBp eGJ1ZiBsaWJyYXJ5CiAKIExpY2Vuc2U6ICAgICAgICBMR1BMLTIuMC1vci1sYXRlcgpAQCAtMTYs NiArMTYsMTEgQEAgU291cmNlMDogICAgICAgIGh0dHA6Ly9kb3dubG9hZC5nbm9tZS5vcmcvc291 cmNlcy9nZGstcGl4YnVmLyV7cmVsZWFzZV92ZXJzaW9ufS8KICMgd2luZSAvdXNyL2k2ODYtdzY0 LW1pbmd3MzIvc3lzLXJvb3QvbWluZ3cvYmluL2dkay1waXhidWYtcXVlcnktbG9hZGVycy5leGUg fCBzZWQgc0AnWjovdXNyL2k2ODYtdzY0LW1pbmd3MzIvc3lzLXJvb3QvbWluZ3cnQCcuLidAID4g Z2RrLXBpeGJ1Zi5sb2FkZXJzCiBTb3VyY2UxOiAgICAgICAgZ2RrLXBpeGJ1Zi5sb2FkZXJzCiAK KyMgQXBwbHkgcHJvcG9zZWQgZml4ZWQgZm9yIENWRS0yMDI2LTE2NzY4CitQYXRjaDA6ICAgICAg ICAgaHR0cHM6Ly9naXRsYWIuZ25vbWUub3JnL0dOT01FL2dkay1waXhidWYvLS9tZXJnZV9yZXF1 ZXN0cy8yNzkucGF0Y2gKKyMgQmFja3BvcnQgZml4IGZvciBDVkUtMjAyNi04MTg5MworUGF0Y2gx OiAgICAgICAgIGh0dHBzOi8vZ2l0bGFiLmdub21lLm9yZy9HTk9NRS9nZGstcGl4YnVmLy0vY29t bWl0L2VmZTY1ODY3NGJkMTAzZDFjOWJmNTA4MDlkNTc2N2EzZjZkZDVhMDEucGF0Y2gKKwogQnVp bGRBcmNoOiAgICAgIG5vYXJjaAogCiBCdWlsZFJlcXVpcmVzOiAgbWluZ3czMi1maWxlc3lzdGVt CkBAIC0xNDAsNiArMTQ1LDkgQEAgaW5zdGFsbCAtbSAwNjQ0ICV7U09VUkNFMX0gJXtidWlsZHJv b3R9JXttaW5ndzY0X2xpYmRpcn0vZ2RrLXBpeGJ1Zi0yLjAvMi4xMC4wL2wKIAogCiAlY2hhbmdl bG9nCisqIFdlZCBTZXAgMTYgMjAyNiBTYW5kcm8gTWFuaSA8bWFuaXNhbmRyb0BnbWFpbC5jb20+ IC0gMi40NC44LTIKKy0gQXBwbHkgcGF0Y2hlcyBmb3IgQ1ZFLTIwMjYtMTY3NjggYW5kIENWRS0y MDI2LTgxODkzCisKICogRnJpIEF1ZyAyMSAyMDI2IFNhbmRybyBNYW5pIDxtYW5pc2FuZHJvQGdt YWlsLmNvbT4gLSAyLjQ0LjgtMQogLSBVcGRhdGUgdG8gMi40NC44CiAK