From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Sandro Mani To: git-commits@fedoraproject.org Subject: [rpms/mingw-gdk-pixbuf] f43: Apply patches for CVE-2026-16768 and CVE-2026-81893 Date: Wed, 16 Sep 2026 07:09:24 GMT Message-ID: <178954256471.1.17320304064234364264.rpms-mingw-gdk-pixbuf-06e5ede59d21@fedoraproject.org> List-ID: X-Git-Repo: rpms/mingw-gdk-pixbuf X-Git-Branch: f43 X-Git-Rev: 06e5ede59d218ebb195e5e6b50b199d94b2f02d1 QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvbWluZ3ctZ2RrLXBp eGJ1ZgpCcmFuY2ggOiBmNDMKQ29tbWl0IDogMDZlNWVkZTU5ZDIxOGViYjE5NWU1ZTZiNTBiMTk5 ZDk0YjJmMDJkMQpBdXRob3IgOiBTYW5kcm8gTWFuaSA8bWFuaXNhbmRyb0BnbWFpbC5jb20+CkRh dGUgICA6IDIwMjYtMDktMTZUMDk6MDg6MTgrMDI6MDAKU3RhdHMgIDogKzEwMS8tMSBpbiAzIGZp bGUocykKVVJMICAgIDogaHR0cHM6Ly9zcmMuZmVkb3JhcHJvamVjdC5vcmcvcnBtcy9taW5ndy1n ZGstcGl4YnVmL2MvMDZlNWVkZTU5ZDIxOGViYjE5NWU1ZTZiNTBiMTk5ZDk0YjJmMDJkMT9icmFu Y2g9ZjQzCgpMb2c6CkFwcGx5IHBhdGNoZXMgZm9yIENWRS0yMDI2LTE2NzY4IGFuZCBDVkUtMjAy Ni04MTg5MwoKLS0tCmRpZmYgLS1naXQgYS8yNzkucGF0Y2ggYi8yNzkucGF0Y2gKbmV3IGZpbGUg bW9kZSAxMDA2NDQKaW5kZXggMDAwMDAwMC4uOGJhYzZlNAotLS0gL2Rldi9udWxsCisrKyBiLzI3 OS5wYXRjaApAQCAtMCwwICsxLDgwIEBACitkaWZmIC1ydXBOIC0tbm8tZGVyZWZlcmVuY2UgZ2Rr LXBpeGJ1Zi0yLjQ0LjgvZ2RrLXBpeGJ1Zi9pby1pY28uYyBnZGstcGl4YnVmLTIuNDQuOC1uZXcv Z2RrLXBpeGJ1Zi9pby1pY28uYworLS0tIGdkay1waXhidWYtMi40NC44L2dkay1waXhidWYvaW8t aWNvLmMJMjAyNi0wOC0xMiAxNToxNjo1Ny4wMDAwMDAwMDAgKzAyMDAKKysrKyBnZGstcGl4YnVm LTIuNDQuOC1uZXcvZ2RrLXBpeGJ1Zi9pby1pY28uYwkyMDI2LTA5LTE2IDA5OjA3OjM2LjQzNzg2 MjQzNiArMDIwMAorQEAgLTcyNSw2ICs3MjUsNyBAQCBzdGF0aWMgdm9pZCBPbmVMaW5lOChzdHJ1 Y3QgaWNvX3Byb2dyZXNzCisgCWdpbnQgWDsKKyAJZ3VjaGFyICpQaXhlbHM7CisgCWdzaXplIHJv d3N0cmlkZSA9IGdka19waXhidWZfZ2V0X3Jvd3N0cmlkZSAoY29udGV4dC0+cGl4YnVmKTsKKysJ Z2ludCBwYWxldHRlX3NpemUgPSAoY29udGV4dC0+SGVhZGVyU2l6ZSAtIElORk9IRUFERVJfU0la RSAtIGNvbnRleHQtPkRJQm9mZnNldCkgLyA0OworIAorIAlYID0gMDsKKyAJaWYgKGNvbnRleHQt PkhlYWRlci5OZWdhdGl2ZSA9PSAwKQorQEAgLTczNCwxMyArNzM1LDE3IEBAIHN0YXRpYyB2b2lk IE9uZUxpbmU4KHN0cnVjdCBpY29fcHJvZ3Jlc3MKKyAJCVBpeGVscyA9IChnZGtfcGl4YnVmX2dl dF9waXhlbHMgKGNvbnRleHQtPnBpeGJ1ZikgKworIAkJCSAgcm93c3RyaWRlICogY29udGV4dC0+ TGluZXMpOworIAl3aGlsZSAoWCA8IGNvbnRleHQtPkhlYWRlci53aWR0aCkgeworKwkJZ3VpbnQ4 IGlkeCA9IGNvbnRleHQtPkxpbmVCdWZbWF07CisrCQlpZiAoaWR4ID49IHBhbGV0dGVfc2l6ZSkK KysJCQlpZHggPSAwOworKworIAkJLyogVGhlIGpveXMgb2YgaGF2aW5nIGEgQkdSIGJ5dGVvcmRl ciAqLworIAkJUGl4ZWxzW1ggKiA0ICsgMF0gPQorLQkJICAgIGNvbnRleHQtPkhlYWRlckJ1Zls0 ICogY29udGV4dC0+TGluZUJ1ZltYXSArIElORk9IRUFERVJfU0laRSArIDIgKyBjb250ZXh0LT5E SUJvZmZzZXRdOworKwkJICAgIGNvbnRleHQtPkhlYWRlckJ1Zls0ICogaWR4ICsgSU5GT0hFQURF Ul9TSVpFICsgMiArIGNvbnRleHQtPkRJQm9mZnNldF07CisgCQlQaXhlbHNbWCAqIDQgKyAxXSA9 CistCQkgICAgY29udGV4dC0+SGVhZGVyQnVmWzQgKiBjb250ZXh0LT5MaW5lQnVmW1hdICsgSU5G T0hFQURFUl9TSVpFICsgMSArY29udGV4dC0+RElCb2Zmc2V0XTsKKysJCSAgICBjb250ZXh0LT5I ZWFkZXJCdWZbNCAqIGlkeCArIElORk9IRUFERVJfU0laRSArIDEgK2NvbnRleHQtPkRJQm9mZnNl dF07CisgCQlQaXhlbHNbWCAqIDQgKyAyXSA9CistCQkgICAgY29udGV4dC0+SGVhZGVyQnVmWzQg KiBjb250ZXh0LT5MaW5lQnVmW1hdICsgSU5GT0hFQURFUl9TSVpFICtjb250ZXh0LT5ESUJvZmZz ZXRdOworKwkJICAgIGNvbnRleHQtPkhlYWRlckJ1Zls0ICogaWR4ICsgSU5GT0hFQURFUl9TSVpF ICtjb250ZXh0LT5ESUJvZmZzZXRdOworIAkJUGl4ZWxzW1ggKiA0ICsgM10gPSAweGZmOworIAkJ WCsrOworIAl9CitAQCAtNzUwLDYgKzc1NSw3IEBAIHN0YXRpYyB2b2lkIE9uZUxpbmU0KHN0cnVj dCBpY29fcHJvZ3Jlc3MKKyAJZ2ludCBYOworIAlndWNoYXIgKlBpeGVsczsKKyAJZ3NpemUgcm93 c3RyaWRlID0gZ2RrX3BpeGJ1Zl9nZXRfcm93c3RyaWRlIChjb250ZXh0LT5waXhidWYpOworKwln aW50IHBhbGV0dGVfc2l6ZSA9IChjb250ZXh0LT5IZWFkZXJTaXplIC0gSU5GT0hFQURFUl9TSVpF IC0gY29udGV4dC0+RElCb2Zmc2V0KSAvIDQ7CisgCisgCVggPSAwOworIAlpZiAoY29udGV4dC0+ SGVhZGVyLk5lZ2F0aXZlID09IDApCitAQCAtNzYxLDI1ICs3NjcsMzIgQEAgc3RhdGljIHZvaWQg T25lTGluZTQoc3RydWN0IGljb19wcm9ncmVzcworIAkKKyAJd2hpbGUgKFggPCBjb250ZXh0LT5I ZWFkZXIud2lkdGgpIHsKKyAJCWd1Y2hhciBQaXg7CisrCQlndWludDggaWR4OworIAkJCisgCQlQ aXggPSBjb250ZXh0LT5MaW5lQnVmW1gvMl07CisrCQlpZHggPSBQaXggPj4gNDsKKysJCWlmIChp ZHggPj0gcGFsZXR0ZV9zaXplKQorKwkJCWlkeCA9IDA7CisgCisgCQlQaXhlbHNbWCAqIDQgKyAw XSA9CistCQkgICAgY29udGV4dC0+SGVhZGVyQnVmWzQgKiAoUGl4Pj40KSArIElORk9IRUFERVJf U0laRSArIDIgKyBjb250ZXh0LT5ESUJvZmZzZXRdOworKwkJICAgIGNvbnRleHQtPkhlYWRlckJ1 Zls0ICogaWR4ICsgSU5GT0hFQURFUl9TSVpFICsgMiArIGNvbnRleHQtPkRJQm9mZnNldF07Cisg CQlQaXhlbHNbWCAqIDQgKyAxXSA9CistCQkgICAgY29udGV4dC0+SGVhZGVyQnVmWzQgKiAoUGl4 Pj40KSArIElORk9IRUFERVJfU0laRSArIDEgK2NvbnRleHQtPkRJQm9mZnNldF07CisrCQkgICAg Y29udGV4dC0+SGVhZGVyQnVmWzQgKiBpZHggKyBJTkZPSEVBREVSX1NJWkUgKyAxICtjb250ZXh0 LT5ESUJvZmZzZXRdOworIAkJUGl4ZWxzW1ggKiA0ICsgMl0gPQorLQkJICAgIGNvbnRleHQtPkhl YWRlckJ1Zls0ICogKFBpeD4+NCkgKyBJTkZPSEVBREVSX1NJWkUgKyBjb250ZXh0LT5ESUJvZmZz ZXRdOworKwkJICAgIGNvbnRleHQtPkhlYWRlckJ1Zls0ICogaWR4ICsgSU5GT0hFQURFUl9TSVpF ICsgY29udGV4dC0+RElCb2Zmc2V0XTsKKyAJCVBpeGVsc1tYICogNCArIDNdID0gMHhmZjsKKyAJ CVgrKzsKKy0JCWlmIChYPGNvbnRleHQtPkhlYWRlci53aWR0aCkgeyAKKysJCWlmIChYPGNvbnRl eHQtPkhlYWRlci53aWR0aCkgeworIAkJCS8qIEhhbmRsZSB0aGUgb3RoZXIgNCBiaXQgcGl4ZWwg b25seSB3aGVuIHRoZXJlIGlzIG9uZSAqLworKwkJCWlkeCA9IFBpeCAmIDE1OworKwkJCWlmIChp ZHggPj0gcGFsZXR0ZV9zaXplKQorKwkJCQlpZHggPSAwOworIAkJCVBpeGVsc1tYICogNCArIDBd ID0KKy0JCQkgICAgY29udGV4dC0+SGVhZGVyQnVmWzQgKiAoUGl4JjE1KSArIElORk9IRUFERVJf U0laRSArIDIgKyBjb250ZXh0LT5ESUJvZmZzZXRdOworKwkJCSAgICBjb250ZXh0LT5IZWFkZXJC dWZbNCAqIGlkeCArIElORk9IRUFERVJfU0laRSArIDIgKyBjb250ZXh0LT5ESUJvZmZzZXRdOwor IAkJCVBpeGVsc1tYICogNCArIDFdID0KKy0JCQkgICAgY29udGV4dC0+SGVhZGVyQnVmWzQgKiAo UGl4JjE1KSArIElORk9IRUFERVJfU0laRSArIDEgKyBjb250ZXh0LT5ESUJvZmZzZXRdOworKwkJ CSAgICBjb250ZXh0LT5IZWFkZXJCdWZbNCAqIGlkeCArIElORk9IRUFERVJfU0laRSArIDEgKyBj b250ZXh0LT5ESUJvZmZzZXRdOworIAkJCVBpeGVsc1tYICogNCArIDJdID0KKy0JCQkgICAgY29u dGV4dC0+SGVhZGVyQnVmWzQgKiAoUGl4JjE1KSArIElORk9IRUFERVJfU0laRSArIGNvbnRleHQt PkRJQm9mZnNldF07CisrCQkJICAgIGNvbnRleHQtPkhlYWRlckJ1Zls0ICogaWR4ICsgSU5GT0hF QURFUl9TSVpFICsgY29udGV4dC0+RElCb2Zmc2V0XTsKKyAJCQlQaXhlbHNbWCAqIDQgKyAzXSA9 IDB4ZmY7CisgCQkJWCsrOworIAkJfQoKZGlmZiAtLWdpdCBhL2VmZTY1ODY3NGJkMTAzZDFjOWJm NTA4MDlkNTc2N2EzZjZkZDVhMDEucGF0Y2ggYi9lZmU2NTg2NzRiZDEwM2QxYzliZjUwODA5ZDU3 NjdhM2Y2ZGQ1YTAxLnBhdGNoCm5ldyBmaWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAwMDAwMDAuLjgx ZjBiZTUKLS0tIC9kZXYvbnVsbAorKysgYi9lZmU2NTg2NzRiZDEwM2QxYzliZjUwODA5ZDU3Njdh M2Y2ZGQ1YTAxLnBhdGNoCkBAIC0wLDAgKzEsMTIgQEAKK2RpZmYgLXJ1cE4gLS1uby1kZXJlZmVy ZW5jZSBnZGstcGl4YnVmLTIuNDQuOC9nZGstcGl4YnVmL2lvLWpwZWcuYyBnZGstcGl4YnVmLTIu NDQuOC1uZXcvZ2RrLXBpeGJ1Zi9pby1qcGVnLmMKKy0tLSBnZGstcGl4YnVmLTIuNDQuOC9nZGst cGl4YnVmL2lvLWpwZWcuYwkyMDI2LTA4LTEyIDE1OjE2OjU3LjAwMDAwMDAwMCArMDIwMAorKysr IGdkay1waXhidWYtMi40NC44LW5ldy9nZGstcGl4YnVmL2lvLWpwZWcuYwkyMDI2LTA5LTE2IDA5 OjA3OjM2LjU1NTgxMzQ1MiArMDIwMAorQEAgLTM4OSw2ICszODksOCBAQCBvdXQ6CisgICAgICAg ICBpZiAoIXJldCkgeworICAgICAgICAgICAgICAgICBnX2ZyZWUgKGNvbnRleHQtPmljY19wcm9m aWxlKTsKKyAgICAgICAgICAgICAgICAgY29udGV4dC0+aWNjX3Byb2ZpbGUgPSBOVUxMOworKyAg ICAgICAgICAgICAgICBjb250ZXh0LT5pY2NfcHJvZmlsZV9zaXplID0gMDsKKysgICAgICAgICAg ICAgICAgY29udGV4dC0+aWNjX3Byb2ZpbGVfc2l6ZV9hbGxvY2F0ZWQgPSAwOworICAgICAgICAg fQorIAlyZXR1cm4gcmV0OworIH0KCmRpZmYgLS1naXQgYS9taW5ndy1nZGstcGl4YnVmLnNwZWMg Yi9taW5ndy1nZGstcGl4YnVmLnNwZWMKaW5kZXggYjVhM2FkZi4uNzY2NWJiMSAxMDA2NDQKLS0t IGEvbWluZ3ctZ2RrLXBpeGJ1Zi5zcGVjCisrKyBiL21pbmd3LWdkay1waXhidWYuc3BlYwpAQCAt NSw3ICs1LDcgQEAKIAogTmFtZTogICAgICAgICAgIG1pbmd3LWdkay1waXhidWYKIFZlcnNpb246 ICAgICAgICAyLjQ0LjgKLVJlbGVhc2U6ICAgICAgICAxJXs/ZGlzdH0KK1JlbGVhc2U6ICAgICAg ICAyJXs/ZGlzdH0KIFN1bW1hcnk6ICAgICAgICBNaW5HVyBXaW5kb3dzIEdESyBQaXhidWYgbGli cmFyeQogCiBMaWNlbnNlOiAgICAgICAgTEdQTC0yLjAtb3ItbGF0ZXIKQEAgLTE2LDYgKzE2LDEx IEBAIFNvdXJjZTA6ICAgICAgICBodHRwOi8vZG93bmxvYWQuZ25vbWUub3JnL3NvdXJjZXMvZ2Rr LXBpeGJ1Zi8le3JlbGVhc2VfdmVyc2lvbn0vCiAjIHdpbmUgL3Vzci9pNjg2LXc2NC1taW5ndzMy L3N5cy1yb290L21pbmd3L2Jpbi9nZGstcGl4YnVmLXF1ZXJ5LWxvYWRlcnMuZXhlIHwgc2VkIHNA J1o6L3Vzci9pNjg2LXc2NC1taW5ndzMyL3N5cy1yb290L21pbmd3J0AnLi4nQCA+IGdkay1waXhi dWYubG9hZGVycwogU291cmNlMTogICAgICAgIGdkay1waXhidWYubG9hZGVycwogCisjIEFwcGx5 IHByb3Bvc2VkIGZpeGVkIGZvciBDVkUtMjAyNi0xNjc2OAorUGF0Y2gwOiAgICAgICAgIGh0dHBz Oi8vZ2l0bGFiLmdub21lLm9yZy9HTk9NRS9nZGstcGl4YnVmLy0vbWVyZ2VfcmVxdWVzdHMvMjc5 LnBhdGNoCisjIEJhY2twb3J0IGZpeCBmb3IgQ1ZFLTIwMjYtODE4OTMKK1BhdGNoMTogICAgICAg ICBodHRwczovL2dpdGxhYi5nbm9tZS5vcmcvR05PTUUvZ2RrLXBpeGJ1Zi8tL2NvbW1pdC9lZmU2 NTg2NzRiZDEwM2QxYzliZjUwODA5ZDU3NjdhM2Y2ZGQ1YTAxLnBhdGNoCisKIEJ1aWxkQXJjaDog ICAgICBub2FyY2gKIAogQnVpbGRSZXF1aXJlczogIG1pbmd3MzItZmlsZXN5c3RlbQpAQCAtMTQw LDYgKzE0NSw5IEBAIGluc3RhbGwgLW0gMDY0NCAle1NPVVJDRTF9ICV7YnVpbGRyb290fSV7bWlu Z3c2NF9saWJkaXJ9L2dkay1waXhidWYtMi4wLzIuMTAuMC9sCiAKIAogJWNoYW5nZWxvZworKiBX ZWQgU2VwIDE2IDIwMjYgU2FuZHJvIE1hbmkgPG1hbmlzYW5kcm9AZ21haWwuY29tPiAtIDIuNDQu OC0yCistIEFwcGx5IHBhdGNoZXMgZm9yIENWRS0yMDI2LTE2NzY4IGFuZCBDVkUtMjAyNi04MTg5 MworCiAqIEZyaSBBdWcgMjEgMjAyNiBTYW5kcm8gTWFuaSA8bWFuaXNhbmRyb0BnbWFpbC5jb20+ IC0gMi40NC44LTEKIC0gVXBkYXRlIHRvIDIuNDQuOAogCg==