From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Ingvar Hagelund To: git-commits@fedoraproject.org Subject: [rpms/varnish] f44: Patch for VSV00020, CVE pending Date: Mon, 21 Sep 2026 15:29:45 GMT Message-ID: <179000458548.1.6131360474893229159.rpms-varnish-7d7ed35536f8@fedoraproject.org> List-ID: X-Git-Repo: rpms/varnish X-Git-Branch: f44 X-Git-Rev: 7d7ed35536f8034e4de739817ae9824c7d702d49 QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvdmFybmlzaApCcmFu Y2ggOiBmNDQKQ29tbWl0IDogN2Q3ZWQzNTUzNmY4MDM0ZTRkZTczOTgxN2FlOTgyNGM3ZDcwMmQ0 OQpBdXRob3IgOiBJbmd2YXIgSGFnZWx1bmQgPGluZ3ZhckByZWRwaWxsLWxpbnByby5jb20+CkRh dGUgICA6IDIwMjYtMDktMjFUMTc6Mjk6MzUrMDI6MDAKU3RhdHMgIDogKzU1Ly0xIGluIDIgZmls ZShzKQpVUkwgICAgOiBodHRwczovL3NyYy5mZWRvcmFwcm9qZWN0Lm9yZy9ycG1zL3Zhcm5pc2gv Yy83ZDdlZDM1NTM2ZjgwMzRlNGRlNzM5ODE3YWU5ODI0YzdkNzAyZDQ5P2JyYW5jaD1mNDQKCkxv ZzoKUGF0Y2ggZm9yIFZTVjAwMDIwLCBDVkUgcGVuZGluZwoKLS0tCmRpZmYgLS1naXQgYS92YXJu aXNoLnNwZWMgYi92YXJuaXNoLnNwZWMKaW5kZXggNmQ1NmE5Mi4uZTU0NTQwZiAxMDA2NDQKLS0t IGEvdmFybmlzaC5zcGVjCisrKyBiL3Zhcm5pc2guc3BlYwpAQCAtMzIsNyArMzIsNyBAQAogU3Vt bWFyeTogSGlnaC1wZXJmb3JtYW5jZSBIVFRQIGFjY2VsZXJhdG9yCiBOYW1lOiB2YXJuaXNoCiBW ZXJzaW9uOiA4LjAuMgotUmVsZWFzZTogMSV7P2Rpc3R9CitSZWxlYXNlOiAyJXs/ZGlzdH0KIExp Y2Vuc2U6IEJTRC0yLUNsYXVzZSBBTkQgKEJTRC0yLUNsYXVzZS1GcmVlQlNEIEFORCBCU0QtMy1D bGF1c2UgQU5EIExpY2Vuc2VSZWYtRmVkb3JhLVB1YmxpYy1Eb21haW4gQU5EIFpsaWIpCiBVUkw6 IGh0dHBzOi8vd3d3LnZhcm5pc2gtY2FjaGUub3JnLwogU291cmNlMDogaHR0cDovL3Zhcm5pc2gt Y2FjaGUub3JnL19kb3dubG9hZHMvJXtuYW1lfS0le3ZlcnNpb259LnRnegpAQCAtNDUsNiArNDUs OSBAQCBTb3VyY2U0OiB2YXJuaXNoLnRtcGZpbGVzCiAjIGh0dHBzOi8vZ2l0aHViLmNvbS92YXJu aXNoY2FjaGUvdmFybmlzaC1jYWNoZS9pc3N1ZXMvNDI5OAogUGF0Y2gwOiAgIHZhcm5pc2gtNy43 LjBfZml4XzQyOTgucGF0Y2gKIAorIyBGaXggZm9yIFZTVjAwMDIwLCBiYXNlZCBvbiBwYXRjaCBm cm9tIHVwc3RyZWFtCitQYXRjaDE6ICAgdnN2MDAwMjAucGF0Y2gKKwogJWlmICV7d2l0aCBidW5k bGVkX2plbWFsbG9jfQogIyBidW5kbGVkIGplbWFsbG9jIHBhdGNoCiBQYXRjaDEwMDogamVtYWxs b2MtNS4zLjBfZm5vLWJ1aWx0aW4ucGF0Y2gKQEAgLTE1NCw2ICsxNTcsNyBAQCBEb2N1bWVudGF0 aW9uIGZpbGVzIGZvciAlbmFtZQogJXByZXAKICVzZXR1cCAtcQogI3BhdGNoIDAgLXAxCislcGF0 Y2ggMSAtcDEKIHRhciB4emYgJVNPVVJDRTEKIGxuIC1zIHBrZy12YXJuaXNoLWNhY2hlLSV7Y29t bWl0MX0vcmVkaGF0IHJlZGhhdAogbG4gLXMgcGtnLXZhcm5pc2gtY2FjaGUtJXtjb21taXQxfS9k ZWJpYW4gZGViaWFuCkBAIC00MTcsNiArNDIxLDkgQEAgdGVzdCAtZiAvZXRjL3Zhcm5pc2gvc2Vj cmV0IHx8ICh1dWlkZ2VuID4gL2V0Yy92YXJuaXNoL3NlY3JldCAmJiBjaG1vZCAwNjAwIC9ldGMK IAogCiAlY2hhbmdlbG9nCisqIE1vbiBTZXAgMjEgMjAyNiBJbmd2YXIgSGFnZWx1bmQgPGluZ3Zh ckByZWRwaWxsLWxpbnByby5jb20+IC0gOC4wLjItMgorLSBQYXRjaCBmb3IgVlNWMDAwMjAsIENW RSBwZW5kaW5nCisKICogVHVlIE1heSAyNiAyMDI2IEluZ3ZhciBIYWdlbHVuZCA8aW5ndmFyQHJl ZHBpbGwtbGlucHJvLmNvbT4gLSA4LjAuMi0xCiAtIE5ldyB1cHN0cmVhbSByZWxlYXNlOiBBIHNl Y3VyaXR5IHJlbGVhc2UKIC0gSW5jbHVkZXMgZml4IGZvciBWU1YwMDAxOSBha2EgQ1ZFLTIwMjYt NTAwNTIKCmRpZmYgLS1naXQgYS92c3YwMDAyMC5wYXRjaCBiL3ZzdjAwMDIwLnBhdGNoCm5ldyBm aWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAwMDAwMDAuLjdjMTBjNGUKLS0tIC9kZXYvbnVsbAorKysg Yi92c3YwMDAyMC5wYXRjaApAQCAtMCwwICsxLDQ3IEBACitCYXNlZCBvbiB2aW55bCBjYWNoZSBj b21taXQgOTBmNWJhY2MxNGIyNDA0ZTZjYzM0OWJhMDE1ZjBmNzNiODUxNTEzNgorQXV0aG9yOiBX YWxpZCBCb3VkZWJvdWRhIDx3YWxpZC5ib3VkZWJvdWRhQGdtYWlsLmNvbT4KK0RhdGU6IE1vbiwg NiBKdWwgMjAyNiAwOTo0MToxNiArMDIwMAorCisgICAgY2FjaGVfdnJ0OiBQb2xpc2ggVlJUX1Vw cGVyTG93ZXJTdHJhbmRzKCkKKworZGlmZiAtdSBhL2Jpbi92YXJuaXNoZC9jYWNoZS9jYWNoZV92 cnQuYyBiL2Jpbi92YXJuaXNoZC9jYWNoZS9jYWNoZV92cnQuYworLS0tIHZhcm5pc2gtOC4wLjJf YS9iaW4vdmFybmlzaGQvY2FjaGUvY2FjaGVfdnJ0LmMJMjAyNi0wOS0yMSAxNjozMzo1Ni44MDA1 NzczNDkgKzAyMDAKKysrKyB2YXJuaXNoLTguMC4yL2Jpbi92YXJuaXNoZC9jYWNoZS9jYWNoZV92 cnQuYwkyMDI2LTA5LTIxIDE2OjM0OjI2LjI0MzAwNjQyMCArMDIwMAorQEAgLTUxMSw3ICs1MTEs NyBAQAorIAl1bnNpZ25lZCB1OworIAljaGFyICpiLCAqZSwgKnI7CisgCWNvbnN0IGNoYXIgKnAs ICpxID0gTlVMTDsKKy0JaW50IGksIGNvcHkgPSAwOworKwlpbnQgaSwgY29weSA9IDAsIG9wID0g MDsKKyAKKyAJQ0hFQ0tfT0JKX05PVE5VTEwoY3R4LCBWUlRfQ1RYX01BR0lDKTsKKyAJQ0hFQ0tf T0JKX05PVE5VTEwoY3R4LT53cywgV1NfTUFHSUMpOworQEAgLTUyNSwxNSArNTI1LDIwIEBACisg CQlpZiAocSAhPSBOVUxMKQorIAkJCWNvcHkgPSAxOworIAkJZm9yKHAgPSBxID0gcy0+cFtpXTsg KnAgIT0gJ1wwJzsgcCsrKSB7CistCQkJaWYgKCh1cCAmJiB2Y3RfaXNsb3dlcigqcCkpIHx8Cist CQkJICAgICghdXAgJiYgdmN0X2lzdXBwZXIoKnApKSkgeworLQkJCQkqYisrID0gKnAgXiAweDIw OworKwkJCW9wID0gdXAgPyB2Y3RfaXNsb3dlcigqcCkgOiB2Y3RfaXN1cHBlcigqcCk7CisrCisr CQkJaWYgKG9wKQorIAkJCQljb3B5ID0gMTsKKy0JCQl9IGVsc2UgaWYgKGIgPCBlKSB7CistCQkJ CSpiKysgPSAqcDsKKy0JCQl9CistCQkJaWYgKGNvcHkgJiYgYiA9PSBlKQorKworKwkJCWlmICgh Y29weSAmJiBiID09IGUpCisrCQkJCWNvbnRpbnVlOworKwkJCWVsc2UgaWYgKGIgPT0gZSkKKyAJ CQkJYnJlYWs7CisrCisrCQkJaWYgKG9wKQorKwkJCQkqYisrID0gKnAgXiAweDIwOworKwkJCWVs c2UKKysJCQkJKmIrKyA9ICpwOworIAkJfQorIAkJaWYgKGNvcHkgJiYgYiA9PSBlKSB7CisgCQkJ V1NfUmVsZWFzZShjdHgtPndzLCAwKTsKKwo=