From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Peter Lemenkov To: git-commits@fedoraproject.org Subject: [rpms/asterisk] rawhide: Fix for CVE-2026-84975 Date: Wed, 23 Sep 2026 14:38:49 GMT Message-ID: <179017432907.1.13174352778524059179.rpms-asterisk-32470577e513@fedoraproject.org> List-ID: X-Git-Repo: rpms/asterisk X-Git-Branch: rawhide X-Git-Rev: 32470577e51386fd5b9de9b504f2ff92f5051c0d ICAgICAgICAgICAgQSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KCiAgICAgICAgICAgIFJl cG8gICA6IHJwbXMvYXN0ZXJpc2sKICAgICAgICAgICAgQnJhbmNoIDogcmF3aGlkZQogICAgICAg ICAgICBDb21taXQgOiAzMjQ3MDU3N2U1MTM4NmZkNWI5ZGU5YjUwNGYyZmY5MmY1MDUxYzBkCiAg ICAgICAgICAgIEF1dGhvciA6IFBldGVyIExlbWVua292IDxsZW1lbmtvdkBnbWFpbC5jb20+CiAg ICAgICAgICAgIERhdGUgICA6IDIwMjYtMDktMjNUMTY6Mzg6MjUrMDI6MDAKICAgICAgICAgICAg U3RhdHMgIDogKzgzLy0xIGluIDIgZmlsZShzKQogICAgICAgICAgICBVUkwgICAgOiBodHRwczov L3NyYy5mZWRvcmFwcm9qZWN0Lm9yZy9ycG1zL2FzdGVyaXNrL2MvMzI0NzA1NzdlNTEzODZmZDVi OWRlOWI1MDRmMmZmOTJmNTA1MWMwZD9icmFuY2g9cmF3aGlkZQoKICAgICAgICAgICAgTG9nOgog ICAgICAgICAgICBGaXggZm9yIENWRS0yMDI2LTg0OTc1CgpTaWduZWQtb2ZmLWJ5OiBQZXRlciBM ZW1lbmtvdiA8bGVtZW5rb3ZAZ21haWwuY29tPgoKLS0tCmRpZmYgLS1naXQgYS8wMDMyLU1lcmdl LWNvbW1pdC1mcm9tLWZvcmsucGF0Y2ggYi8wMDMyLU1lcmdlLWNvbW1pdC1mcm9tLWZvcmsucGF0 Y2gKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXggMDAwMDAwMC4uODliZTgwNgotLS0gL2Rldi9u dWxsCisrKyBiLzAwMzItTWVyZ2UtY29tbWl0LWZyb20tZm9yay5wYXRjaApAQCAtMCwwICsxLDc3 IEBACitGcm9tIDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAgTW9uIFNl cCAxNyAwMDowMDowMCAyMDAxCitGcm9tOiBzYXV3bWluZyA8bWluZ0B0ZWx1dS5jb20+CitEYXRl OiBGcmksIDE3IEp1bCAyMDI2IDE2OjQ2OjMzICswODAwCitTdWJqZWN0OiBbUEFUQ0hdIE1lcmdl IGNvbW1pdCBmcm9tIGZvcmsKKworU3ViamVjdEFsdE5hbWUgZW50cmllcyBmcm9tIHRoZSBPcGVu U1NMIGFuZCBHbnVUTFMgYmFja2VuZHMgd2VyZSBjb3BpZWQKK3dpdGggcGpfc3RyZHVwMigpLCB3 aGljaCByZS1kZXJpdmVzIHRoZSBsZW5ndGggd2l0aCBzdHJsZW4oKSBhbmQgdGh1cworZGlzY2Fy ZHMgdGhlIGxlbmd0aCBhbHJlYWR5IHJldHVybmVkIGJ5IEFTTjFfU1RSSU5HX3RvX1VURjgoKSAv CitnbnV0bHNfeDUwOV9jcnRfZ2V0X3N1YmplY3RfYWx0X25hbWUoKS4gQSBETlMgU0FOIHN1Y2gg YXMKKyJ2aWN0aW0uZXhhbXBsZVwwLmF0dGFja2VyIiB3YXMgdGhlcmVmb3JlIHRydW5jYXRlZCB0 byAidmljdGltLmV4YW1wbGUiLgorCitzaXBfdHJhbnNwb3J0X3Rscy5jIGRpc2FibGVzIHNvY2tl dC1sYXllciB2ZXJpZmljYXRpb24gYW5kIHBlcmZvcm1zIGl0cworb3duIGxlbmd0aC1hd2FyZSBp ZGVudGl0eSBtYXRjaCBhZ2FpbnN0IHN1YmpfYWx0X25hbWUsIHNvIHRoZSB0cnVuY2F0ZWQKK3By ZWZpeCBjb21wYXJlZCBlcXVhbCB0byB0aGUgdGFyZ2V0IGhvc3QgYW5kIGEgY3JhZnRlZCBjZXJ0 aWZpY2F0ZSB3YXMKK2FjY2VwdGVkIGZvciB0aGUgcHJlZml4IGhvc3RuYW1lIChzZXJ2ZXIgaWRl bnRpdHkgLyBob3N0bmFtZSB2ZXJpZmljYXRpb24KK2J5cGFzczsgT3BlblNTTCdzIG93biBYNTA5 X2NoZWNrX2hvc3QoKSByZWplY3RzIHRoZSBzYW1lIGNlcnRpZmljYXRlKS4KKworQ29weSB0aGUg U0FOIHVzaW5nIGl0cyBleHBsaWNpdCBsZW5ndGggdmlhIHBqX3N0cnNldCgpL3BqX3N0cmR1cF93 aXRoX251bGwoKQorc28gZW1iZWRkZWQgTlVMcyBhcmUgcHJlc2VydmVkIGFuZCBubyBsb25nZXIg dHJ1bmNhdGVkLiBUaGUgbWJlZFRMUyBiYWNrZW5kCithbHJlYWR5IGNvcGllZCB3aXRoIGEgbGVu Z3RoLWJlYXJpbmcgcGpfc3RyX3QgYW5kIHdhcyBub3QgYWZmZWN0ZWQuCisKK0NvLWF1dGhvcmVk LWJ5OiBDbGF1ZGUgT3B1cyA0LjggPG5vcmVwbHlAYW50aHJvcGljLmNvbT4KKworZGlmZiAtLWdp dCBhL3BqbGliL3NyYy9wai9zc2xfc29ja19ndGxzLmMgYi9wamxpYi9zcmMvcGovc3NsX3NvY2tf Z3Rscy5jCitpbmRleCBkZTNkNWU5OWUuLjFhYTk3MjhkYyAxMDA2NDQKKy0tLSBhL3BqbGliL3Ny Yy9wai9zc2xfc29ja19ndGxzLmMKKysrKyBiL3BqbGliL3NyYy9wai9zc2xfc29ja19ndGxzLmMK K0BAIC0xMDYyLDkgKzEwNjIsMjIgQEAgc3RhdGljIHZvaWQgdGxzX2NlcnRfZ2V0X2luZm8ocGpf cG9vbF90ICpwb29sLCBwal9zc2xfY2VydF9pbmZvICpjaSwKKyAKKyAgICAgICAgICAgICBpZiAo bGVuICYmIHR5cGUgIT0gUEpfU1NMX0NFUlRfTkFNRV9VTktOT1dOKSB7CisgICAgICAgICAgICAg ICAgIGNpLT5zdWJqX2FsdF9uYW1lLmVudHJ5W2NpLT5zdWJqX2FsdF9uYW1lLmNudF0udHlwZSA9 IHR5cGU7CistICAgICAgICAgICAgICAgIHBqX3N0cmR1cDIocG9vbCwKKysgICAgICAgICAgICAg ICAgaWYgKHR5cGUgPT0gUEpfU1NMX0NFUlRfTkFNRV9JUCkgeworKyAgICAgICAgICAgICAgICAg ICAgcGpfc3RyZHVwMihwb29sLAorICAgICAgICAgICAgICAgICAgICAgICAgICZjaS0+c3Vial9h bHRfbmFtZS5lbnRyeVtjaS0+c3Vial9hbHRfbmFtZS5jbnRdLm5hbWUsCistICAgICAgICAgICAg ICAgICAgICAgICAgdHlwZSA9PSBQSl9TU0xfQ0VSVF9OQU1FX0lQID8gYnVmIDogb3V0KTsKKysg ICAgICAgICAgICAgICAgICAgICAgICBidWYpOworKyAgICAgICAgICAgICAgICB9IGVsc2Ugewor KyAgICAgICAgICAgICAgICAgICAgLyogUHJlc2VydmUgdGhlIHJlcG9ydGVkIGxlbmd0aCBpbnN0 ZWFkIG9mIHVzaW5nIHN0cmxlbigpLAorKyAgICAgICAgICAgICAgICAgICAgICogc28gYSBETlMg U0FOIGNvbnRhaW5pbmcgYW4gZW1iZWRkZWQgTlVMIGlzIG5vdCB0cnVuY2F0ZWQKKysgICAgICAg ICAgICAgICAgICAgICAqIGF0IHRoZSBOVUwgKHdoaWNoIHdvdWxkIGFsbG93IGEgY3JhZnRlZCBj ZXJ0IHRvIGJlCisrICAgICAgICAgICAgICAgICAgICAgKiBhY2NlcHRlZCBmb3IgdGhlIHByZWZp eCBob3N0bmFtZTsgaWRlbnRpdHkgYnlwYXNzKS4KKysgICAgICAgICAgICAgICAgICAgICAqLwor KyAgICAgICAgICAgICAgICAgICAgcGpfc3RyX3QgdG1wOworKyAgICAgICAgICAgICAgICAgICAg cGpfc3Ryc2V0KCZ0bXAsIG91dCwgbGVuKTsKKysgICAgICAgICAgICAgICAgICAgIHBqX3N0cmR1 cF93aXRoX251bGwocG9vbCwKKysgICAgICAgICAgICAgICAgICAgICAgICAmY2ktPnN1YmpfYWx0 X25hbWUuZW50cnlbY2ktPnN1YmpfYWx0X25hbWUuY250XS5uYW1lLAorKyAgICAgICAgICAgICAg ICAgICAgICAgICZ0bXApOworKyAgICAgICAgICAgICAgICB9CisgICAgICAgICAgICAgICAgIGNp LT5zdWJqX2FsdF9uYW1lLmNudCsrOworICAgICAgICAgICAgIH0KKyAgICAgICAgIH0KK2RpZmYg LS1naXQgYS9wamxpYi9zcmMvcGovc3NsX3NvY2tfb3NzbC5jIGIvcGpsaWIvc3JjL3BqL3NzbF9z b2NrX29zc2wuYworaW5kZXggOTNmY2YxMGYxLi40OTI0MTdiNDcgMTAwNjQ0CistLS0gYS9wamxp Yi9zcmMvcGovc3NsX3NvY2tfb3NzbC5jCisrKysgYi9wamxpYi9zcmMvcGovc3NsX3NvY2tfb3Nz bC5jCitAQCAtMjI4MCw5ICsyMjgwLDE3IEBAIHN0YXRpYyB2b2lkIGdldF9jZXJ0X2luZm8ocGpf cG9vbF90ICpwb29sLCBwal9zc2xfY2VydF9pbmZvICpjaSwgWDUwOSAqeCwKKyAgICAgICAgICAg ICAgICAgICAgICAgICAgICZjaS0+c3Vial9hbHRfbmFtZS5lbnRyeVtjaS0+c3Vial9hbHRfbmFt ZS5jbnRdLm5hbWUsCisgICAgICAgICAgICAgICAgICAgICAgICAgICBidWYpOworICAgICAgICAg ICAgICAgICB9IGVsc2UgeworLSAgICAgICAgICAgICAgICAgICAgcGpfc3RyZHVwMihwb29sLCAK Ky0gICAgICAgICAgICAgICAgICAgICAgICAgICZjaS0+c3Vial9hbHRfbmFtZS5lbnRyeVtjaS0+ c3Vial9hbHRfbmFtZS5jbnRdLm5hbWUsIAorLSAgICAgICAgICAgICAgICAgICAgICAgICAgKGNo YXIqKXApOworKyAgICAgICAgICAgICAgICAgICAgLyogUHJlc2VydmUgdGhlIGV4cGxpY2l0IEFT Ti4xIHN0cmluZyBsZW5ndGggaW5zdGVhZCBvZgorKyAgICAgICAgICAgICAgICAgICAgICogdHJl YXRpbmcgdGhlIGRhdGEgYXMgYSBOVUwtdGVybWluYXRlZCBDIHN0cmluZy4gQSBETlMKKysgICAg ICAgICAgICAgICAgICAgICAqIFNBTiBzdWNoIGFzICJob3N0LmV4YW1wbGVcMC5hdHRhY2tlciIg d291bGQgb3RoZXJ3aXNlIGJlCisrICAgICAgICAgICAgICAgICAgICAgKiB0cnVuY2F0ZWQgYXQg dGhlIGVtYmVkZGVkIE5VTCwgbGV0dGluZyBhIGNyYWZ0ZWQgY2VydCBiZQorKyAgICAgICAgICAg ICAgICAgICAgICogYWNjZXB0ZWQgZm9yIHRoZSBwcmVmaXggaG9zdG5hbWUgKGlkZW50aXR5IGJ5 cGFzcykuCisrICAgICAgICAgICAgICAgICAgICAgKi8KKysgICAgICAgICAgICAgICAgICAgIHBq X3N0cl90IHRtcDsKKysgICAgICAgICAgICAgICAgICAgIHBqX3N0cnNldCgmdG1wLCAoY2hhciop cCwgbGVuKTsKKysgICAgICAgICAgICAgICAgICAgIHBqX3N0cmR1cF93aXRoX251bGwocG9vbCwK KysgICAgICAgICAgICAgICAgICAgICAgICAgICZjaS0+c3Vial9hbHRfbmFtZS5lbnRyeVtjaS0+ c3Vial9hbHRfbmFtZS5jbnRdLm5hbWUsCisrICAgICAgICAgICAgICAgICAgICAgICAgICAmdG1w KTsKKyAgICAgICAgICAgICAgICAgICAgIE9QRU5TU0xfZnJlZShwKTsKKyAgICAgICAgICAgICAg ICAgfQorICAgICAgICAgICAgICAgICBjaS0+c3Vial9hbHRfbmFtZS5jbnQrKzsKCmRpZmYgLS1n aXQgYS9hc3Rlcmlzay5zcGVjIGIvYXN0ZXJpc2suc3BlYwppbmRleCAzMDliMTQ2Li40YzVlMzg5 IDEwMDY0NAotLS0gYS9hc3Rlcmlzay5zcGVjCisrKyBiL2FzdGVyaXNrLnNwZWMKQEAgLTU3LDcg KzU3LDcgQEAKIFN1bW1hcnk6ICAgICAgICAgIFRoZSBPcGVuIFNvdXJjZSBQQlgKIE5hbWU6ICAg ICAgICAgICAgIGFzdGVyaXNrCiBWZXJzaW9uOiAgICAgICAgICAyMy41LjAKLVJlbGVhc2U6ICAg ICAgICAgICV7P19yY3x8P19iZXRhOjAufTQlez9fcmM6LnJjJXtfcmN9fSV7P19iZXRhOi5iZXRh JXtfYmV0YX19JXs/ZGlzdH0uMQorUmVsZWFzZTogICAgICAgICAgJXs/X3JjfHw/X2JldGE6MC59 NSV7P19yYzoucmMle19yY319JXs/X2JldGE6LmJldGEle19iZXRhfX0lez9kaXN0fQogIyBBdXRv bWF0aWNhbGx5IGNvbnZlcnRlZCBmcm9tIG9sZCBmb3JtYXQ6IEdQTHYyIC0gcmV2aWV3IGlzIGhp Z2hseSByZWNvbW1lbmRlZC4KIExpY2Vuc2U6ICAgICAgICAgIEdQTC0yLjAtb25seQogVVJMOiAg ICAgICAgICAgICAgaHR0cDovL3d3dy5hc3Rlcmlzay5vcmcvCkBAIC05NCw2ICs5NCw3IEBAIFNv dXJjZTEwOiAgICAgICAgIGh0dHBzOi8vZ2l0aHViLmNvbS9iZW5tY29sbGlucy9saWJqd3QvcmVs ZWFzZXMvZG93bmxvYWQvdiV7and0CiAKIFNvdXJjZTk5OiAgICAgICAgIDAwMzAtc3NsX3NvY2tf b3NzbC1maXgtT3BlblNTTC00LjAtY29tcGF0aWJpbGl0eS01MDM2LnBhdGNoCiBTb3VyY2UxMDA6 ICAgICAgICAwMDMxLU1lcmdlLWNvbW1pdC1mcm9tLWZvcmsucGF0Y2gKK1NvdXJjZTEwMTogICAg ICAgIDAwMzItTWVyZ2UtY29tbWl0LWZyb20tZm9yay5wYXRjaAogCiAlaWYgMCV7P2ZlZG9yYX0g fHwgMCV7P3JoZWx9ID49NwogUGF0Y2gxOiAgICAgICAgICAgYXN0ZXJpc2stMTYuMS4wLWV4cGxp Y2l0LXB5dGhvbjMucGF0Y2gKQEAgLTY1MSw2ICs2NTIsNyBAQCBlY2hvICcqKioqKioqKioqKioq KioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioq KioqJwogCiBjcCAle1M6OTl9IC4vdGhpcmQtcGFydHkvcGpwcm9qZWN0L3BhdGNoZXMKIGNwICV7 UzoxMDB9IC4vdGhpcmQtcGFydHkvcGpwcm9qZWN0L3BhdGNoZXMKK2NwICV7UzoxMDF9IC4vdGhp cmQtcGFydHkvcGpwcm9qZWN0L3BhdGNoZXMKIAogIyBGaXh1cCBtYWtlZmlsZSBzbyBzb3VuZCBh cmNoaXZlcyBhcmVuJ3QgZG93bmxvYWRlZC9pbnN0YWxsZWQKICV7X19wZXJsfSAtcGkgLWUgJ3Mv XmFsbDouKiQvYWxsOi8nIHNvdW5kcy9NYWtlZmlsZQpAQCAtMTY0NCw2ICsxNjQ2LDkgQEAgZmkK ICVlbmRpZgogCiAlY2hhbmdlbG9nCisqIFdlZCBTZXAgMjMgMjAyNiBQZXRlciBMZW1lbmtvdiA8 bGVtZW5rb3ZAZ21haWwuY29tPiAtIDIzLjUuMC01CistIEZpeCBmb3IgQ1ZFLTIwMjYtODQ5NzUK KwogKiBTdW4gU2VwIDEzIDIwMjYgWmJpZ25pZXcgSsSZZHJ6ZWpld3NraS1Tem1layA8emJ5c3pl a0BhbXV0YWJsZS5jb20+IC0gMjMuNS4wLTQuMQogLSBSZWJ1aWx0IGZvciBsaWJ4bWwtMi4xNS40 IChhZ2FpbikKIAo=