From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Peter Lemenkov To: git-commits@fedoraproject.org Subject: [rpms/asterisk] f45: Fix for CVE-2026-84975 Date: Wed, 23 Sep 2026 15:10:52 GMT Message-ID: <179017625270.1.9917200747051908077.rpms-asterisk-32470577e513@fedoraproject.org> List-ID: X-Git-Repo: rpms/asterisk X-Git-Branch: f45 X-Git-Rev: 32470577e51386fd5b9de9b504f2ff92f5051c0d ICAgICAgICAgICAgQSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KCiAgICAgICAgICAgIFJl cG8gICA6IHJwbXMvYXN0ZXJpc2sKICAgICAgICAgICAgQnJhbmNoIDogZjQ1CiAgICAgICAgICAg IENvbW1pdCA6IDMyNDcwNTc3ZTUxMzg2ZmQ1YjlkZTliNTA0ZjJmZjkyZjUwNTFjMGQKICAgICAg ICAgICAgQXV0aG9yIDogUGV0ZXIgTGVtZW5rb3YgPGxlbWVua292QGdtYWlsLmNvbT4KICAgICAg ICAgICAgRGF0ZSAgIDogMjAyNi0wOS0yM1QxNjozODoyNSswMjowMAogICAgICAgICAgICBTdGF0 cyAgOiArODMvLTEgaW4gMiBmaWxlKHMpCiAgICAgICAgICAgIFVSTCAgICA6IGh0dHBzOi8vc3Jj LmZlZG9yYXByb2plY3Qub3JnL3JwbXMvYXN0ZXJpc2svYy8zMjQ3MDU3N2U1MTM4NmZkNWI5ZGU5 YjUwNGYyZmY5MmY1MDUxYzBkP2JyYW5jaD1mNDUKCiAgICAgICAgICAgIExvZzoKICAgICAgICAg ICAgRml4IGZvciBDVkUtMjAyNi04NDk3NQoKU2lnbmVkLW9mZi1ieTogUGV0ZXIgTGVtZW5rb3Yg PGxlbWVua292QGdtYWlsLmNvbT4KCi0tLQpkaWZmIC0tZ2l0IGEvMDAzMi1NZXJnZS1jb21taXQt ZnJvbS1mb3JrLnBhdGNoIGIvMDAzMi1NZXJnZS1jb21taXQtZnJvbS1mb3JrLnBhdGNoCm5ldyBm aWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAwMDAwMDAuLjg5YmU4MDYKLS0tIC9kZXYvbnVsbAorKysg Yi8wMDMyLU1lcmdlLWNvbW1pdC1mcm9tLWZvcmsucGF0Y2gKQEAgLTAsMCArMSw3NyBAQAorRnJv bSAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwIE1vbiBTZXAgMTcgMDA6 MDA6MDAgMjAwMQorRnJvbTogc2F1d21pbmcgPG1pbmdAdGVsdXUuY29tPgorRGF0ZTogRnJpLCAx NyBKdWwgMjAyNiAxNjo0NjozMyArMDgwMAorU3ViamVjdDogW1BBVENIXSBNZXJnZSBjb21taXQg ZnJvbSBmb3JrCisKK1N1YmplY3RBbHROYW1lIGVudHJpZXMgZnJvbSB0aGUgT3BlblNTTCBhbmQg R251VExTIGJhY2tlbmRzIHdlcmUgY29waWVkCit3aXRoIHBqX3N0cmR1cDIoKSwgd2hpY2ggcmUt ZGVyaXZlcyB0aGUgbGVuZ3RoIHdpdGggc3RybGVuKCkgYW5kIHRodXMKK2Rpc2NhcmRzIHRoZSBs ZW5ndGggYWxyZWFkeSByZXR1cm5lZCBieSBBU04xX1NUUklOR190b19VVEY4KCkgLworZ251dGxz X3g1MDlfY3J0X2dldF9zdWJqZWN0X2FsdF9uYW1lKCkuIEEgRE5TIFNBTiBzdWNoIGFzCisidmlj dGltLmV4YW1wbGVcMC5hdHRhY2tlciIgd2FzIHRoZXJlZm9yZSB0cnVuY2F0ZWQgdG8gInZpY3Rp bS5leGFtcGxlIi4KKworc2lwX3RyYW5zcG9ydF90bHMuYyBkaXNhYmxlcyBzb2NrZXQtbGF5ZXIg dmVyaWZpY2F0aW9uIGFuZCBwZXJmb3JtcyBpdHMKK293biBsZW5ndGgtYXdhcmUgaWRlbnRpdHkg bWF0Y2ggYWdhaW5zdCBzdWJqX2FsdF9uYW1lLCBzbyB0aGUgdHJ1bmNhdGVkCitwcmVmaXggY29t cGFyZWQgZXF1YWwgdG8gdGhlIHRhcmdldCBob3N0IGFuZCBhIGNyYWZ0ZWQgY2VydGlmaWNhdGUg d2FzCithY2NlcHRlZCBmb3IgdGhlIHByZWZpeCBob3N0bmFtZSAoc2VydmVyIGlkZW50aXR5IC8g aG9zdG5hbWUgdmVyaWZpY2F0aW9uCitieXBhc3M7IE9wZW5TU0wncyBvd24gWDUwOV9jaGVja19o b3N0KCkgcmVqZWN0cyB0aGUgc2FtZSBjZXJ0aWZpY2F0ZSkuCisKK0NvcHkgdGhlIFNBTiB1c2lu ZyBpdHMgZXhwbGljaXQgbGVuZ3RoIHZpYSBwal9zdHJzZXQoKS9wal9zdHJkdXBfd2l0aF9udWxs KCkKK3NvIGVtYmVkZGVkIE5VTHMgYXJlIHByZXNlcnZlZCBhbmQgbm8gbG9uZ2VyIHRydW5jYXRl ZC4gVGhlIG1iZWRUTFMgYmFja2VuZAorYWxyZWFkeSBjb3BpZWQgd2l0aCBhIGxlbmd0aC1iZWFy aW5nIHBqX3N0cl90IGFuZCB3YXMgbm90IGFmZmVjdGVkLgorCitDby1hdXRob3JlZC1ieTogQ2xh dWRlIE9wdXMgNC44IDxub3JlcGx5QGFudGhyb3BpYy5jb20+CisKK2RpZmYgLS1naXQgYS9wamxp Yi9zcmMvcGovc3NsX3NvY2tfZ3Rscy5jIGIvcGpsaWIvc3JjL3BqL3NzbF9zb2NrX2d0bHMuYwor aW5kZXggZGUzZDVlOTllLi4xYWE5NzI4ZGMgMTAwNjQ0CistLS0gYS9wamxpYi9zcmMvcGovc3Ns X3NvY2tfZ3Rscy5jCisrKysgYi9wamxpYi9zcmMvcGovc3NsX3NvY2tfZ3Rscy5jCitAQCAtMTA2 Miw5ICsxMDYyLDIyIEBAIHN0YXRpYyB2b2lkIHRsc19jZXJ0X2dldF9pbmZvKHBqX3Bvb2xfdCAq cG9vbCwgcGpfc3NsX2NlcnRfaW5mbyAqY2ksCisgCisgICAgICAgICAgICAgaWYgKGxlbiAmJiB0 eXBlICE9IFBKX1NTTF9DRVJUX05BTUVfVU5LTk9XTikgeworICAgICAgICAgICAgICAgICBjaS0+ c3Vial9hbHRfbmFtZS5lbnRyeVtjaS0+c3Vial9hbHRfbmFtZS5jbnRdLnR5cGUgPSB0eXBlOwor LSAgICAgICAgICAgICAgICBwal9zdHJkdXAyKHBvb2wsCisrICAgICAgICAgICAgICAgIGlmICh0 eXBlID09IFBKX1NTTF9DRVJUX05BTUVfSVApIHsKKysgICAgICAgICAgICAgICAgICAgIHBqX3N0 cmR1cDIocG9vbCwKKyAgICAgICAgICAgICAgICAgICAgICAgICAmY2ktPnN1YmpfYWx0X25hbWUu ZW50cnlbY2ktPnN1YmpfYWx0X25hbWUuY250XS5uYW1lLAorLSAgICAgICAgICAgICAgICAgICAg ICAgIHR5cGUgPT0gUEpfU1NMX0NFUlRfTkFNRV9JUCA/IGJ1ZiA6IG91dCk7CisrICAgICAgICAg ICAgICAgICAgICAgICAgYnVmKTsKKysgICAgICAgICAgICAgICAgfSBlbHNlIHsKKysgICAgICAg ICAgICAgICAgICAgIC8qIFByZXNlcnZlIHRoZSByZXBvcnRlZCBsZW5ndGggaW5zdGVhZCBvZiB1 c2luZyBzdHJsZW4oKSwKKysgICAgICAgICAgICAgICAgICAgICAqIHNvIGEgRE5TIFNBTiBjb250 YWluaW5nIGFuIGVtYmVkZGVkIE5VTCBpcyBub3QgdHJ1bmNhdGVkCisrICAgICAgICAgICAgICAg ICAgICAgKiBhdCB0aGUgTlVMICh3aGljaCB3b3VsZCBhbGxvdyBhIGNyYWZ0ZWQgY2VydCB0byBi ZQorKyAgICAgICAgICAgICAgICAgICAgICogYWNjZXB0ZWQgZm9yIHRoZSBwcmVmaXggaG9zdG5h bWU7IGlkZW50aXR5IGJ5cGFzcykuCisrICAgICAgICAgICAgICAgICAgICAgKi8KKysgICAgICAg ICAgICAgICAgICAgIHBqX3N0cl90IHRtcDsKKysgICAgICAgICAgICAgICAgICAgIHBqX3N0cnNl dCgmdG1wLCBvdXQsIGxlbik7CisrICAgICAgICAgICAgICAgICAgICBwal9zdHJkdXBfd2l0aF9u dWxsKHBvb2wsCisrICAgICAgICAgICAgICAgICAgICAgICAgJmNpLT5zdWJqX2FsdF9uYW1lLmVu dHJ5W2NpLT5zdWJqX2FsdF9uYW1lLmNudF0ubmFtZSwKKysgICAgICAgICAgICAgICAgICAgICAg ICAmdG1wKTsKKysgICAgICAgICAgICAgICAgfQorICAgICAgICAgICAgICAgICBjaS0+c3Vial9h bHRfbmFtZS5jbnQrKzsKKyAgICAgICAgICAgICB9CisgICAgICAgICB9CitkaWZmIC0tZ2l0IGEv cGpsaWIvc3JjL3BqL3NzbF9zb2NrX29zc2wuYyBiL3BqbGliL3NyYy9wai9zc2xfc29ja19vc3Ns LmMKK2luZGV4IDkzZmNmMTBmMS4uNDkyNDE3YjQ3IDEwMDY0NAorLS0tIGEvcGpsaWIvc3JjL3Bq L3NzbF9zb2NrX29zc2wuYworKysrIGIvcGpsaWIvc3JjL3BqL3NzbF9zb2NrX29zc2wuYworQEAg LTIyODAsOSArMjI4MCwxNyBAQCBzdGF0aWMgdm9pZCBnZXRfY2VydF9pbmZvKHBqX3Bvb2xfdCAq cG9vbCwgcGpfc3NsX2NlcnRfaW5mbyAqY2ksIFg1MDkgKngsCisgICAgICAgICAgICAgICAgICAg ICAgICAgICAmY2ktPnN1YmpfYWx0X25hbWUuZW50cnlbY2ktPnN1YmpfYWx0X25hbWUuY250XS5u YW1lLAorICAgICAgICAgICAgICAgICAgICAgICAgICAgYnVmKTsKKyAgICAgICAgICAgICAgICAg fSBlbHNlIHsKKy0gICAgICAgICAgICAgICAgICAgIHBqX3N0cmR1cDIocG9vbCwgCistICAgICAg ICAgICAgICAgICAgICAgICAgICAmY2ktPnN1YmpfYWx0X25hbWUuZW50cnlbY2ktPnN1YmpfYWx0 X25hbWUuY250XS5uYW1lLCAKKy0gICAgICAgICAgICAgICAgICAgICAgICAgIChjaGFyKilwKTsK KysgICAgICAgICAgICAgICAgICAgIC8qIFByZXNlcnZlIHRoZSBleHBsaWNpdCBBU04uMSBzdHJp bmcgbGVuZ3RoIGluc3RlYWQgb2YKKysgICAgICAgICAgICAgICAgICAgICAqIHRyZWF0aW5nIHRo ZSBkYXRhIGFzIGEgTlVMLXRlcm1pbmF0ZWQgQyBzdHJpbmcuIEEgRE5TCisrICAgICAgICAgICAg ICAgICAgICAgKiBTQU4gc3VjaCBhcyAiaG9zdC5leGFtcGxlXDAuYXR0YWNrZXIiIHdvdWxkIG90 aGVyd2lzZSBiZQorKyAgICAgICAgICAgICAgICAgICAgICogdHJ1bmNhdGVkIGF0IHRoZSBlbWJl ZGRlZCBOVUwsIGxldHRpbmcgYSBjcmFmdGVkIGNlcnQgYmUKKysgICAgICAgICAgICAgICAgICAg ICAqIGFjY2VwdGVkIGZvciB0aGUgcHJlZml4IGhvc3RuYW1lIChpZGVudGl0eSBieXBhc3MpLgor KyAgICAgICAgICAgICAgICAgICAgICovCisrICAgICAgICAgICAgICAgICAgICBwal9zdHJfdCB0 bXA7CisrICAgICAgICAgICAgICAgICAgICBwal9zdHJzZXQoJnRtcCwgKGNoYXIqKXAsIGxlbik7 CisrICAgICAgICAgICAgICAgICAgICBwal9zdHJkdXBfd2l0aF9udWxsKHBvb2wsCisrICAgICAg ICAgICAgICAgICAgICAgICAgICAmY2ktPnN1YmpfYWx0X25hbWUuZW50cnlbY2ktPnN1YmpfYWx0 X25hbWUuY250XS5uYW1lLAorKyAgICAgICAgICAgICAgICAgICAgICAgICAgJnRtcCk7CisgICAg ICAgICAgICAgICAgICAgICBPUEVOU1NMX2ZyZWUocCk7CisgICAgICAgICAgICAgICAgIH0KKyAg ICAgICAgICAgICAgICAgY2ktPnN1YmpfYWx0X25hbWUuY250Kys7CgpkaWZmIC0tZ2l0IGEvYXN0 ZXJpc2suc3BlYyBiL2FzdGVyaXNrLnNwZWMKaW5kZXggMzA5YjE0Ni4uNGM1ZTM4OSAxMDA2NDQK LS0tIGEvYXN0ZXJpc2suc3BlYworKysgYi9hc3Rlcmlzay5zcGVjCkBAIC01Nyw3ICs1Nyw3IEBA CiBTdW1tYXJ5OiAgICAgICAgICBUaGUgT3BlbiBTb3VyY2UgUEJYCiBOYW1lOiAgICAgICAgICAg ICBhc3RlcmlzawogVmVyc2lvbjogICAgICAgICAgMjMuNS4wCi1SZWxlYXNlOiAgICAgICAgICAl ez9fcmN8fD9fYmV0YTowLn00JXs/X3JjOi5yYyV7X3JjfX0lez9fYmV0YTouYmV0YSV7X2JldGF9 fSV7P2Rpc3R9LjEKK1JlbGVhc2U6ICAgICAgICAgICV7P19yY3x8P19iZXRhOjAufTUlez9fcmM6 LnJjJXtfcmN9fSV7P19iZXRhOi5iZXRhJXtfYmV0YX19JXs/ZGlzdH0KICMgQXV0b21hdGljYWxs eSBjb252ZXJ0ZWQgZnJvbSBvbGQgZm9ybWF0OiBHUEx2MiAtIHJldmlldyBpcyBoaWdobHkgcmVj b21tZW5kZWQuCiBMaWNlbnNlOiAgICAgICAgICBHUEwtMi4wLW9ubHkKIFVSTDogICAgICAgICAg ICAgIGh0dHA6Ly93d3cuYXN0ZXJpc2sub3JnLwpAQCAtOTQsNiArOTQsNyBAQCBTb3VyY2UxMDog ICAgICAgICBodHRwczovL2dpdGh1Yi5jb20vYmVubWNvbGxpbnMvbGliand0L3JlbGVhc2VzL2Rv d25sb2FkL3Yle2p3dAogCiBTb3VyY2U5OTogICAgICAgICAwMDMwLXNzbF9zb2NrX29zc2wtZml4 LU9wZW5TU0wtNC4wLWNvbXBhdGliaWxpdHktNTAzNi5wYXRjaAogU291cmNlMTAwOiAgICAgICAg MDAzMS1NZXJnZS1jb21taXQtZnJvbS1mb3JrLnBhdGNoCitTb3VyY2UxMDE6ICAgICAgICAwMDMy LU1lcmdlLWNvbW1pdC1mcm9tLWZvcmsucGF0Y2gKIAogJWlmIDAlez9mZWRvcmF9IHx8IDAlez9y aGVsfSA+PTcKIFBhdGNoMTogICAgICAgICAgIGFzdGVyaXNrLTE2LjEuMC1leHBsaWNpdC1weXRo b24zLnBhdGNoCkBAIC02NTEsNiArNjUyLDcgQEAgZWNobyAnKioqKioqKioqKioqKioqKioqKioq KioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKioqKicKIAog Y3AgJXtTOjk5fSAuL3RoaXJkLXBhcnR5L3BqcHJvamVjdC9wYXRjaGVzCiBjcCAle1M6MTAwfSAu L3RoaXJkLXBhcnR5L3BqcHJvamVjdC9wYXRjaGVzCitjcCAle1M6MTAxfSAuL3RoaXJkLXBhcnR5 L3BqcHJvamVjdC9wYXRjaGVzCiAKICMgRml4dXAgbWFrZWZpbGUgc28gc291bmQgYXJjaGl2ZXMg YXJlbid0IGRvd25sb2FkZWQvaW5zdGFsbGVkCiAle19fcGVybH0gLXBpIC1lICdzL15hbGw6Liok L2FsbDovJyBzb3VuZHMvTWFrZWZpbGUKQEAgLTE2NDQsNiArMTY0Niw5IEBAIGZpCiAlZW5kaWYK IAogJWNoYW5nZWxvZworKiBXZWQgU2VwIDIzIDIwMjYgUGV0ZXIgTGVtZW5rb3YgPGxlbWVua292 QGdtYWlsLmNvbT4gLSAyMy41LjAtNQorLSBGaXggZm9yIENWRS0yMDI2LTg0OTc1CisKICogU3Vu IFNlcCAxMyAyMDI2IFpiaWduaWV3IErEmWRyemVqZXdza2ktU3ptZWsgPHpieXN6ZWtAYW11dGFi bGUuY29tPiAtIDIzLjUuMC00LjEKIC0gUmVidWlsdCBmb3IgbGlieG1sLTIuMTUuNCAoYWdhaW4p CiAK