Received: from mail.camelia.dev (mail.camelia.dev [IPv6:2a01:4f9:c013:55d::1]) by gbr-app-1.alpinelinux.org (Postfix) with ESMTPS id 8E86B21FFF4 for <~alpine/users@lists.alpinelinux.org>; Thu, 30 Apr 2026 17:37:32 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=camelia.dev; s=mail; t=1777570648; bh=Ngmzw78QkgACljUQLhRDXjqcEuEtN7DvrCigahOKUUw=; h=Date:To:From:Subject; b=oAf5Dyj0fjEgYlD5VVXHqGQVZWPNcE74dTDA1Y3YOUyF9Mxx+oGQUZsq59roIVIft EC20r3RNaOkXqmBXrC7iSvYxCOQm5f+F7PwKygxH/8udSXj8bewTBvWolw+bia6gMu BKlvnygDYF8DyZOHDAvgjZmO39Kcioqab5CG+BoDcpxDCbp3e+wFBa3ZjSpCSlJS1s bq8EMSTToa4LyYucQ0ONAq0Q/jG05Bc4HLt9xtK5wbRJQCwSW75xnc9yfxqR3elzfL Y9zFkINbTM67pWk4TR/qoYMrzIY+dDQjyTevLNgK6JcOqxbmGP4EqjClJY+dfdEoYp tzH1iFm9cooKA== X-Virus-Scanned: amavis at camelia.dev Message-ID: <59b399b4-7ae8-4bc5-b2c1-d346235ec796@camelia.dev> Date: Thu, 30 Apr 2026 19:37:26 +0200 MIME-Version: 1.0 To: ~alpine/users@lists.alpinelinux.org Content-Language: en-US From: Camelia Lavender Subject: About CVE-2026-31431 ("Copy Fail") on Alpine Autocrypt: addr=cam@camelia.dev; keydata= xjMEZxb6PRYJKwYBBAHaRw8BAQdAoSyxfx6E3Xs+xzYjRM1mu/9eEE47sIv2cw9mceAQBFTN IkNhbWVsaWEgTGF2ZW5kZXIgPGNhbUBjYW1lbGlhLmRldj7CwdQEExYKAjwCGwMFCRLMAwAF CwkIBwICIgIGFQoJCAsCBBYCAwECHgcCF4ACGQEWIQR2TroXf4myj1yW6eTbzHDvvDYOlwUC aEH8rTEUgAAAAAAQABhwcm9vZkBhcmlhZG5lLmlkeG1wcDpjYW1lbGlhQGNhbWVsaWEuZGV2 NhSAAAAAABAAHXByb29mQGFyaWFkbmUuaWRpcmM6Ly9pcmMubGliZXJhLmNoYXQvYzRtZWxp YUMUgAAAAAAQACpwcm9vZkBhcmlhZG5lLmlkaHR0cHM6Ly9jb2RlYmVyZy5vcmcvY2FtZWxp YS9mb3JnZWpvX3Byb29mRhSAAAAAABAALXByb29mQGFyaWFkbmUuaWRodHRwczovL2dpdC5j YW1lbGlhLmRldi9jYW1lbGlhL2Zvcmdlam9fcHJvb2aWFIAAAAAAEAB9cHJvb2ZAYXJpYWRu ZS5pZG1hdHJpeDp1L2M0bTplbnZzLm5ldD9vcmcua2V5b3hpZGUucj1kQmZRWnhDb0dWbVNU dWpmaXY6bWF0cml4Lm9yZyZvcmcua2V5b3hpZGUuZT1LdGR1YjVMNkRBeE9SZkc2YnhodWNQ Y05vQndWeTZjeU11MEJqZ1ZKVVlFMRSAAAAAABAAGHByb29mQGFyaWFkbmUuaWRkbnM6Y2Ft ZWxpYS5kZXY/dHlwZT1UWFQ6FIAAAAAAEAAhcHJvb2ZAYXJpYWRuZS5pZGh0dHBzOi8vZmVk aS5jYW1lbGlhLmRldi9AY2FtZWxpYQAKCRDbzHDvvDYOlyfbAQD4HXpjaiwrN8blld7l18TL nqYT/PNpjPUjP3X717XTZAD/WNmzNSTgYFshYEjkUdyL8IZvG5MKkQxjzKQ6RMxN5A7OOARn Fvo9EgorBgEEAZdVAQUBAQdAqshBrvkB2JxzAd9DCJSxAakNE03oaUZwB0/0bHoKWj4DAQgH wn4EGBYKACYWIQR2TroXf4myj1yW6eTbzHDvvDYOlwUCZxb6PQIbDAUJEswDAAAKCRDbzHDv vDYOl9tCAQD9qMqFI89k6mcoLVYdsdhFvbTRsAGPEdJBoBDdLyRBkgEA9y+6cqvXQMqUCmEQ UGfTktfaK2fkLHoQqGlpQ371owI= Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="------------CB5up3LwnsNuGABrSmH3znzw" This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --------------CB5up3LwnsNuGABrSmH3znzw Content-Type: multipart/mixed; boundary="------------DUX0VhqbA60vIH0w4MSopa6k"; protected-headers="v1" Message-ID: <59b399b4-7ae8-4bc5-b2c1-d346235ec796@camelia.dev> Date: Thu, 30 Apr 2026 19:37:26 +0200 MIME-Version: 1.0 To: ~alpine/users@lists.alpinelinux.org Content-Language: en-US From: Camelia Lavender Subject: About CVE-2026-31431 ("Copy Fail") on Alpine Autocrypt: addr=cam@camelia.dev; keydata= xjMEZxb6PRYJKwYBBAHaRw8BAQdAoSyxfx6E3Xs+xzYjRM1mu/9eEE47sIv2cw9mceAQBFTN IkNhbWVsaWEgTGF2ZW5kZXIgPGNhbUBjYW1lbGlhLmRldj7CwdQEExYKAjwCGwMFCRLMAwAF CwkIBwICIgIGFQoJCAsCBBYCAwECHgcCF4ACGQEWIQR2TroXf4myj1yW6eTbzHDvvDYOlwUC aEH8rTEUgAAAAAAQABhwcm9vZkBhcmlhZG5lLmlkeG1wcDpjYW1lbGlhQGNhbWVsaWEuZGV2 NhSAAAAAABAAHXByb29mQGFyaWFkbmUuaWRpcmM6Ly9pcmMubGliZXJhLmNoYXQvYzRtZWxp YUMUgAAAAAAQACpwcm9vZkBhcmlhZG5lLmlkaHR0cHM6Ly9jb2RlYmVyZy5vcmcvY2FtZWxp YS9mb3JnZWpvX3Byb29mRhSAAAAAABAALXByb29mQGFyaWFkbmUuaWRodHRwczovL2dpdC5j YW1lbGlhLmRldi9jYW1lbGlhL2Zvcmdlam9fcHJvb2aWFIAAAAAAEAB9cHJvb2ZAYXJpYWRu ZS5pZG1hdHJpeDp1L2M0bTplbnZzLm5ldD9vcmcua2V5b3hpZGUucj1kQmZRWnhDb0dWbVNU dWpmaXY6bWF0cml4Lm9yZyZvcmcua2V5b3hpZGUuZT1LdGR1YjVMNkRBeE9SZkc2YnhodWNQ Y05vQndWeTZjeU11MEJqZ1ZKVVlFMRSAAAAAABAAGHByb29mQGFyaWFkbmUuaWRkbnM6Y2Ft ZWxpYS5kZXY/dHlwZT1UWFQ6FIAAAAAAEAAhcHJvb2ZAYXJpYWRuZS5pZGh0dHBzOi8vZmVk aS5jYW1lbGlhLmRldi9AY2FtZWxpYQAKCRDbzHDvvDYOlyfbAQD4HXpjaiwrN8blld7l18TL nqYT/PNpjPUjP3X717XTZAD/WNmzNSTgYFshYEjkUdyL8IZvG5MKkQxjzKQ6RMxN5A7OOARn Fvo9EgorBgEEAZdVAQUBAQdAqshBrvkB2JxzAd9DCJSxAakNE03oaUZwB0/0bHoKWj4DAQgH wn4EGBYKACYWIQR2TroXf4myj1yW6eTbzHDvvDYOlwUCZxb6PQIbDAUJEswDAAAKCRDbzHDv vDYOl9tCAQD9qMqFI89k6mcoLVYdsdhFvbTRsAGPEdJBoBDdLyRBkgEA9y+6cqvXQMqUCmEQ UGfTktfaK2fkLHoQqGlpQ371owI= --------------DUX0VhqbA60vIH0w4MSopa6k Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: base64 SGkgZXZlcnlvbmUsDQoNCldoaWxlIGFwcGx5aW5nIG1pdGlnYXRpb24gcmVjb21tZW5kYXRp b25zIGZvciBDVkUtMjAyNi0zMTQzMSBvbiBzZXZlcmFsIA0KbWFjaGluZXMsIEkgbm90aWNl ZCB0aGF0IEkgd2Fzbid0IGFibGUgdG8gcnVuIHRoZSBleHBsb2l0IG9uIEFscGluZSANCnN5 c3RlbXMsIGV2ZW4gYWZ0ZXIgZW5hYmxpbmcgdGhlIGFsZ2lmX2FlYWQgbW9kdWxlLg0KDQpE aWQgSSBtaXNzIHNvbWV0aGluZyB3aGlsZSB0cnlpbmcgdG8gcnVuIHRoZSBleHBsb2l0IG9u IG15IHRlc3QgbWFjaGluZSANCihJIGdvdCBhIHBlcm1pc3Npb24gZXJyb3IsIHNwZWNpZmlj YWxseSkgb3IgaXMgdGhlcmUgc29tZXRoaW5nIHRoYXQgDQpwcmV2ZW50cyBBbHBpbmUgZnJv bSBiZWluZyBhZmZlY3RlZD8gSSB0cmllZCB3aXRoIG90aGVyIHNldHVpZCBiaW5hcmllcywg DQpzdWNoIGFzIGRvYXMsIGJ1dCBkaWQgbm90IGdldCByZXN1bHRzIGVpdGhlci4NCg0KLS0g DQpTaW5jZXJlbHksDQoNCkNhbWVsaWEgTGF2ZW5kZXIgKHNoZS90aGV5KQ0KUEdQOiAweERC Q0M3MEVGQkMzNjBFOTcNCg0K --------------DUX0VhqbA60vIH0w4MSopa6k-- --------------CB5up3LwnsNuGABrSmH3znzw Content-Type: application/pgp-signature; name="OpenPGP_signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="OpenPGP_signature.asc" -----BEGIN PGP SIGNATURE----- wnsEABYIACMWIQR2TroXf4myj1yW6eTbzHDvvDYOlwUCafOTVgUDAAAAAAAKCRDbzHDvvDYOl7oq AP98cU5Qc39hCKf8lFTFvlKPNfMp+9nHsCPjxPUvAwqeiQD8DeGBZOue4Gm+aSCnrDgygEzreR9h TJdDDuoCDgK5qQ4= =Gg7Z -----END PGP SIGNATURE----- --------------CB5up3LwnsNuGABrSmH3znzw--