From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Benjamin A. Beasley To: git-commits@fedoraproject.org Subject: [rpms/python-wsgidav] epel9: Backport fix for CVE-2026-48099 Date: Sun, 31 May 2026 18:39:50 GMT Message-ID: <178025279014.1.14966136390713601080.rpms-python-wsgidav-a603db98854a@fedoraproject.org> List-ID: X-Git-Repo: rpms/python-wsgidav X-Git-Branch: epel9 X-Git-Rev: a603db98854a6ccddf64639883ceb7c688f48ee0 QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvcHl0aG9uLXdzZ2lk YXYKQnJhbmNoIDogZXBlbDkKQ29tbWl0IDogYTYwM2RiOTg4NTRhNmNjZGRmNjQ2Mzk4ODNjZWI3 YzY4OGY0OGVlMApBdXRob3IgOiBCZW5qYW1pbiBBLiBCZWFzbGV5IDxjb2RlQG11c2ljaW5teWJy YWluLm5ldD4KRGF0ZSAgIDogMjAyNi0wNS0zMVQxOTozNzo1MiswMTowMApTdGF0cyAgOiArMjYv LTEgaW4gMiBmaWxlKHMpClVSTCAgICA6IGh0dHBzOi8vc3JjLmZlZG9yYXByb2plY3Qub3JnL3Jw bXMvcHl0aG9uLXdzZ2lkYXYvYy9hNjAzZGI5ODg1NGE2Y2NkZGY2NDYzOTg4M2NlYjdjNjg4ZjQ4 ZWUwP2JyYW5jaD1lcGVsOQoKTG9nOgpCYWNrcG9ydCBmaXggZm9yIENWRS0yMDI2LTQ4MDk5Cgot LS0KZGlmZiAtLWdpdCBhL3B5dGhvbi13c2dpZGF2LnNwZWMgYi9weXRob24td3NnaWRhdi5zcGVj CmluZGV4IDFiMzQ1YzcuLmIxMGNkMmYgMTAwNjQ0Ci0tLSBhL3B5dGhvbi13c2dpZGF2LnNwZWMK KysrIGIvcHl0aG9uLXdzZ2lkYXYuc3BlYwpAQCAtMjcsNyArMjcsMTEgQEAgU291cmNlMTogICAg ICAgIHdzZ2lkYXYuMQogIwogIyBDYW5ub3QgaW1wb3J0IHdzZ2lkYXYuZGF2X2Vycm9yOiByYWlz ZXMgSW1wb3J0RXJyb3IgZHVlIHRvIGNpcmN1bGFyIGltcG9ydAogIyBodHRwczovL2dpdGh1Yi5j b20vbWFyMTAvd3NnaWRhdi9pc3N1ZXMvMzQwI2V2ZW50LTE3NjAzMjYwMDg3Ci1QYXRjaDogICAg ICAgICAle3VybH0vY29tbWl0Lzk5MWEyM2Y1ZjVmM2Y0NjIzMmVhY2Q5NjY2NmUyM2MxYjVlMTEw YjUucGF0Y2gKK1BhdGNoMDogICAgICAgICAle3VybH0vY29tbWl0Lzk5MWEyM2Y1ZjVmM2Y0NjIz MmVhY2Q5NjY2NmUyM2MxYjVlMTEwYjUucGF0Y2gKKyMgRml4IENWRS0yMDI2LTQ4MDk5CisjIGh0 dHBzOi8vZ2l0aHViLmNvbS9tYXIxMC93c2dpZGF2L2NvbW1pdC9mODk0ZWQ4NjU2ZDdiZGQ3NDM4 YWI4MTQ4YzVhMDI1NDZjYjE1MTgzCisjIFdpdGhvdXQgY2hhbmdlbG9nIGVudHJ5LCB0byBhdm9p ZCBtZXJnZSBjb25mbGljdHMKK1BhdGNoMTogICAgICAgICB3c2dpZGF2LTQuMy4zLUNWRS0yMDI2 LTQ4MDk5LnBhdGNoCiAKIEJ1aWxkQXJjaDogICAgICBub2FyY2gKIAoKZGlmZiAtLWdpdCBhL3dz Z2lkYXYtNC4zLjMtQ1ZFLTIwMjYtNDgwOTkucGF0Y2ggYi93c2dpZGF2LTQuMy4zLUNWRS0yMDI2 LTQ4MDk5LnBhdGNoCm5ldyBmaWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAwMDAwMDAuLmIwNzMxOGQK LS0tIC9kZXYvbnVsbAorKysgYi93c2dpZGF2LTQuMy4zLUNWRS0yMDI2LTQ4MDk5LnBhdGNoCkBA IC0wLDAgKzEsMjEgQEAKK2RpZmYgLS1naXQgYS93c2dpZGF2L2ZzX2Rhdl9wcm92aWRlci5weSBi L3dzZ2lkYXYvZnNfZGF2X3Byb3ZpZGVyLnB5CitpbmRleCBkZTliMDBjNy4uN2IyYjdjMTQgMTAw NjQ0CistLS0gYS93c2dpZGF2L2ZzX2Rhdl9wcm92aWRlci5weQorKysrIGIvd3NnaWRhdi9mc19k YXZfcHJvdmlkZXIucHkKK0BAIC00NTcsOSArNDU3LDE0IEBAIGRlZiBfbG9jX3RvX2ZpbGVfcGF0 aChzZWxmLCBwYXRoOiBzdHIsIGVudmlyb246IGRpY3QgPSBOb25lKToKKyAgICAgICAgICMgVHJ5 IGFsdGVybmF0aXZlIFVSTCBpZiBub3QgZm91bmQgKG9yIGV2ZW4gb3ZlcnJpZGUgdGFyZ2V0KToK KyAgICAgICAgIGlzX3NoYWRvdywgZmlsZV9wYXRoID0gc2VsZi5fcmVzb2x2ZV9zaGFkb3dfcGF0 aChwYXRoLCBlbnZpcm9uLCBmaWxlX3BhdGgpCisgCistICAgICAgICBpZiBub3QgZmlsZV9wYXRo LnN0YXJ0c3dpdGgocm9vdF9wYXRoKSBhbmQgbm90IGlzX3NoYWRvdzoKKysgICAgICAgICMgRW5z dXJlIHRoZSBjb250YWlubWVudCBjaGVjayBpcyBwYXRoLWJvdW5kYXJ5LWF3YXJlOiBhcHBlbmQg b3Muc2VwIHNvCisrICAgICAgICAjIHRoYXQgYSBzaWJsaW5nIGRpcmVjdG9yeSAoZS5nLiAvdG1w L3NoYXJlX2V2aWwpIHdob3NlIG5hbWUgKnN0YXJ0cyB3aXRoKgorKyAgICAgICAgIyByb290X3Bh dGggKC90bXAvc2hhcmUpIGlzIGNvcnJlY3RseSByZWplY3RlZC4KKysgICAgICAgIHJvb3RfcGF0 aF93aXRoX3NlcCA9IHJvb3RfcGF0aC5yc3RyaXAob3Muc2VwKSArIG9zLnNlcAorKyAgICAgICAg ZmlsZV9wYXRoX3dpdGhfc2VwID0gZmlsZV9wYXRoLnJzdHJpcChvcy5zZXApICsgb3Muc2VwCisr ICAgICAgICBpZiBub3QgZmlsZV9wYXRoX3dpdGhfc2VwLnN0YXJ0c3dpdGgocm9vdF9wYXRoX3dp dGhfc2VwKSBhbmQgbm90IGlzX3NoYWRvdzoKKyAgICAgICAgICAgICByYWlzZSBSdW50aW1lRXJy b3IoCistICAgICAgICAgICAgICAgIGYiU2VjdXJpdHkgZXhjZXB0aW9uOiB0cmllZCB0byBhY2Nl c3MgZmlsZSBvdXRzaWRlIHJvb3Q6IHtmaWxlX3BhdGh9IgorKyAgICAgICAgICAgICAgICBmIlNl Y3VyaXR5IGV4Y2VwdGlvbjogdHJpZWQgdG8gYWNjZXNzIGZpbGUgb3V0c2lkZSByb290IHtyb290 X3BhdGh9OiB7ZmlsZV9wYXRofSIKKyAgICAgICAgICAgICApCisgCisgICAgICAgICAjIENvbnZl cnQgdG8gdW5pY29kZQo=