[rpms/fence-agents] eln: - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939

[rpms/fence-agents] eln: - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939

[Oyvind Albrigtsen]

          A new commit has been pushed.

          Repo   : rpms/fence-agents
          Branch : eln
          Commit : bd80e194805a8c1189ee48b29489468bdf1ec4f0
          Author : Oyvind Albrigtsen <oalbrigt@redhat.com>
          Date   : 2026-07-15T16:21:30-04:00
          Stats  : +12/-5 in 2 file(s)
          URL    : https://src.fedoraproject.org/rpms/fence-agents/c/bd80e194805a8c1189ee48b29489468bdf1ec4f0?branch=eln

          Log:
          - bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
Resolves: RHEL-193809

---
diff --git a/fence-agents.spec b/fence-agents.spec
index 7260638..82e73e3 100644
--- a/fence-agents.spec
+++ b/fence-agents.spec
@@ -13,7 +13,7 @@
 Name: fence-agents
 Summary: Set of unified programs capable of host isolation ("fencing")
 Version: 4.16.0
-Release: 30%{?alphatag:.%{alphatag}}%{?dist}
+Release: 31%{?alphatag:.%{alphatag}}%{?dist}
 License: GPL-2.0-or-later AND LGPL-2.0-or-later
 URL: https://github.com/ClusterLabs/fence-agents
 Source0: https://fedorahosted.org/releases/f/e/fence-agents/%{name}-%{version}.tar.gz
@@ -69,7 +69,7 @@ Source1401: chardet-3.0.4.tar.gz
 Source1402: google-api-core-1.34.1.tar.gz
 Source1403: google-auth-2.28.1.tar.gz
 Source1404: google-auth-httplib2-0.2.0.tar.gz
-Source1405: httplib2-0.22.0.tar.gz
+Source1405: httplib2-0.32.0.tar.gz
 Source1406: uritemplate-3.0.1.tar.gz
 Source1407: cachetools-5.3.2.tar.gz
 Source1408: googleapis-common-protos-1.62.0.tar.gz
@@ -82,6 +82,7 @@ Source1414: pyroute2.ipset-0.6.13.tar.gz
 Source1415: pyroute2.ndb-0.6.13.tar.gz
 Source1416: pyroute2.nftables-0.6.13.tar.gz
 Source1417: pyroute2.nslink-0.6.13.tar.gz
+Source1418: PySocks-1.7.1.tar.gz
 ## NEEEDED FOR GOOGLE AUTH
 ## INFO: pip is looking at multiple versions of google-auth to determine which version is compatible with other requirements. This could take a while.
 ## ERROR: Could not find a version that satisfies the requirement rsa<5,>=3.1.4 (from google-auth) (from versions: none)
@@ -459,7 +460,7 @@ Provides: bundled(python3-chardet) = 3.0.4
 Provides: bundled(python3-google-api-core) = 1.34.1
 Provides: bundled(python3-google-auth) = 2.28.1
 Provides: bundled(python3-google-auth-httplib2) = 0.2.0
-Provides: bundled(python3-httplib2) = 0.22.0
+Provides: bundled(python3-httplib2) = 0.32.0
 Provides: bundled(python3-uritemplate) = 3.0.1
 Provides: bundled(python3-cachetools) = 5.3.2
 Provides: bundled(python3-googleapis-common-protos) = 1.62.0
@@ -472,6 +473,7 @@ Provides: bundled(python-pyroute2-ipset) = 0.6.13
 Provides: bundled(python-pyroute2-ndb) = 0.6.13
 Provides: bundled(python-pyroute2-nftables) = 0.6.13
 Provides: bundled(python-pyroute2-nslink) = 0.6.13
+Provides: bundled(python-PySocks) = 1.7.1
 Provides: bundled(python3-rsa) = 4.9
 %description -n ha-cloud-support
 Support libraries for Fence Agents.
@@ -1229,6 +1231,10 @@ are located on corosync cluster nodes.
 %endif
 
 %changelog
+* Tue Jul 14 2026 Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.16.0-31
+- bundled httplib2: upgrade to v0.32.0 to fix CVE-2026-59939
+  Resolves: RHEL-193809
+
 * Thu Jul 09 2026 Arslan Ahmad <arahmad@redhat.com> - 4.16.0-30
 - fence_vmware_rest: add token-based authentication
   Resolves: RHEL-191488

diff --git a/sources b/sources
index 3a2ccb8..1c3145d 100644
--- a/sources
+++ b/sources
@@ -3,7 +3,7 @@ SHA512 (requirements-common.txt) = 27efb8655b5cb949ddbdaa1ef8bb0787349ad3173ae46
 SHA512 (requirements-aliyun.txt) = 74ae6b3f7bb0c25b532f606d7dea3cf4e3a0d1c1abdce78d01e2ab8e81c9f346162142679bad884b2fa110d4d6a8c4692b678017eb1fc7d092907c0c063b1c79
 SHA512 (requirements-aws.txt) = ca39604d09f4b05589ddaa437be13b7f5d1868218745df107564d73a6c32efb7e4761436197a69653edc47a78f40dd7d5f0894935ec21b8f23b7c7bc71dfd0d1
 SHA512 (requirements-azure.txt) = 8071c96bb3e2b82852b10fd68b77b69a7fce6153ab315298ceb07456fe66f3aca056d3273f11eb87ff30049759e8b4fddf62e39acb91953d36e933e44dce8c9b
-SHA512 (requirements-google.txt) = 75001e26b2139da27e882889eb83118005f0973541c4eb8f5214520ceaed2add17f50ac70cd037d54868d3dfd1bec82a46a2817e4d28b4c64b0e9ce4b2a3b227
+SHA512 (requirements-google.txt) = b71ef76f6f976b890666f264cbbb37909431d5c49b28aac5ec4abc19f11546e132051f8936561a94eb6b3790e23a07daf8aaf1eb46d147f36b56f0457d0abe59
 SHA512 (pycurl-7.45.6.tar.gz) = 4eb53cbb3c8801950c76adb920b30919ca9f70e3f93dcef898d048244c475ec4a135590d173398efeb7642be33c11cb1742cb2519713088223870141e0cef8b3
 SHA512 (suds_community-1.2.0.tar.gz) = 8955ad288fbd9d472b8aa4b4a016da66616436bb41b44d7935f4c14ae897c127e0d6c14457f2303ead671f92edc51454701c9658aec32f6af44882526ed86aeb
 SHA512 (aliyun-python-sdk-ecs-4.24.82.tar.gz) = b48d0de469e24d3078f09f01b2da67105f82d6f09271aa2b7dbe29c424c244edab32c4bdd5e01a06076279f30220045b0835b673855efa1e3dbc140fdec72beb
@@ -35,7 +35,7 @@ SHA512 (chardet-3.0.4.tar.gz) = 61a03b23447a2bfe52ceed4dd1b9afdb5784da1933a62377
 SHA512 (google-api-core-1.34.1.tar.gz) = 3714ec8e380003da8cecd5a0de832027b2ca6564bc407cce5b5fc8780fde294141bf6313c7335e54cb8b3ed5af7a53547641c1216529a636104a19fceac668f4
 SHA512 (google-auth-2.28.1.tar.gz) = 013c90dbeb6868406f56de87b72277a7932795ae3b806442bf07e90d34143e9a8035d2481f8c46a707a2bb0ed4285a1cb249613eff0da0b28b1aced783ce6a08
 SHA512 (google-auth-httplib2-0.2.0.tar.gz) = 82ffe87172056cd6d15e3d5f12c155ff9e09fdea9d8e6385fd3ddc2db374df41a74dcfb3aff3df1d046d2b537f0a98ee9b5c7dd7818d2274af9462df48e7bdf8
-SHA512 (httplib2-0.22.0.tar.gz) = 25fabeef422b1f7cdc79960db93a2442d1281c310b19259c00de9010f98f53438d88c5643294f8c992a14e64622c02a3fbf0ed79b2aa78f683ee77fa3a073b89
+SHA512 (httplib2-0.32.0.tar.gz) = f6d2de150c5548bf052d97ed683b99f133410302bbe50a33726635d6e02e4b04b362b9f3a56bff5b6baac51a00f4610ebf4237f65075a26e1045a2fb99064020
 SHA512 (uritemplate-3.0.1.tar.gz) = 260da5901d28ca2354d972e00ed468c9bcf2901f948cb7759ff3e9d3a7b67da90ba754e555d6695c5095801b106ffd422459f0860b901a75e01575e159eb8f48
 SHA512 (cachetools-5.3.2.tar.gz) = 1a6e32acefdd6165b3348dc32df300c5d3cd5bcff23c5f8eae5d7b6bc40a9aab7b5d6dee4bf23ebb49dea9a434570e854e24325028680a581f2b359d16e5d836
 SHA512 (googleapis-common-protos-1.62.0.tar.gz) = 13612ed20fdb0f7f1310a8c727d5b833286237f9470fd5b183a0a92463b043a7aa14b4e06188d8bd3e1aa9f1d6e468e96b06a448a8a76f85de3aea7d9bc734f0
@@ -48,6 +48,7 @@ SHA512 (pyroute2.ipset-0.6.13.tar.gz) = c64382c9297745f461da4ee548986dc35c928176
 SHA512 (pyroute2.ndb-0.6.13.tar.gz) = 17a992483c34d6bc0ae12dc1f077f52ed0de0dc37db8e723e28dbd59ab99da27abe6f2d621a6309193559245ecc80cc21cde000c52e1d709f97c281fb4d253bb
 SHA512 (pyroute2.nftables-0.6.13.tar.gz) = bb9426bda897ebda74fdccf59782b9d8dc665ba7f07aaa92fd80e039a9098f581256b66318431113a7b3da19b2dba279492661b97a67a724e41b41dd89e20bfe
 SHA512 (pyroute2.nslink-0.6.13.tar.gz) = 16b3c8ea6d5319520a4d777f5ad76c265ea38c0b8ecc98922ddc6d898d05cfc931acd6b4a2884b1803b318e17744bf93961312ac60ea227ff2d01245ceedf935
+SHA512 (PySocks-1.7.1.tar.gz) = cef4a5ce8c67fb485644696a23bf68a721db47f3211212de2d4431eaf9ebd26077dd5a06f6dfa7fde2dcb9d7c1ed551facd014e999929cb4d7b504972c464016
 SHA512 (rsa-4.9.tar.gz) = 85f359cc448a42f267f425fcf761597eeeab942523de49284b01d6ea2bcca8bddf0fac26926b487ae91c15889a7c4897a33ee00de859f28fe9cca19ef98c3f19
 SHA512 (poetry_core-1.9.0.tar.gz) = 51812a673cd430511aa33fc84a646f0f73a3dfc334848f570f598ddefc83b1d29ed2061cc0109e59dd9f15ad4863920a165dfec86a27ecd6aa7fcecd425f9c7f
 SHA512 (openshift-0.13.2.tar.gz) = ff1f2a72b154c59a9e93381fbce51029b9c64fa11ad3a9f39281a55167d8e97344425419e3139e7369e31495c17ae69ba2a7cc47b86ad0a81dc21980edeff366