From mboxrd@z Thu Jan  1 00:00:00 1970
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
From: =?utf-8?b?THVrw6HFoSBaYWNoYXIgPGx6YWNoYXJAcmVkaGF0LmNvbT4=?=
To: git-commits@fedoraproject.org
Subject: [rpms/python3.12] rawhide: Security fix for CVE-2026-15308
Date: Thu, 30 Jul 2026 15:18:43 GMT
Message-ID: <178542472337.1.9875704607449282244.rpms-python3.12-06f5d3454fc8@fedoraproject.org>
List-ID: <git-commits.fedoraproject.org>
X-Git-Repo: rpms/python3.12
X-Git-Branch: rawhide
X-Git-Rev: 06f5d3454fc8d2b6950a9334598d833ee8aa292b
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