From mboxrd@z Thu Jan  1 00:00:00 1970
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
From: =?utf-8?b?THVrw6HFoSBaYWNoYXIgPGx6YWNoYXJAcmVkaGF0LmNvbT4=?=
To: git-commits@fedoraproject.org
Subject: [rpms/python3.12] f44: Security fix for CVE-2026-15308
Date: Thu, 30 Jul 2026 15:18:52 GMT
Message-ID: <178542473209.1.14973897813415986567.rpms-python3.12-06f5d3454fc8@fedoraproject.org>
List-ID: <git-commits.fedoraproject.org>
X-Git-Repo: rpms/python3.12
X-Git-Branch: f44
X-Git-Rev: 06f5d3454fc8d2b6950a9334598d833ee8aa292b
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