From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Lumir Balhar To: git-commits@fedoraproject.org Subject: [rpms/python-pip] rawhide: Security fix for CVE-2026-13346 Date: Thu, 27 Aug 2026 09:46:25 GMT Message-ID: <178782398524.1.2161161783997339710.rpms-python-pip-ac655bc5de63@fedoraproject.org> List-ID: X-Git-Repo: rpms/python-pip X-Git-Branch: rawhide X-Git-Rev: ac655bc5de633400527d3c4165d9166d41619e3a ICAgICAgICAgICAgQSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KCiAgICAgICAgICAgIFJl cG8gICA6IHJwbXMvcHl0aG9uLXBpcAogICAgICAgICAgICBCcmFuY2ggOiByYXdoaWRlCiAgICAg ICAgICAgIENvbW1pdCA6IGFjNjU1YmM1ZGU2MzM0MDA1MjdkM2M0MTY1ZDkxNjZkNDE2MTllM2EK ICAgICAgICAgICAgQXV0aG9yIDogTHVtaXIgQmFsaGFyIDxsYmFsaGFyQHJlZGhhdC5jb20+CiAg ICAgICAgICAgIERhdGUgICA6IDIwMjYtMDgtMjZUMDg6NTg6MTcrMDI6MDAKICAgICAgICAgICAg U3RhdHMgIDogKzM1MC8tMCBpbiAyIGZpbGUocykKICAgICAgICAgICAgVVJMICAgIDogaHR0cHM6 Ly9zcmMuZmVkb3JhcHJvamVjdC5vcmcvcnBtcy9weXRob24tcGlwL2MvYWM2NTViYzVkZTYzMzQw MDUyN2QzYzQxNjVkOTE2NmQ0MTYxOWUzYT9icmFuY2g9cmF3aGlkZQoKICAgICAgICAgICAgTG9n OgogICAgICAgICAgICBTZWN1cml0eSBmaXggZm9yIENWRS0yMDI2LTEzMzQ2CgpDby1BdXRob3Jl ZC1ieTogTWlybyBIcm9uxI1vayA8bWlyb0Bocm9uY29rLmN6PgoKLS0tCmRpZmYgLS1naXQgYS8x MGRmYjZiOTAwLnBhdGNoIGIvMTBkZmI2YjkwMC5wYXRjaApuZXcgZmlsZSBtb2RlIDEwMDY0NApp bmRleCAwMDAwMDAwLi41YjU2YzdlCi0tLSAvZGV2L251bGwKKysrIGIvMTBkZmI2YjkwMC5wYXRj aApAQCAtMCwwICsxLDM0NyBAQAorRnJvbSAxMGRmYjZiOTAwNTQ4NDU3OGIzODZmNjRiOWYzNjk4 MmUzZGM2Njc5IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQorRnJvbTogRGFtaWFuIFNoYXcgPGRh bWlhbi5wZXRlci5zaGF3QGdtYWlsLmNvbT4KK0RhdGU6IFR1ZSwgMzAgSnVuIDIwMjYgMjE6NTI6 MzkgLTA0MDAKK1N1YmplY3Q6IFtQQVRDSF0gRml4IExpbmsuZmlsZW5hbWUgZGVjb2RpbmcgVVJM IHBhdGggdHdpY2UgKCMxNDExMCkKKworTGluayBhbHJlYWR5IHBlcmNlbnQtZGVjb2RlcyB0aGUg VVJMIHBhdGggaW50byBgc2VsZi5fcGF0aGAsIGJ1dAorYExpbmsuZmlsZW5hbWVgIGRlY29kZWQg dGhlIGJhc2VuYW1lIGFnYWluLCBzbyBhIGRvdWJseS1lbmNvZGVkCitzZXBhcmF0b3Igd2FzIGRl Y29kZWQgdHdpY2U6IGAlMjUyRmAgYmVjYW1lIGAlMkZgIGluIGBfX2luaXRfX2AsIHRoZW4KK2Av YCBpbiBgZmlsZW5hbWVgLCB0dXJuaW5nIHRoZSBzaW5nbGUgY29tcG9uZW50IGBhJTJGYi53aGxg IGludG8KK2BhL2Iud2hsYC4KKworRHJvcCB0aGUgc2Vjb25kIGRlY29kZSwgYW5kIGFkZCBhIGBq b2luX3dpdGhpbl9kaXJlY3RvcnlgIGhlbHBlciBzbyB0aGUKK2Rvd25sb2FkLXBhdGggam9pbnMg dHJlYXQgdGhlIG5hbWUgYXMgYSBzaW5nbGUgcGF0aCBjb21wb25lbnQuCistLS0KKyBuZXdzLzE0 MTEwLmJ1Z2ZpeC5yc3QgICAgICAgICAgICAgICAgICAgfCAgIDEgKworIHNyYy9waXAvX2ludGVy bmFsL21vZGVscy9saW5rLnB5ICAgICAgICB8ICA2MyArKysrKysrKysrLS0tCisgc3JjL3BpcC9f aW50ZXJuYWwvbmV0d29yay9kb3dubG9hZC5weSAgIHwgIDIwICsrKy0tCisgc3JjL3BpcC9faW50 ZXJuYWwvb3BlcmF0aW9ucy9wcmVwYXJlLnB5IHwgICA2ICstCisgdGVzdHMvdW5pdC90ZXN0X2xp bmsucHkgICAgICAgICAgICAgICAgIHwgMTEzICsrKysrKysrKysrKysrKysrKysrKysrLQorIDUg ZmlsZXMgY2hhbmdlZCwgMTgyIGluc2VydGlvbnMoKyksIDIxIGRlbGV0aW9ucygtKQorIGNyZWF0 ZSBtb2RlIDEwMDY0NCBuZXdzLzE0MTEwLmJ1Z2ZpeC5yc3QKKworZGlmZiAtLWdpdCBhL25ld3Mv MTQxMTAuYnVnZml4LnJzdCBiL25ld3MvMTQxMTAuYnVnZml4LnJzdAorbmV3IGZpbGUgbW9kZSAx MDA2NDQKK2luZGV4IDAwMDAwMDAwMDAuLmY3ZDRmNzg4ODIKKy0tLSAvZGV2L251bGwKKysrKyBi L25ld3MvMTQxMTAuYnVnZml4LnJzdAorQEAgLTAsMCArMSBAQAorK0ZpeCBgYExpbmsuZmlsZW5h bWVgYCBkZWNvZGluZyB0aGUgVVJMIHBhdGggdHdpY2UuCitkaWZmIC0tZ2l0IGEvc3JjL3BpcC9f aW50ZXJuYWwvbW9kZWxzL2xpbmsucHkgYi9zcmMvcGlwL19pbnRlcm5hbC9tb2RlbHMvbGluay5w eQoraW5kZXggMGEwOWM2NjIyMi4uY2JiZTk0NWMxNyAxMDA2NDQKKy0tLSBhL3NyYy9waXAvX2lu dGVybmFsL21vZGVscy9saW5rLnB5CisrKysgYi9zcmMvcGlwL19pbnRlcm5hbC9tb2RlbHMvbGlu ay5weQorQEAgLTEzLDYgKzEzLDcgQEAKKyBmcm9tIHR5cGluZyBpbXBvcnQgKAorICAgICBBbnks CisgICAgIE5hbWVkVHVwbGUsCisrICAgIE5ld1R5cGUsCisgKQorIAorIGZyb20gcGlwLl9pbnRl cm5hbC5leGNlcHRpb25zIGltcG9ydCBJbnZhbGlkRWdnRnJhZ21lbnQKK0BAIC0zMCw2ICszMSw0 OSBAQAorIGxvZ2dlciA9IGxvZ2dpbmcuZ2V0TG9nZ2VyKF9fbmFtZV9fKQorIAorIAorKyMgQSBz aW5nbGUgcGF0aCBjb21wb25lbnQ6IHBlcmNlbnQtZGVjb2RlZCBvbmNlIGFuZCByZWR1Y2VkIHRv IGEgYmFzZW5hbWUsIHNvIGl0CisrIyBjb250YWlucyBubyBwYXRoIHNlcGFyYXRvciBhbmQgaXMg bm90IGEgYGAuYGAgb3IgYGAuLmBgIHJlZmVyZW5jZS4gVGhlIGVtcHR5CisrIyBzdHJpbmcgbWVh bnMgIm5vIGNvbXBvbmVudCIuCisrUGF0aENvbXBvbmVudCA9IE5ld1R5cGUoIlBhdGhDb21wb25l bnQiLCBzdHIpCisrCisrCisrZGVmIF90b19wYXRoX2NvbXBvbmVudChuYW1lOiBzdHIpIC0+IFBh dGhDb21wb25lbnQ6CisrICAgICIiIlJlZHVjZSBgYG5hbWVgYCB0byBhIHNpbmdsZSBwYXRoIGNv bXBvbmVudCwgb3IgYGAiImBgIGlmIGl0IGhhcyBub25lLgorKworKyAgICBgYG9zLnBhdGguYmFz ZW5hbWVgYCBkcm9wcyBhbnkgZGlyZWN0b3J5IHBhcnQsIGRyaXZlIGxldHRlciwgb3Igc2VwYXJh dG9yOworKyAgICBhIGBgLmBgLCBgYC4uYGAsIG9yIGVtcHR5IHJlc3VsdCBpcyBub3QgYSBjb21w b25lbnQgYW5kIGJlY29tZXMgYGAiImBgLgorKyAgICAiIiIKKysgICAgbmFtZSA9IG9zLnBhdGgu YmFzZW5hbWUobmFtZSkKKysgICAgaWYgbmFtZSBpbiAoIiIsIG9zLmN1cmRpciwgb3MucGFyZGly KToKKysgICAgICAgIHJldHVybiBQYXRoQ29tcG9uZW50KCIiKQorKworKyAgICByZXR1cm4gUGF0 aENvbXBvbmVudChuYW1lKQorKworKworK2RlZiBhc19wYXRoX2NvbXBvbmVudChuYW1lOiBzdHIp IC0+IFBhdGhDb21wb25lbnQ6CisrICAgICIiIkxpa2UgYGBfdG9fcGF0aF9jb21wb25lbnRgYCBi dXQgcmVqZWN0IHRoZSBlbXB0eSByZXN1bHQuCisrCisrICAgIFVzZSB3aGVyZSBhIGZpbGUgaXMg YWJvdXQgdG8gYmUgd3JpdHRlbiwgc28gYSBtaXNzaW5nIG5hbWUgaXMgYW4gZXJyb3IKKysgICAg cmF0aGVyIHRoYW4gYSBzaWxlbnQgZmFsbGJhY2sgdG8gdGhlIGRpcmVjdG9yeSBpdHNlbGYuCisr ICAgICIiIgorKyAgICBjb21wb25lbnQgPSBfdG9fcGF0aF9jb21wb25lbnQobmFtZSkKKysgICAg aWYgbm90IGNvbXBvbmVudDoKKysgICAgICAgIHJhaXNlIFZhbHVlRXJyb3IoZiJVbmV4cGVjdGVk IGZpbGUgbmFtZSBkZXJpdmVkIGZyb20gVVJMOiB7bmFtZSFyfSIpCisrCisrICAgIHJldHVybiBj b21wb25lbnQKKysKKysKKytkZWYgam9pbl93aXRoaW5fZGlyZWN0b3J5KGRpcmVjdG9yeTogc3Ry LCBjb21wb25lbnQ6IFBhdGhDb21wb25lbnQpIC0+IHN0cjoKKysgICAgIiIiSm9pbiBhIHNpbmds ZSBwYXRoIGBgY29tcG9uZW50YGAgb250byBgYGRpcmVjdG9yeWBgLgorKworKyAgICBgYGNvbXBv bmVudGBgIGlzIGEgOmRhdGE6YFBhdGhDb21wb25lbnRgLCBzbyBieSB0eXBlIGl0IGhhcyBubyBz ZXBhcmF0b3IgYW5kCisrICAgIGlzIG5vdCBhIGBgLmBgIG9yIGBgLi5gYCByZWZlcmVuY2U7IHRo ZSByZXN1bHQgY2FuIG5ldmVyIGVzY2FwZSBgYGRpcmVjdG9yeWBgLgorKyAgICBSZXF1aXJpbmcg YGBQYXRoQ29tcG9uZW50YGAgcmF0aGVyIHRoYW4gYGBzdHJgYCBsZXRzIHRoZSB0eXBlIGNoZWNr ZXIgZW5mb3JjZQorKyAgICBhdCB0aGUgY2FsbCBzaXRlIHRoYXQgdGhlIG5hbWUgd2FzIHJlZHVj ZWQgdG8gYSBzYWZlIGNvbXBvbmVudCBiZWZvcmVoYW5kLgorKyAgICAiIiIKKysgICAgcmV0dXJu IG9zLnBhdGguam9pbihkaXJlY3RvcnksIGNvbXBvbmVudCkKKysKKysKKyAjIE9yZGVyIG1hdHRl cnMsIGVhcmxpZXIgaGFzaGVzIGhhdmUgYSBwcmVjZWRlbmNlIG92ZXIgbGF0ZXIgaGFzaGVzIGZv ciB3aGF0CisgIyB3ZSB3aWxsIHBpY2sgdG8gdXNlLgorIF9TVVBQT1JURURfSEFTSEVTID0gKCJz aGE1MTIiLCAic2hhMzg0IiwgInNoYTI1NiIsICJzaGEyMjQiLCAic2hhMSIsICJtZDUiKQorQEAg LTQyNCwxOCArNDY4LDEzIEBAIGRlZiByZWRhY3RlZF91cmwoc2VsZikgLT4gc3RyOgorICAgICAg ICAgcmV0dXJuIHJlZGFjdF9hdXRoX2Zyb21fdXJsKHNlbGYudXJsKQorIAorICAgICBAcHJvcGVy dHkKKy0gICAgZGVmIGZpbGVuYW1lKHNlbGYpIC0+IHN0cjoKKy0gICAgICAgIHBhdGggPSBzZWxm LnBhdGgucnN0cmlwKCIvIikKKy0gICAgICAgIG5hbWUgPSBwb3NpeHBhdGguYmFzZW5hbWUocGF0 aCkKKy0gICAgICAgIGlmIG5vdCBuYW1lOgorLSAgICAgICAgICAgICMgTWFrZSBzdXJlIHdlIGRv bid0IGxlYWsgYXV0aCBpbmZvcm1hdGlvbiBpZiB0aGUgbmV0bG9jCistICAgICAgICAgICAgIyBp bmNsdWRlcyBhIHVzZXJuYW1lIGFuZCBwYXNzd29yZC4KKy0gICAgICAgICAgICBuZXRsb2MsIHVz ZXJfcGFzcyA9IHNwbGl0X2F1dGhfZnJvbV9uZXRsb2Moc2VsZi5uZXRsb2MpCistICAgICAgICAg ICAgcmV0dXJuIG5ldGxvYworLQorLSAgICAgICAgbmFtZSA9IHVybGxpYi5wYXJzZS51bnF1b3Rl KG5hbWUpCistICAgICAgICBhc3NlcnQgbmFtZSwgZiJVUkwge3NlbGYuX3VybCFyfSBwcm9kdWNl ZCBubyBmaWxlbmFtZSIKKy0gICAgICAgIHJldHVybiBuYW1lCisrICAgIGRlZiBmaWxlbmFtZShz ZWxmKSAtPiBQYXRoQ29tcG9uZW50OgorKyAgICAgICAgbmFtZSA9IF90b19wYXRoX2NvbXBvbmVu dChwb3NpeHBhdGguYmFzZW5hbWUoc2VsZi5wYXRoLnJzdHJpcCgiLyIpKSkKKysgICAgICAgIGlm IG5hbWU6CisrICAgICAgICAgICAgcmV0dXJuIG5hbWUKKysKKysgICAgICAgICMgTm8gY29tcG9u ZW50IGluIHRoZSBwYXRoOyBmYWxsIGJhY2sgdG8gdGhlIG5ldGxvYywgZHJvcHBpbmcgYW55IGF1 dGguCisrICAgICAgICByZXR1cm4gX3RvX3BhdGhfY29tcG9uZW50KHNwbGl0X2F1dGhfZnJvbV9u ZXRsb2Moc2VsZi5uZXRsb2MpWzBdKQorIAorICAgICBAcHJvcGVydHkKKyAgICAgZGVmIGZpbGVf cGF0aChzZWxmKSAtPiBzdHI6CitkaWZmIC0tZ2l0IGEvc3JjL3BpcC9faW50ZXJuYWwvbmV0d29y ay9kb3dubG9hZC5weSBiL3NyYy9waXAvX2ludGVybmFsL25ldHdvcmsvZG93bmxvYWQucHkKK2lu ZGV4IDAzOWIyNjg4NzguLjZmYWFmYjVjYjAgMTAwNjQ0CistLS0gYS9zcmMvcGlwL19pbnRlcm5h bC9uZXR3b3JrL2Rvd25sb2FkLnB5CisrKysgYi9zcmMvcGlwL19pbnRlcm5hbC9uZXR3b3JrL2Rv d25sb2FkLnB5CitAQCAtMTksNyArMTksMTIgQEAKKyAKKyBmcm9tIHBpcC5faW50ZXJuYWwuY2xp LnByb2dyZXNzX2JhcnMgaW1wb3J0IEJhclR5cGUsIGdldF9kb3dubG9hZF9wcm9ncmVzc19yZW5k ZXJlcgorIGZyb20gcGlwLl9pbnRlcm5hbC5leGNlcHRpb25zIGltcG9ydCBJbmNvbXBsZXRlRG93 bmxvYWRFcnJvciwgTmV0d29ya0Nvbm5lY3Rpb25FcnJvcgorLWZyb20gcGlwLl9pbnRlcm5hbC5t b2RlbHMubGluayBpbXBvcnQgTGluaworK2Zyb20gcGlwLl9pbnRlcm5hbC5tb2RlbHMubGluayBp bXBvcnQgKAorKyAgICBMaW5rLAorKyAgICBQYXRoQ29tcG9uZW50LAorKyAgICBhc19wYXRoX2Nv bXBvbmVudCwKKysgICAgam9pbl93aXRoaW5fZGlyZWN0b3J5LAorKykKKyBmcm9tIHBpcC5faW50 ZXJuYWwubmV0d29yay5jYWNoZSBpbXBvcnQgU2FmZUZpbGVDYWNoZSwgaXNfZnJvbV9jYWNoZQor IGZyb20gcGlwLl9pbnRlcm5hbC5uZXR3b3JrLnNlc3Npb24gaW1wb3J0IENhY2hlQ29udHJvbEFk YXB0ZXIsIFBpcFNlc3Npb24KKyBmcm9tIHBpcC5faW50ZXJuYWwubmV0d29yay51dGlscyBpbXBv cnQgSEVBREVSUywgcmFpc2VfZm9yX3N0YXR1cywgcmVzcG9uc2VfY2h1bmtzCitAQCAtMTIxLDEx ICsxMjYsMTQgQEAgZGVmIHBhcnNlX2NvbnRlbnRfZGlzcG9zaXRpb24oY29udGVudF9kaXNwb3Np dGlvbjogc3RyLCBkZWZhdWx0X2ZpbGVuYW1lOiBzdHIpIC0KKyAgICAgcmV0dXJuIGZpbGVuYW1l IG9yIGRlZmF1bHRfZmlsZW5hbWUKKyAKKyAKKy1kZWYgX2dldF9odHRwX3Jlc3BvbnNlX2ZpbGVu YW1lKHJlc3A6IFJlc3BvbnNlLCBsaW5rOiBMaW5rKSAtPiBzdHI6CisrZGVmIF9nZXRfaHR0cF9y ZXNwb25zZV9maWxlbmFtZShyZXNwOiBSZXNwb25zZSwgbGluazogTGluaykgLT4gUGF0aENvbXBv bmVudDoKKyAgICAgIiIiR2V0IGFuIGlkZWFsIGZpbGVuYW1lIGZyb20gdGhlIGdpdmVuIEhUVFAg cmVzcG9uc2UsIGZhbGxpbmcgYmFjayB0bworICAgICB0aGUgbGluayBmaWxlbmFtZSBpZiBub3Qg cHJvdmlkZWQuCisrCisrICAgIFRoZSByZXN1bHQgaXMgdmFsaWRhdGVkIGFzIGEgc2luZ2xlIHBh dGggY29tcG9uZW50LCBzbyBpdCBjYW4gYmUgam9pbmVkIG9udG8KKysgICAgYSBkb3dubG9hZCBk aXJlY3Rvcnkgd2l0aG91dCBlc2NhcGluZyBpdC4KKyAgICAgIiIiCistICAgIGZpbGVuYW1lID0g bGluay5maWxlbmFtZSAgIyBmYWxsYmFjaworKyAgICBmaWxlbmFtZTogc3RyID0gbGluay5maWxl bmFtZSAgIyBmYWxsYmFjaworICAgICAjIEhhdmUgYSBsb29rIGF0IHRoZSBDb250ZW50LURpc3Bv c2l0aW9uIGhlYWRlciBmb3IgYSBiZXR0ZXIgZ3Vlc3MKKyAgICAgY29udGVudF9kaXNwb3NpdGlv biA9IHJlc3AuaGVhZGVycy5nZXQoImNvbnRlbnQtZGlzcG9zaXRpb24iKQorICAgICBpZiBjb250 ZW50X2Rpc3Bvc2l0aW9uOgorQEAgLTEzOSw3ICsxNDcsNyBAQCBkZWYgX2dldF9odHRwX3Jlc3Bv bnNlX2ZpbGVuYW1lKHJlc3A6IFJlc3BvbnNlLCBsaW5rOiBMaW5rKSAtPiBzdHI6CisgICAgICAg ICBleHQgPSBvcy5wYXRoLnNwbGl0ZXh0KHJlc3AudXJsKVsxXQorICAgICAgICAgaWYgZXh0Ogor ICAgICAgICAgICAgIGZpbGVuYW1lICs9IGV4dAorLSAgICByZXR1cm4gZmlsZW5hbWUKKysgICAg cmV0dXJuIGFzX3BhdGhfY29tcG9uZW50KGZpbGVuYW1lKQorIAorIAorIEBkYXRhY2xhc3MKK0BA IC0xOTIsNyArMjAwLDkgQEAgZGVmIF9fY2FsbF9fKHNlbGYsIGxpbms6IExpbmssIGxvY2F0aW9u OiBzdHIpIC0+IHR1cGxlW3N0ciwgc3RyXToKKyAgICAgICAgIHJlc3AgPSBzZWxmLl9odHRwX2dl dChsaW5rKQorICAgICAgICAgZG93bmxvYWRfc2l6ZSA9IF9nZXRfaHR0cF9yZXNwb25zZV9zaXpl KHJlc3ApCisgCistICAgICAgICBmaWxlcGF0aCA9IG9zLnBhdGguam9pbihsb2NhdGlvbiwgX2dl dF9odHRwX3Jlc3BvbnNlX2ZpbGVuYW1lKHJlc3AsIGxpbmspKQorKyAgICAgICAgZmlsZXBhdGgg PSBqb2luX3dpdGhpbl9kaXJlY3RvcnkoCisrICAgICAgICAgICAgbG9jYXRpb24sIF9nZXRfaHR0 cF9yZXNwb25zZV9maWxlbmFtZShyZXNwLCBsaW5rKQorKyAgICAgICAgKQorICAgICAgICAgd2l0 aCBvcGVuKGZpbGVwYXRoLCAid2IiKSBhcyBjb250ZW50X2ZpbGU6CisgICAgICAgICAgICAgZG93 bmxvYWQgPSBfRmlsZURvd25sb2FkKGxpbmssIGNvbnRlbnRfZmlsZSwgZG93bmxvYWRfc2l6ZSkK KyAgICAgICAgICAgICBzZWxmLl9wcm9jZXNzX3Jlc3BvbnNlKGRvd25sb2FkLCByZXNwKQorZGlm ZiAtLWdpdCBhL3NyYy9waXAvX2ludGVybmFsL29wZXJhdGlvbnMvcHJlcGFyZS5weSBiL3NyYy9w aXAvX2ludGVybmFsL29wZXJhdGlvbnMvcHJlcGFyZS5weQoraW5kZXggYWZjYzAzNzZkYS4uM2I0 NDQwM2UwZCAxMDA2NDQKKy0tLSBhL3NyYy9waXAvX2ludGVybmFsL29wZXJhdGlvbnMvcHJlcGFy ZS5weQorKysrIGIvc3JjL3BpcC9faW50ZXJuYWwvb3BlcmF0aW9ucy9wcmVwYXJlLnB5CitAQCAt MjksNyArMjksNyBAQAorIGZyb20gcGlwLl9pbnRlcm5hbC5pbmRleC5wYWNrYWdlX2ZpbmRlciBp bXBvcnQgUGFja2FnZUZpbmRlcgorIGZyb20gcGlwLl9pbnRlcm5hbC5tZXRhZGF0YSBpbXBvcnQg QmFzZURpc3RyaWJ1dGlvbiwgZ2V0X21ldGFkYXRhX2Rpc3RyaWJ1dGlvbgorIGZyb20gcGlwLl9p bnRlcm5hbC5tb2RlbHMuZGlyZWN0X3VybCBpbXBvcnQgQXJjaGl2ZUluZm8sIERpcmVjdFVybAor LWZyb20gcGlwLl9pbnRlcm5hbC5tb2RlbHMubGluayBpbXBvcnQgTGluaworK2Zyb20gcGlwLl9p bnRlcm5hbC5tb2RlbHMubGluayBpbXBvcnQgTGluaywgam9pbl93aXRoaW5fZGlyZWN0b3J5Cisg ZnJvbSBwaXAuX2ludGVybmFsLm1vZGVscy53aGVlbCBpbXBvcnQgV2hlZWwKKyBmcm9tIHBpcC5f aW50ZXJuYWwubmV0d29yay5kb3dubG9hZCBpbXBvcnQgRG93bmxvYWRlcgorIGZyb20gcGlwLl9p bnRlcm5hbC5uZXR3b3JrLmxhenlfd2hlZWwgaW1wb3J0ICgKK0BAIC0yMDEsNyArMjAxLDcgQEAg ZGVmIF9jaGVja19kb3dubG9hZF9kaXIoCisgICAgICIiIkNoZWNrIGRvd25sb2FkX2RpciBmb3Ig cHJldmlvdXNseSBkb3dubG9hZGVkIGZpbGUgd2l0aCBjb3JyZWN0IGhhc2gKKyAgICAgSWYgYSBj b3JyZWN0IGZpbGUgaXMgZm91bmQgcmV0dXJuIGl0cyBwYXRoIGVsc2UgTm9uZQorICAgICAiIiIK Ky0gICAgZG93bmxvYWRfcGF0aCA9IG9zLnBhdGguam9pbihkb3dubG9hZF9kaXIsIGxpbmsuZmls ZW5hbWUpCisrICAgIGRvd25sb2FkX3BhdGggPSBqb2luX3dpdGhpbl9kaXJlY3RvcnkoZG93bmxv YWRfZGlyLCBsaW5rLmZpbGVuYW1lKQorIAorICAgICBpZiBub3Qgb3MucGF0aC5leGlzdHMoZG93 bmxvYWRfcGF0aCk6CisgICAgICAgICByZXR1cm4gTm9uZQorQEAgLTY4Nyw3ICs2ODcsNyBAQCBk ZWYgc2F2ZV9saW5rZWRfcmVxdWlyZW1lbnQoc2VsZiwgcmVxOiBJbnN0YWxsUmVxdWlyZW1lbnQp IC0+IE5vbmU6CisgICAgICAgICAgICAgIyBObyBkaXN0cmlidXRpb24gd2FzIGRvd25sb2FkZWQg Zm9yIHRoaXMgcmVxdWlyZW1lbnQuCisgICAgICAgICAgICAgcmV0dXJuCisgCistICAgICAgICBk b3dubG9hZF9sb2NhdGlvbiA9IG9zLnBhdGguam9pbihzZWxmLmRvd25sb2FkX2RpciwgbGluay5m aWxlbmFtZSkKKysgICAgICAgIGRvd25sb2FkX2xvY2F0aW9uID0gam9pbl93aXRoaW5fZGlyZWN0 b3J5KHNlbGYuZG93bmxvYWRfZGlyLCBsaW5rLmZpbGVuYW1lKQorICAgICAgICAgaWYgbm90IG9z LnBhdGguZXhpc3RzKGRvd25sb2FkX2xvY2F0aW9uKToKKyAgICAgICAgICAgICBzaHV0aWwuY29w eShyZXEubG9jYWxfZmlsZV9wYXRoLCBkb3dubG9hZF9sb2NhdGlvbikKKyAgICAgICAgICAgICBk b3dubG9hZF9wYXRoID0gZGlzcGxheV9wYXRoKGRvd25sb2FkX2xvY2F0aW9uKQorZGlmZiAtLWdp dCBhL3Rlc3RzL3VuaXQvdGVzdF9saW5rLnB5IGIvdGVzdHMvdW5pdC90ZXN0X2xpbmsucHkKK2lu ZGV4IGM0OWY4NTQ3YWMuLmJjOGNiOGFiOWIgMTAwNjQ0CistLS0gYS90ZXN0cy91bml0L3Rlc3Rf bGluay5weQorKysrIGIvdGVzdHMvdW5pdC90ZXN0X2xpbmsucHkKK0BAIC0xLDkgKzEsMTcgQEAK KyBmcm9tIF9fZnV0dXJlX18gaW1wb3J0IGFubm90YXRpb25zCisgCisraW1wb3J0IG9zCisraW1w b3J0IHBvc2l4cGF0aAorKworIGltcG9ydCBweXRlc3QKKyAKKyBmcm9tIHBpcC5faW50ZXJuYWwu ZXhjZXB0aW9ucyBpbXBvcnQgSW52YWxpZEVnZ0ZyYWdtZW50LCBQaXBFcnJvcgorLWZyb20gcGlw Ll9pbnRlcm5hbC5tb2RlbHMubGluayBpbXBvcnQgTGluaywgbGlua3NfZXF1aXZhbGVudAorK2Zy b20gcGlwLl9pbnRlcm5hbC5tb2RlbHMubGluayBpbXBvcnQgKAorKyAgICBMaW5rLAorKyAgICBh c19wYXRoX2NvbXBvbmVudCwKKysgICAgam9pbl93aXRoaW5fZGlyZWN0b3J5LAorKyAgICBsaW5r c19lcXVpdmFsZW50LAorKykKKyBmcm9tIHBpcC5faW50ZXJuYWwudXRpbHMuaGFzaGVzIGltcG9y dCBIYXNoZXMKKyAKKyAKK0BAIC0yOSw2ICszNywxMyBAQCBkZWYgdGVzdF9yZXByKHNlbGYsIHVy bDogc3RyLCBleHBlY3RlZDogc3RyKSAtPiBOb25lOgorICAgICAgICAgICAgICgiaHR0cHM6Ly9l eGFtcGxlLmNvbS9wYXRoL3BhZ2UuaHRtbCIsICJwYWdlLmh0bWwiKSwKKyAgICAgICAgICAgICAj IFRlc3QgYSBxdW90ZWQgY2hhcmFjdGVyLgorICAgICAgICAgICAgICgiaHR0cHM6Ly9leGFtcGxl LmNvbS9wYXRoL3BhZ2UlMjMxLmh0bWwiLCAicGFnZSMxLmh0bWwiKSwKKysgICAgICAgICAgICAj IEEgZG91Ymx5LWVuY29kZWQgc2VwYXJhdG9yIG11c3Qgc3RheSBlbmNvZGVkOiB0aGUgcGF0aCBp cyBkZWNvZGVkCisrICAgICAgICAgICAgIyBleGFjdGx5IG9uY2UsIHNvIHRoZSBmaWxlIG5hbWUg a2VlcHMgaXRzIGxpdGVyYWwgIiUyRiIgaW5zdGVhZCBvZgorKyAgICAgICAgICAgICMgY29sbGFw c2luZyBpbnRvIGEgIi8iLgorKyAgICAgICAgICAgICgKKysgICAgICAgICAgICAgICAgImh0dHBz Oi8vZXhhbXBsZS5jb20vYSUyNTJGYi53aGwiLAorKyAgICAgICAgICAgICAgICAiYSUyRmIud2hs IiwKKysgICAgICAgICAgICApLAorICAgICAgICAgICAgICgKKyAgICAgICAgICAgICAgICAgImh0 dHA6Ly95by9teXByb2plY3QtMS4wJTJCZm9vYmFyLjAtcHkyLnB5My1ub25lLWFueS53aGwiLAor ICAgICAgICAgICAgICAgICAibXlwcm9qZWN0LTEuMCtmb29iYXIuMC1weTIucHkzLW5vbmUtYW55 LndobCIsCitAQCAtNDksNiArNjQsNTIgQEAgZGVmIHRlc3RfZmlsZW5hbWUoc2VsZiwgdXJsOiBz dHIsIGV4cGVjdGVkOiBzdHIpIC0+IE5vbmU6CisgICAgICAgICBsaW5rID0gTGluayh1cmwpCisg ICAgICAgICBhc3NlcnQgbGluay5maWxlbmFtZSA9PSBleHBlY3RlZAorIAorKyAgICBAcHl0ZXN0 Lm1hcmsucGFyYW1ldHJpemUoCisrICAgICAgICAidXJsIiwKKysgICAgICAgIFsKKysgICAgICAg ICAgICAiaHR0cHM6Ly9leGFtcGxlLmNvbS9hJTI1MkZiLndobCIsCisrICAgICAgICAgICAgImh0 dHBzOi8vZXhhbXBsZS5jb20vJTI1MmUlMjUyZSUyNTJmYi53aGwiLAorKyAgICAgICAgXSwKKysg ICAgKQorKyAgICBkZWYgdGVzdF9maWxlbmFtZV9kZWNvZGVkX29uY2Vfc3RheXNfc2luZ2xlX2Nv bXBvbmVudChzZWxmLCB1cmw6IHN0cikgLT4gTm9uZToKKysgICAgICAgICMgVGhlIHBhdGggaXMg ZGVjb2RlZCBleGFjdGx5IG9uY2UsIHNvIGFuIGVuY29kZWQgc2VwYXJhdG9yIHN0YXlzCisrICAg ICAgICAjIGVuY29kZWQgYW5kIHRoZSBmaWxlIG5hbWUgcmVtYWlucyBhIHNpbmdsZSBwYXRoIGNv bXBvbmVudCByYXRoZXIKKysgICAgICAgICMgdGhhbiBjb2xsYXBzaW5nIGludG8gYSAiLyItc2Vw YXJhdGVkIHBhdGguCisrICAgICAgICBmaWxlbmFtZSA9IExpbmsodXJsKS5maWxlbmFtZQorKyAg ICAgICAgYXNzZXJ0IG5vdCBwb3NpeHBhdGguaXNhYnMoZmlsZW5hbWUpCisrICAgICAgICBhc3Nl cnQgcG9zaXhwYXRoLmJhc2VuYW1lKGZpbGVuYW1lKSA9PSBmaWxlbmFtZQorKworKyAgICBAcHl0 ZXN0Lm1hcmsucGFyYW1ldHJpemUoCisrICAgICAgICAidXJsIiwKKysgICAgICAgIFsKKysgICAg ICAgICAgICAiaHR0cHM6Ly9leGFtcGxlLmNvbS8uLiIsCisrICAgICAgICAgICAgImh0dHBzOi8v ZXhhbXBsZS5jb20vLiIsCisrICAgICAgICAgICAgImh0dHBzOi8vZXhhbXBsZS5jb20vZm9vLyUy ZSUyZSIsCisrICAgICAgICBdLAorKyAgICApCisrICAgIGRlZiB0ZXN0X2ZpbGVuYW1lX3BhcmVu dF9yZWZlcmVuY2VfZmFsbHNfYmFja190b19uZXRsb2Moc2VsZiwgdXJsOiBzdHIpIC0+IE5vbmU6 CisrICAgICAgICAjIEEgcGF0aCB0aGF0IGlzIG9ubHkgYSAiLiIgb3IgIi4uIiByZWZlcmVuY2Ug aGFzIG5vIHVzYWJsZSBmaWxlIG5hbWUsCisrICAgICAgICAjIHNvIGZpbGVuYW1lIGZhbGxzIGJh Y2sgdG8gdGhlIG5ldGxvYyByYXRoZXIgdGhhbiBoYW5kaW5nIGJhY2sgYQorKyAgICAgICAgIyB0 cmF2ZXJzYWwgY29tcG9uZW50IHRoYXQgY291bGQgZXNjYXBlIGEgZG93bmxvYWQgZGlyZWN0b3J5 LgorKyAgICAgICAgYXNzZXJ0IExpbmsodXJsKS5maWxlbmFtZSA9PSAiZXhhbXBsZS5jb20iCisr CisrICAgIEBweXRlc3QubWFyay5wYXJhbWV0cml6ZSgKKysgICAgICAgICJ1cmwiLAorKyAgICAg ICAgWworKyAgICAgICAgICAgICMgQSBwYXRoLWxlc3MgVVJMIHdob3NlIGF1dGhvcml0eSBsb29r cyBsaWtlIGEgdHJhdmVyc2FsOiB0aGUgbmV0bG9jCisrICAgICAgICAgICAgIyBmYWxsYmFjayBt dXN0IHN0aWxsIHJlZHVjZSB0byBhIHNpbmdsZSBwYXRoIGNvbXBvbmVudC4KKysgICAgICAgICAg ICAiaHR0cDovLy4uXFwuLlxcLi5cXGV2aWwud2hsIiwKKysgICAgICAgICAgICAiaHR0cDovLy4u LyIsCisrICAgICAgICAgICAgImh0dHA6Ly8uLiIsCisrICAgICAgICBdLAorKyAgICApCisrICAg IGRlZiB0ZXN0X2ZpbGVuYW1lX2lzX2Fsd2F5c19hX3BhdGhfY29tcG9uZW50KHNlbGYsIHVybDog c3RyKSAtPiBOb25lOgorKyAgICAgICAgIyBmaWxlbmFtZSBtdXN0IG5ldmVyIGNhcnJ5IGEgc2Vw YXJhdG9yIG9yIHBhcmVudCByZWZlcmVuY2UsIHNvIGpvaW5pbmcKKysgICAgICAgICMgaXQgb250 byBhIGRpcmVjdG9yeSBjYW4gbmV2ZXIgZXNjYXBlIHRoYXQgZGlyZWN0b3J5LgorKyAgICAgICAg bmFtZSA9IExpbmsodXJsKS5maWxlbmFtZQorKyAgICAgICAgYXNzZXJ0IG9zLnBhdGguYmFzZW5h bWUobmFtZSkgPT0gbmFtZQorKyAgICAgICAgYXNzZXJ0IG5hbWUgbm90IGluIChvcy5jdXJkaXIs IG9zLnBhcmRpcikKKysKKyAgICAgZGVmIHRlc3Rfc3BsaXRleHQoc2VsZikgLT4gTm9uZToKKyAg ICAgICAgIGFzc2VydCAoIndoZWVsIiwgIi53aGwiKSA9PSBMaW5rKCJodHRwOi8veW8vd2hlZWwu d2hsIikuc3BsaXRleHQoKQorIAorQEAgLTI0NCwzICszMDUsNTMgQEAgZGVmIHRlc3RfbGlua3Nf ZXF1aXZhbGVudCh1cmwxOiBzdHIsIHVybDI6IHN0cikgLT4gTm9uZToKKyApCisgZGVmIHRlc3Rf bGlua3NfZXF1aXZhbGVudF9mYWxzZSh1cmwxOiBzdHIsIHVybDI6IHN0cikgLT4gTm9uZToKKyAg ICAgYXNzZXJ0IG5vdCBsaW5rc19lcXVpdmFsZW50KExpbmsodXJsMSksIExpbmsodXJsMikpCisr CisrCisrQHB5dGVzdC5tYXJrLnBhcmFtZXRyaXplKAorKyAgICAibmFtZSIsCisrICAgIFsKKysg ICAgICAgICJ3aGVlbC53aGwiLAorKyAgICAgICAgIm15cHJvamVjdC0xLjArZm9vYmFyLjAtcHky LnB5My1ub25lLWFueS53aGwiLAorKyAgICAgICAgIyBBIGxpdGVyYWwgIiUyRiIgaXMgYSBub3Jt YWwgZmlsZSBuYW1lLCBub3QgYSBzZXBhcmF0b3IuCisrICAgICAgICAiYSUyRmIud2hsIiwKKysg ICAgXSwKKyspCisrZGVmIHRlc3RfYXNfcGF0aF9jb21wb25lbnRfa2VlcHNfcGxhaW5fbmFtZShu YW1lOiBzdHIpIC0+IE5vbmU6CisrICAgIGFzc2VydCBhc19wYXRoX2NvbXBvbmVudChuYW1lKSA9 PSBuYW1lCisrCisrCisrQHB5dGVzdC5tYXJrLnBhcmFtZXRyaXplKAorKyAgICAibmFtZSIsCisr ICAgIFsKKysgICAgICAgIG9zLnBhdGguam9pbihvcy5zZXAsICJhYnMiLCAicGtnLndobCIpLAor KyAgICAgICAgb3MucGF0aC5qb2luKCIuLiIsICJwa2cud2hsIiksCisrICAgICAgICBvcy5wYXRo LmpvaW4oIm5lc3RlZCIsICJwa2cud2hsIiksCisrICAgIF0sCisrKQorK2RlZiB0ZXN0X2FzX3Bh dGhfY29tcG9uZW50X3JlZHVjZXNfdG9fYmFzZW5hbWUobmFtZTogc3RyKSAtPiBOb25lOgorKyAg ICAjIEEgbmFtZSBjYXJyeWluZyBkaXJlY3RvcnkgY29tcG9uZW50cyBpcyByZWR1Y2VkIHRvIGl0 cyBiYXNlbmFtZSwgc28gdGhlCisrICAgICMgcmVzdWx0IGFsd2F5cyBzdGF5cyBpbnNpZGUgdGhl IGRpcmVjdG9yeSBpdCBpcyBsYXRlciBqb2luZWQgb250by4KKysgICAgYXNzZXJ0IGFzX3BhdGhf Y29tcG9uZW50KG5hbWUpID09IG9zLnBhdGguYmFzZW5hbWUobmFtZSkKKysKKysKKytAcHl0ZXN0 Lm1hcmsucGFyYW1ldHJpemUoIm5hbWUiLCBbIiIsICIuIiwgIi4uIiwgIi8iLCBvcy5wYXRoLmpv aW4oInN1YiIsICIuLiIpXSkKKytkZWYgdGVzdF9hc19wYXRoX2NvbXBvbmVudF9yZWplY3RzX2Vt cHR5X29yX3BhcmVudF9yZWZlcmVuY2UobmFtZTogc3RyKSAtPiBOb25lOgorKyAgICB3aXRoIHB5 dGVzdC5yYWlzZXMoVmFsdWVFcnJvcik6CisrICAgICAgICBhc19wYXRoX2NvbXBvbmVudChuYW1l KQorKworKworK0BweXRlc3QubWFyay5wYXJhbWV0cml6ZSgKKysgICAgIm5hbWUiLAorKyAgICBb CisrICAgICAgICAicGtnLndobCIsCisrICAgICAgICAjIEEgbGl0ZXJhbCAiJTJGIiBpcyBhIG5v cm1hbCBmaWxlIG5hbWUsIG5vdCBhIHNlcGFyYXRvci4KKysgICAgICAgICJhJTJGYi53aGwiLAor KyAgICBdLAorKykKKytkZWYgdGVzdF9qb2luX3dpdGhpbl9kaXJlY3Rvcnlfc3RheXNfaW5zaWRl KG5hbWU6IHN0cikgLT4gTm9uZToKKysgICAgIyBUaGUgY29tcG9uZW50IGlzIGpvaW5lZCBvbnRv IHRoZSBkaXJlY3RvcnkgYXMgaXRzIGZpbmFsIGVsZW1lbnQsIHNvIHRoZQorKyAgICAjIHJlc3Vs dCBzdGF5cyBpbnNpZGUgdGhlIGRpcmVjdG9yeS4KKysgICAgZGlyZWN0b3J5ID0gb3MucGF0aC5q b2luKCJiYXNlIiwgImRvd25sb2FkcyIpCisrICAgIGpvaW5lZCA9IGpvaW5fd2l0aGluX2RpcmVj dG9yeShkaXJlY3RvcnksIGFzX3BhdGhfY29tcG9uZW50KG5hbWUpKQorKyAgICBhc3NlcnQgam9p bmVkID09IG9zLnBhdGguam9pbihkaXJlY3RvcnksIG5hbWUpCisrICAgIGFzc2VydCBvcy5wYXRo LmJhc2VuYW1lKGpvaW5lZCkgPT0gbmFtZQoKZGlmZiAtLWdpdCBhL3B5dGhvbi1waXAuc3BlYyBi L3B5dGhvbi1waXAuc3BlYwppbmRleCA2MWZkNmQxLi44MWE1NGE3IDEwMDY0NAotLS0gYS9weXRo b24tcGlwLnNwZWMKKysrIGIvcHl0aG9uLXBpcC5zcGVjCkBAIC0xMTEsNiArMTExLDkgQEAgUGF0 Y2g6ICAgICAgICAgIGh0dHBzOi8vZ2l0aHViLmNvbS9weXBhL3BpcC9jb21taXQvNGM2ZDc0NzFk ZS5wYXRjaAogIyBodHRwczovL2dpdGh1Yi5jb20vcHlwYS9waXAvY29tbWl0LzA5YTAzZjZjZmEg KG5vbi1leGlzdGluZyBmaWxlcyByZW1vdmVkKQogUGF0Y2g6ICAgICAgICAgIDA5YTAzZjZjZmEu cGF0Y2gKIAorIyBDVkUtMjAyNi0xMzM0NjogTGluay5maWxlbmFtZSBkb3VibGUgVVJMIGRlY29k ZSBhbGxvd3MgcGF0aCB0cmF2ZXJzYWwKK1BhdGNoOiAgICAgICAgICBodHRwczovL2dpdGh1Yi5j b20vcHlwYS9waXAvY29tbWl0LzEwZGZiNmI5MDAucGF0Y2gKKwogIyBSZW1vdmUgLXMgZnJvbSBQ eXRob24gc2hlYmFuZyAtIGVuc3VyZSB0aGF0IHBhY2thZ2VzIGluc3RhbGxlZCB3aXRoIHBpcAog IyB0byB1c2VyIGxvY2F0aW9ucyBhcmUgc2VlbiBieSBwaXAgaXRzZWxmCiAldW5kZWZpbmUgX3B5 M19zaGViYW5nX3MK