From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Emmanuel Seyman To: git-commits@fedoraproject.org Subject: [rpms/perl-XML-Bare] rawhide: Include two security fixes for XML-Bare =< 0.53 Date: Sun, 30 Aug 2026 08:57:25 GMT Message-ID: <178808024580.1.6339571361091489062.rpms-perl-XML-Bare-ec2415c14ed9@fedoraproject.org> List-ID: X-Git-Repo: rpms/perl-XML-Bare X-Git-Branch: rawhide X-Git-Rev: ec2415c14ed98dacb7908f6bf073f4fa740cea81 QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvcGVybC1YTUwtQmFy ZQpCcmFuY2ggOiByYXdoaWRlCkNvbW1pdCA6IGVjMjQxNWMxNGVkOThkYWNiNzkwOGY2YmYwNzNm NGZhNzQwY2VhODEKQXV0aG9yIDogRW1tYW51ZWwgU2V5bWFuIDxlbW1hbnVlbEBzZXltYW4uZnI+ CkRhdGUgICA6IDIwMjYtMDgtMzBUMTA6NTc6MDcrMDI6MDAKU3RhdHMgIDogKzEwNi8tNCBpbiAz IGZpbGUocykKVVJMICAgIDogaHR0cHM6Ly9zcmMuZmVkb3JhcHJvamVjdC5vcmcvcnBtcy9wZXJs LVhNTC1CYXJlL2MvZWMyNDE1YzE0ZWQ5OGRhY2I3OTA4ZjZiZjA3M2Y0ZmE3NDBjZWE4MT9icmFu Y2g9cmF3aGlkZQoKTG9nOgpJbmNsdWRlIHR3byBzZWN1cml0eSBmaXhlcyBmb3IgWE1MLUJhcmUg PTwgMC41MwoKLS0tCmRpZmYgLS1naXQgYS9DVkUtMjAyNi0xMzQwMS1yMS5wYXRjaCBiL0NWRS0y MDI2LTEzNDAxLXIxLnBhdGNoCm5ldyBmaWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAwMDAwMDAuLmY0 NzhhNTAKLS0tIC9kZXYvbnVsbAorKysgYi9DVkUtMjAyNi0xMzQwMS1yMS5wYXRjaApAQCAtMCww ICsxLDI2IEBACitGcm9tOiBDUEFOU2VjIFNlY3VyaXR5IFNjYW5uZXIgQm90IDxjcGFuLXNlY3Vy aXR5QHNlY3VyaXR5Lm1ldGFjcGFuLm9yZz4KK1N1YmplY3Q6IFtQQVRDSF0gWE1MOjpCYXJlOiBh ZHZhbmNlIHN0dWNrIGF0dHJpYnV0ZS1uYW1lIHN0YXRlIChpbmZpbml0ZSBsb29wKQorCitJbmZp bml0ZSBsb29wIChDV0UtODM1KSBpbiB0aGUgaGFuZC1yb2xsZWQgQyBwYXJzZXIgKHBhcnNlci5j KSwgcmVhY2hlZAorYnkgdGhlIGRlZmF1bHQgWE1MOjpCYXJlLT5uZXcodGV4dD0+JHhtbCktPnBh cnNlIG9uIHVudHJ1c3RlZCBYTUwuCisKK1RoZSBgYXR0X25hbWVxc2RvbmVgIHN0YXRlIOKAlCBy ZWFjaGVkIGFmdGVyIGEgc2luZ2xlLXF1b3RlZCBhdHRyaWJ1dGUKKypuYW1lKiDigJQgbG9vcHMg YmFjayB0byBpdHNlbGYgd2l0aG91dCBhZHZhbmNpbmcgYGNwb3NgIG9uIGFueSBjaGFyYWN0ZXIK K290aGVyIHRoYW4gYD1gIG9yIE5VTCwgc3Bpbm5pbmcgZm9yZXZlciBpbiBDIG9uIG1hbGZvcm1l ZCBpbnB1dC4gVGhlCitwYXJzZXIgaG9sZHMgdGhlIGludGVycHJldGVyIGZvciB0aGUgZHVyYXRp b24gb2YgdGhlIGNhbGwsIHNvIG5vCitQZXJsLWxldmVsIHNpZ25hbCAoYGFsYXJtYCwgZXRjLikg Y2FuIGludGVycnVwdCBpdDogYSBzaW5nbGUgcmVxdWVzdAorcGlucyBhIENQVSBpbmRlZmluaXRl bHkuIFRyaWdnZXJzOiBgPGEgPSdjJz5gLCBgPGEgYj0nJycnJycnYyc+YCwKK2A8eCB5PScnJycn J3onPmAuCisKK0ZpeDogYWR2YW5jZSB0aGUgY3Vyc29yIGJlZm9yZSBsb29waW5nLCBzbyB0aGUg c2NhbiB0ZXJtaW5hdGVzIGF0IHRoZQorbmV4dCBgPWAgb3IgYXQgdGhlIE5VTCBzZW50aW5lbCAo YWxyZWFkeSBoYW5kbGVkIGJ5IHRoZSBgY2FzZSAwYCBicmFuY2gpLgorLS0tIGEvcGFyc2VyLmMK KysrKyBiL3BhcnNlci5jCitAQCAtNDg0LDYgKzQ4NSw3IEBACisgICAgICAgICAgIGNwb3MrKzsK KyAgICAgICAgICAgZ290byBhdHRfZXExOworICAgICAgIH0KKysgICAgICBjcG9zKys7IC8vIGFk dmFuY2UgdGhlIGN1cnNvciBzbyBtYWxmb3JtZWQgaW5wdXQgKG5vICc9JyBhZnRlciBhIHF1b3Rl ZCBhdHRyIG5hbWUpIGNhbm5vdCBzcGluIGZvcmV2ZXIKKyAgICAgICBnb3RvIGF0dF9uYW1lcXNk b25lOworICAgICAgIAorICAgICBhdHRfZXExOgoKZGlmZiAtLWdpdCBhL0NWRS0yMDI2LTU3MDc0 LXIxLnBhdGNoIGIvQ1ZFLTIwMjYtNTcwNzQtcjEucGF0Y2gKbmV3IGZpbGUgbW9kZSAxMDA2NDQK aW5kZXggMDAwMDAwMC4uMjllMzgyYwotLS0gL2Rldi9udWxsCisrKyBiL0NWRS0yMDI2LTU3MDc0 LXIxLnBhdGNoCkBAIC0wLDAgKzEsNjUgQEAKK0Zyb206IENQQU5TZWMgU2VjdXJpdHkgU2Nhbm5l ciBCb3QgPGNwYW4tc2VjdXJpdHlAc2VjdXJpdHkubWV0YWNwYW4ub3JnPgorU3ViamVjdDogW1BB VENIXSBYTUw6OkJhcmU6IGJvdW5kcyB0cnVuY2F0ZWQgZml4ZWQtYWR2YW5jZSBsb29rYWhlYWQg KGhlYXAgT09CIHJlYWQpCisKK0hlYXAtYnVmZmVyLW92ZXJmbG93IFJFQUQgKENXRS0xMjUpIGlu IHRoZSBoYW5kLXJvbGxlZCBDIHBhcnNlcgorKHBhcnNlci5jKSwgcmVhY2hlZCBieSB0aGUgZGVm YXVsdCBYTUw6OkJhcmUtPm5ldyh0ZXh0PT4keG1sKS0+cGFyc2Ugb24KK3VudHJ1c3RlZCBYTUwu CisKK1NldmVyYWwgdHJhbnNpdGlvbnMgYWR2YW5jZSBgY3Bvc2AgYnkgYSBmaXhlZCBhbW91bnQg cGFzdCBhIHJlY29nbmlzZWQKK3Rva2VuIHdpdGhvdXQgY2hlY2tpbmcgdGhlIGJ1ZmZlciBlbmQs IHRoZW4gZGVyZWZlcmVuY2UgdGhlIG5ldyBwb3NpdGlvbjoKKworICAtIHRoZSBgPCFbQ0RBVEFg IG1hdGNoIGRvZXMgYGNwb3MgKz0gOWAgYWZ0ZXIgY29uZmlybWluZyBvbmx5IGVpZ2h0CisgICAg Ynl0ZXMgKGA8IVtDREFUQWApLCBzbyBhIHRydW5jYXRlZCB0YWlsIHN1Y2ggYXMgYDwhW0NEQVRB XDBgIHN0ZXBzCisgICAgb25lIGJ5dGUgcGFzdCB0aGUgTlVMIHRlcm1pbmF0b3I7CisgIC0gdGhl IHRocmVlICJzZWxmLWNsb3NpbmcgdGFnIiBicmFuY2hlcyAobmFtZV94LCBuYW1lX2dhcCwgYXR0 X25hbWUpCisgICAgZG8gYGNwb3MgKz0gMmAgb24gdGhlIGFzc3VtcHRpb24gdGhhdCBhIGA+YCBm b2xsb3dzIHRoZSBgL2AsIHNvIGEKKyAgICB0cnVuY2F0ZWQgdGFpbCBzdWNoIGFzIGA8YS9cMGAg c3RlcHMgcGFzdCB0aGUgTlVMLgorCitUaGUgc3Vic2VxdWVudCBgbGV0ID0gKmNwb3M7YCBpbiB2 YWxfMS92YWxfeC9jZGF0YSB0aGVuIHJlYWRzIG91dCBvZgorYm91bmRzLiBUcmlnZ2VyOiBgPCEt LSBjIC0tPjxhL2AuCisKK0ZpeDogcmVxdWlyZSB0aGUgZnVsbCBgPCFbQ0RBVEFbYCAobmluZSBi eXRlcykgYmVmb3JlIHRoZSBgKz0gOWAsIGFuZAorb25seSBza2lwIHRoZSBhc3N1bWVkIGA+YCB3 aGVuIGAqKGNwb3MrMSlgIGlzIG5vbi1OVUwuIEJvdGggY2hhbmdlcyBhcmUKK2JlaGF2aW91ci1w cmVzZXJ2aW5nIGZvciB3ZWxsLWZvcm1lZCBpbnB1dCDigJQgcmVhbCBDREFUQSBhbHdheXMgY2Fy cmllcwordGhlIGBbYCwgYW5kIGEgbm9uLXRydW5jYXRlZCBzZWxmLWNsb3NlIGFsd2F5cyBoYXMg YSBieXRlIGFmdGVyIHRoZSBgL2A7Cit0aGV5IGRpZmZlciBvbmx5IG9uIHRoZSB0cnVuY2F0ZWQt dGFpbCBjYXNlIHRoYXQgcHJldmlvdXNseSBvdmVycmFuIHRoZQorYWxsb2NhdGlvbi4KKy0tLSBh L3BhcnNlci5jCisrKysgYi9wYXJzZXIuYworQEAgLTE5Myw3ICsxOTMsOCBAQAorICAgICAgICAg ICAgICAgICAgICAgKihjcG9zKzQpID09ICdEJyAmJgorICAgICAgICAgICAgICAgICAgICAgKihj cG9zKzUpID09ICdBJyAmJgorICAgICAgICAgICAgICAgICAgICAgKihjcG9zKzYpID09ICdUJyAm JgorLSAgICAgICAgICAgICAgICAgICAgKihjcG9zKzcpID09ICdBJyAgICApIHsKKysgICAgICAg ICAgICAgICAgICAgICooY3Bvcys3KSA9PSAnQScgJiYKKysgICAgICAgICAgICAgICAgICAgICoo Y3Bvcys4KSA9PSAnWycgICAgKSB7IC8vIHJlcXVpcmUgZnVsbCAiPCFbQ0RBVEFbIiBzbyBjcG9z Kz05IGNhbm5vdCBza2lwIHBhc3QgYSB0cnVuY2F0ZWQgdGFpbAorICAgICAgICAgICAgICAgICAg IGNwb3MgKz0gOTsKKyAgICAgICAgICAgICAgICAgICBjdXJub2RlLT50eXBlID0gMTsKKyAgICAg ICAgICAgICAgICAgICBnb3RvIGNkYXRhOworQEAgLTM0NCw3ICszNDUsNyBAQAorICAgICAgICAg ICB0ZW1wID0gbm9kZWNfYWRkY2hpbGRyKCBjdXJub2RlLCB0YWduYW1lLCB0YWduYW1lX2xlbiAp OworICAgICAgICAgICB0ZW1wLT56ID0gY3BvcyArMSAtIHhtbGluOworICAgICAgICAgICB0YWdu YW1lX2xlbiAgICAgICAgICAgID0gMDsKKy0gICAgICAgICAgY3Bvcys9MjsKKysgICAgICAgICAg aWYoICooY3BvcysxKSApIGNwb3MgKz0gMjsgZWxzZSBjcG9zKys7IC8vIHNraXAgYXNzdW1lZCAn Picgb25seSBpZiBub3QgdGhlIE5VTCB0ZXJtaW5hdG9yCisgICAgICAgICAgIGdvdG8gdmFsXzE7 CisgICAgICAgfQorICAgICAgIAorQEAgLTM2OCw3ICszNjksNyBAQAorICAgICAgICAgICBjdXJu b2RlLT56ID0gY3BvcysxLXhtbGluOworICAgICAgICAgICBjdXJub2RlID0gY3Vybm9kZS0+cGFy ZW50OworICAgICAgICAgICBpZiggIWN1cm5vZGUgKSBnb3RvIGRvbmU7CistICAgICAgICAgIGNw b3MrPTI7IC8vIGFtIGFzc3VtaW5nIG5leHQgY2hhciBpcyA+CisrICAgICAgICAgIGlmKCAqKGNw b3MrMSkgKSBjcG9zICs9IDI7IGVsc2UgY3BvcysrOyAvLyB3YXM6IGFzc3VtZSBuZXh0IGNoYXIg aXMgPiAoc2tpcCBwYXN0IE5VTCBvbiB0cnVuY2F0ZWQgdGFpbCkKKyAgICAgICAgICAgZ290byB2 YWxfMTsKKyAgICAgICAgIGNhc2UgJz0nOgorICAgICAgICAgICBjcG9zKys7CitAQCAtNDI1LDcg KzQyNiw3IEBACisgICAgICAgICAgIGN1cm5vZGUtPnogPSBjcG9zKzEteG1saW47CisgICAgICAg ICAgIGN1cm5vZGUgPSBjdXJub2RlLT5wYXJlbnQ7CisgICAgICAgICAgIGlmKCAhY3Vybm9kZSAp IGdvdG8gZG9uZTsKKy0gICAgICAgICAgY3BvcyArPSAyOworKyAgICAgICAgICBpZiggKihjcG9z KzEpICkgY3BvcyArPSAyOyBlbHNlIGNwb3MrKzsgLy8gIi8+IGFzc3VtZWQiIOKAlCBza2lwICc+ JyBvbmx5IGlmIHByZXNlbnQsIG5vdCB0aGUgTlVMCisgICAgICAgICAgIGdvdG8gdmFsXzE7Cisg ICAgICAgICBjYXNlICcgJzoKKyAgICAgICAgICAgaWYoICooY3BvcysxKSA9PSAnPScgKSB7Cgpk aWZmIC0tZ2l0IGEvcGVybC1YTUwtQmFyZS5zcGVjIGIvcGVybC1YTUwtQmFyZS5zcGVjCmluZGV4 IGZmMGE3M2UuLjliOGQxY2MgMTAwNjQ0Ci0tLSBhL3BlcmwtWE1MLUJhcmUuc3BlYworKysgYi9w ZXJsLVhNTC1CYXJlLnNwZWMKQEAgLTEsMTIgKzEsMjAgQEAKIE5hbWU6ICAgICAgICAgICBwZXJs LVhNTC1CYXJlCiBWZXJzaW9uOiAgICAgICAgMC41MwotUmVsZWFzZTogICAgICAgIDQ2JXs/ZGlz dH0KK1JlbGVhc2U6ICAgICAgICA0NyV7P2Rpc3R9CiBTdW1tYXJ5OiAgICAgICAgTWluaW1hbCBY TUwgcGFyc2VyIGltcGxlbWVudGVkIHZpYSBhIEMgc3RhdGUgZW5naW5lCiBMaWNlbnNlOiAgICAg ICAgR1BMLTEuMC1vci1sYXRlciBPUiBBcnRpc3RpYy0xLjAtUGVybAotVVJMOiAgICAgICAgICAg IGh0dHBzOi8vbWV0YWNwYW4ub3JnL3JlbGVhc2UvWE1MLUJhcmUKK1VSTDogICAgICAgICAgICBo dHRwczovL21ldGFjcGFuLm9yZy9kaXN0L1hNTC1CYXJlCiBTb3VyY2UwOiAgICAgICAgaHR0cHM6 Ly9jcGFuLm1ldGFjcGFuLm9yZy9hdXRob3JzL2lkL0MvQ08vQ09ERUNISUxEL1hNTC1CYXJlLSV7 dmVyc2lvbn0udGFyLmd6CisjIGh0dHBzOi8vcnQuY3Bhbi5vcmcvVGlja2V0L0Rpc3BsYXkuaHRt bD9pZD0xNDU2NTMKIFBhdGNoMDogICAgICAgICBwZXJsLVhNTC1CYXJlLWM5OS5wYXRjaAotUGF0 Y2gxOiBwZXJsLVhNTC1CYXJlLWM5OS0yLnBhdGNoCisjIGh0dHBzOi8vcnQuY3Bhbi5vcmcvUHVi bGljL0J1Zy9EaXNwbGF5Lmh0bWw/aWQ9MTUxMDQxCitQYXRjaDE6ICAgICAgICAgcGVybC1YTUwt QmFyZS1jOTktMi5wYXRjaAorIyBodHRwczovL2dpdGh1Yi5jb20vbmFub3Njb3BpYy9wZXJsLVhN TC1CYXJlL3B1bGwvMQorIyBodHRwczovL3NlY3VyaXR5Lm1ldGFjcGFuLm9yZy9wYXRjaGVzL1gv WE1MLUJhcmUvMC41My9DVkUtMjAyNi01NzA3NC1yMS5wYXRjaAorUGF0Y2gyOiAgICAgICAgIENW RS0yMDI2LTU3MDc0LXIxLnBhdGNoCisjIGh0dHBzOi8vZ2l0aHViLmNvbS9uYW5vc2NvcGljL3Bl cmwtWE1MLUJhcmUvcHVsbC8yCisjIGh0dHBzOi8vc2VjdXJpdHkubWV0YWNwYW4ub3JnL3BhdGNo ZXMvWC9YTUwtQmFyZS8wLjUzL0NWRS0yMDI2LTEzNDAxLXIxLnBhdGNoCitQYXRjaDM6ICAgICAg ICAgQ1ZFLTIwMjYtMTM0MDEtcjEucGF0Y2gKIEJ1aWxkUmVxdWlyZXM6ICBnY2MKIEJ1aWxkUmVx dWlyZXM6ICBtYWtlCiBCdWlsZFJlcXVpcmVzOiAgcGVybC1kZXZlbApAQCAtNDksMTEgKzU3LDE0 IEBAIGNobW9kIDY0NCBCYXJlLnBtCiAKICVmaWxlcwogJWRvYyBDaGFuZ2VzIFJFQURNRQotJXtw ZXJsX3ZlbmRvcmFyY2h9L2F1dG8vKgorJXtwZXJsX3ZlbmRvcmFyY2h9L2F1dG8vWE1MKgogJXtw ZXJsX3ZlbmRvcmFyY2h9L1hNTCoKICV7X21hbmRpcn0vbWFuMy9YTUwqCiAKICVjaGFuZ2Vsb2cK KyogU3VuIEF1ZyAzMCAyMDI2IEVtbWFudWVsIFNleW1hbiA8ZW1tYW51ZWxAc2V5bWFuLmZyPiAt IDAuNTMtNDcKKy0gSW5jbHVkZSB0d28gc2VjdXJpdHkgZml4ZXMgZm9yIFhNTC1CYXJlID08IDAu NTMKKwogKiBXZWQgSnVsIDIyIDIwMjYgSml0a2EgUGxlc25pa292YSA8anBsZXNuaWtAcmVkaGF0 LmNvbT4gLSAwLjUzLTQ2CiAtIFBlcmwgNS40NCByZWJ1aWxkCiAK