From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Emmanuel Seyman To: git-commits@fedoraproject.org Subject: [rpms/perl-XML-Bare] f43: Include two security fixes for XML-Bare =< 0.53 Date: Sun, 30 Aug 2026 09:28:43 GMT Message-ID: <178808212341.1.7599441024557736613.rpms-perl-XML-Bare-19c0307e8198@fedoraproject.org> List-ID: X-Git-Repo: rpms/perl-XML-Bare X-Git-Branch: f43 X-Git-Rev: 19c0307e8198508687e284e9fb848e599c705333 QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvcGVybC1YTUwtQmFy ZQpCcmFuY2ggOiBmNDMKQ29tbWl0IDogMTljMDMwN2U4MTk4NTA4Njg3ZTI4NGU5ZmI4NDhlNTk5 YzcwNTMzMwpBdXRob3IgOiBFbW1hbnVlbCBTZXltYW4gPGVtbWFudWVsQHNleW1hbi5mcj4KRGF0 ZSAgIDogMjAyNi0wOC0zMFQxMToyODoxNSswMjowMApTdGF0cyAgOiArMTA2Ly00IGluIDMgZmls ZShzKQpVUkwgICAgOiBodHRwczovL3NyYy5mZWRvcmFwcm9qZWN0Lm9yZy9ycG1zL3BlcmwtWE1M LUJhcmUvYy8xOWMwMzA3ZTgxOTg1MDg2ODdlMjg0ZTlmYjg0OGU1OTljNzA1MzMzP2JyYW5jaD1m NDMKCkxvZzoKSW5jbHVkZSB0d28gc2VjdXJpdHkgZml4ZXMgZm9yIFhNTC1CYXJlID08IDAuNTMK Ci0tLQpkaWZmIC0tZ2l0IGEvQ1ZFLTIwMjYtMTM0MDEtcjEucGF0Y2ggYi9DVkUtMjAyNi0xMzQw MS1yMS5wYXRjaApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRleCAwMDAwMDAwLi5mNDc4YTUwCi0t LSAvZGV2L251bGwKKysrIGIvQ1ZFLTIwMjYtMTM0MDEtcjEucGF0Y2gKQEAgLTAsMCArMSwyNiBA QAorRnJvbTogQ1BBTlNlYyBTZWN1cml0eSBTY2FubmVyIEJvdCA8Y3Bhbi1zZWN1cml0eUBzZWN1 cml0eS5tZXRhY3Bhbi5vcmc+CitTdWJqZWN0OiBbUEFUQ0hdIFhNTDo6QmFyZTogYWR2YW5jZSBz dHVjayBhdHRyaWJ1dGUtbmFtZSBzdGF0ZSAoaW5maW5pdGUgbG9vcCkKKworSW5maW5pdGUgbG9v cCAoQ1dFLTgzNSkgaW4gdGhlIGhhbmQtcm9sbGVkIEMgcGFyc2VyIChwYXJzZXIuYyksIHJlYWNo ZWQKK2J5IHRoZSBkZWZhdWx0IFhNTDo6QmFyZS0+bmV3KHRleHQ9PiR4bWwpLT5wYXJzZSBvbiB1 bnRydXN0ZWQgWE1MLgorCitUaGUgYGF0dF9uYW1lcXNkb25lYCBzdGF0ZSDigJQgcmVhY2hlZCBh ZnRlciBhIHNpbmdsZS1xdW90ZWQgYXR0cmlidXRlCisqbmFtZSog4oCUIGxvb3BzIGJhY2sgdG8g aXRzZWxmIHdpdGhvdXQgYWR2YW5jaW5nIGBjcG9zYCBvbiBhbnkgY2hhcmFjdGVyCitvdGhlciB0 aGFuIGA9YCBvciBOVUwsIHNwaW5uaW5nIGZvcmV2ZXIgaW4gQyBvbiBtYWxmb3JtZWQgaW5wdXQu IFRoZQorcGFyc2VyIGhvbGRzIHRoZSBpbnRlcnByZXRlciBmb3IgdGhlIGR1cmF0aW9uIG9mIHRo ZSBjYWxsLCBzbyBubworUGVybC1sZXZlbCBzaWduYWwgKGBhbGFybWAsIGV0Yy4pIGNhbiBpbnRl cnJ1cHQgaXQ6IGEgc2luZ2xlIHJlcXVlc3QKK3BpbnMgYSBDUFUgaW5kZWZpbml0ZWx5LiBUcmln Z2VyczogYDxhID0nYyc+YCwgYDxhIGI9JycnJycnJ2MnPmAsCitgPHggeT0nJycnJyd6Jz5gLgor CitGaXg6IGFkdmFuY2UgdGhlIGN1cnNvciBiZWZvcmUgbG9vcGluZywgc28gdGhlIHNjYW4gdGVy bWluYXRlcyBhdCB0aGUKK25leHQgYD1gIG9yIGF0IHRoZSBOVUwgc2VudGluZWwgKGFscmVhZHkg aGFuZGxlZCBieSB0aGUgYGNhc2UgMGAgYnJhbmNoKS4KKy0tLSBhL3BhcnNlci5jCisrKysgYi9w YXJzZXIuYworQEAgLTQ4NCw2ICs0ODUsNyBAQAorICAgICAgICAgICBjcG9zKys7CisgICAgICAg ICAgIGdvdG8gYXR0X2VxMTsKKyAgICAgICB9CisrICAgICAgY3BvcysrOyAvLyBhZHZhbmNlIHRo ZSBjdXJzb3Igc28gbWFsZm9ybWVkIGlucHV0IChubyAnPScgYWZ0ZXIgYSBxdW90ZWQgYXR0ciBu YW1lKSBjYW5ub3Qgc3BpbiBmb3JldmVyCisgICAgICAgZ290byBhdHRfbmFtZXFzZG9uZTsKKyAg ICAgICAKKyAgICAgYXR0X2VxMToKCmRpZmYgLS1naXQgYS9DVkUtMjAyNi01NzA3NC1yMS5wYXRj aCBiL0NWRS0yMDI2LTU3MDc0LXIxLnBhdGNoCm5ldyBmaWxlIG1vZGUgMTAwNjQ0CmluZGV4IDAw MDAwMDAuLjI5ZTM4MmMKLS0tIC9kZXYvbnVsbAorKysgYi9DVkUtMjAyNi01NzA3NC1yMS5wYXRj aApAQCAtMCwwICsxLDY1IEBACitGcm9tOiBDUEFOU2VjIFNlY3VyaXR5IFNjYW5uZXIgQm90IDxj cGFuLXNlY3VyaXR5QHNlY3VyaXR5Lm1ldGFjcGFuLm9yZz4KK1N1YmplY3Q6IFtQQVRDSF0gWE1M OjpCYXJlOiBib3VuZHMgdHJ1bmNhdGVkIGZpeGVkLWFkdmFuY2UgbG9va2FoZWFkIChoZWFwIE9P QiByZWFkKQorCitIZWFwLWJ1ZmZlci1vdmVyZmxvdyBSRUFEIChDV0UtMTI1KSBpbiB0aGUgaGFu ZC1yb2xsZWQgQyBwYXJzZXIKKyhwYXJzZXIuYyksIHJlYWNoZWQgYnkgdGhlIGRlZmF1bHQgWE1M OjpCYXJlLT5uZXcodGV4dD0+JHhtbCktPnBhcnNlIG9uCit1bnRydXN0ZWQgWE1MLgorCitTZXZl cmFsIHRyYW5zaXRpb25zIGFkdmFuY2UgYGNwb3NgIGJ5IGEgZml4ZWQgYW1vdW50IHBhc3QgYSBy ZWNvZ25pc2VkCit0b2tlbiB3aXRob3V0IGNoZWNraW5nIHRoZSBidWZmZXIgZW5kLCB0aGVuIGRl cmVmZXJlbmNlIHRoZSBuZXcgcG9zaXRpb246CisKKyAgLSB0aGUgYDwhW0NEQVRBYCBtYXRjaCBk b2VzIGBjcG9zICs9IDlgIGFmdGVyIGNvbmZpcm1pbmcgb25seSBlaWdodAorICAgIGJ5dGVzIChg PCFbQ0RBVEFgKSwgc28gYSB0cnVuY2F0ZWQgdGFpbCBzdWNoIGFzIGA8IVtDREFUQVwwYCBzdGVw cworICAgIG9uZSBieXRlIHBhc3QgdGhlIE5VTCB0ZXJtaW5hdG9yOworICAtIHRoZSB0aHJlZSAi c2VsZi1jbG9zaW5nIHRhZyIgYnJhbmNoZXMgKG5hbWVfeCwgbmFtZV9nYXAsIGF0dF9uYW1lKQor ICAgIGRvIGBjcG9zICs9IDJgIG9uIHRoZSBhc3N1bXB0aW9uIHRoYXQgYSBgPmAgZm9sbG93cyB0 aGUgYC9gLCBzbyBhCisgICAgdHJ1bmNhdGVkIHRhaWwgc3VjaCBhcyBgPGEvXDBgIHN0ZXBzIHBh c3QgdGhlIE5VTC4KKworVGhlIHN1YnNlcXVlbnQgYGxldCA9ICpjcG9zO2AgaW4gdmFsXzEvdmFs X3gvY2RhdGEgdGhlbiByZWFkcyBvdXQgb2YKK2JvdW5kcy4gVHJpZ2dlcjogYDwhLS0gYyAtLT48 YS9gLgorCitGaXg6IHJlcXVpcmUgdGhlIGZ1bGwgYDwhW0NEQVRBW2AgKG5pbmUgYnl0ZXMpIGJl Zm9yZSB0aGUgYCs9IDlgLCBhbmQKK29ubHkgc2tpcCB0aGUgYXNzdW1lZCBgPmAgd2hlbiBgKihj cG9zKzEpYCBpcyBub24tTlVMLiBCb3RoIGNoYW5nZXMgYXJlCitiZWhhdmlvdXItcHJlc2Vydmlu ZyBmb3Igd2VsbC1mb3JtZWQgaW5wdXQg4oCUIHJlYWwgQ0RBVEEgYWx3YXlzIGNhcnJpZXMKK3Ro ZSBgW2AsIGFuZCBhIG5vbi10cnVuY2F0ZWQgc2VsZi1jbG9zZSBhbHdheXMgaGFzIGEgYnl0ZSBh ZnRlciB0aGUgYC9gOwordGhleSBkaWZmZXIgb25seSBvbiB0aGUgdHJ1bmNhdGVkLXRhaWwgY2Fz ZSB0aGF0IHByZXZpb3VzbHkgb3ZlcnJhbiB0aGUKK2FsbG9jYXRpb24uCistLS0gYS9wYXJzZXIu YworKysrIGIvcGFyc2VyLmMKK0BAIC0xOTMsNyArMTkzLDggQEAKKyAgICAgICAgICAgICAgICAg ICAgICooY3Bvcys0KSA9PSAnRCcgJiYKKyAgICAgICAgICAgICAgICAgICAgICooY3Bvcys1KSA9 PSAnQScgJiYKKyAgICAgICAgICAgICAgICAgICAgICooY3Bvcys2KSA9PSAnVCcgJiYKKy0gICAg ICAgICAgICAgICAgICAgICooY3Bvcys3KSA9PSAnQScgICAgKSB7CisrICAgICAgICAgICAgICAg ICAgICAqKGNwb3MrNykgPT0gJ0EnICYmCisrICAgICAgICAgICAgICAgICAgICAqKGNwb3MrOCkg PT0gJ1snICAgICkgeyAvLyByZXF1aXJlIGZ1bGwgIjwhW0NEQVRBWyIgc28gY3Bvcys9OSBjYW5u b3Qgc2tpcCBwYXN0IGEgdHJ1bmNhdGVkIHRhaWwKKyAgICAgICAgICAgICAgICAgICBjcG9zICs9 IDk7CisgICAgICAgICAgICAgICAgICAgY3Vybm9kZS0+dHlwZSA9IDE7CisgICAgICAgICAgICAg ICAgICAgZ290byBjZGF0YTsKK0BAIC0zNDQsNyArMzQ1LDcgQEAKKyAgICAgICAgICAgdGVtcCA9 IG5vZGVjX2FkZGNoaWxkciggY3Vybm9kZSwgdGFnbmFtZSwgdGFnbmFtZV9sZW4gKTsKKyAgICAg ICAgICAgdGVtcC0+eiA9IGNwb3MgKzEgLSB4bWxpbjsKKyAgICAgICAgICAgdGFnbmFtZV9sZW4g ICAgICAgICAgICA9IDA7CistICAgICAgICAgIGNwb3MrPTI7CisrICAgICAgICAgIGlmKCAqKGNw b3MrMSkgKSBjcG9zICs9IDI7IGVsc2UgY3BvcysrOyAvLyBza2lwIGFzc3VtZWQgJz4nIG9ubHkg aWYgbm90IHRoZSBOVUwgdGVybWluYXRvcgorICAgICAgICAgICBnb3RvIHZhbF8xOworICAgICAg IH0KKyAgICAgICAKK0BAIC0zNjgsNyArMzY5LDcgQEAKKyAgICAgICAgICAgY3Vybm9kZS0+eiA9 IGNwb3MrMS14bWxpbjsKKyAgICAgICAgICAgY3Vybm9kZSA9IGN1cm5vZGUtPnBhcmVudDsKKyAg ICAgICAgICAgaWYoICFjdXJub2RlICkgZ290byBkb25lOworLSAgICAgICAgICBjcG9zKz0yOyAv LyBhbSBhc3N1bWluZyBuZXh0IGNoYXIgaXMgPgorKyAgICAgICAgICBpZiggKihjcG9zKzEpICkg Y3BvcyArPSAyOyBlbHNlIGNwb3MrKzsgLy8gd2FzOiBhc3N1bWUgbmV4dCBjaGFyIGlzID4gKHNr aXAgcGFzdCBOVUwgb24gdHJ1bmNhdGVkIHRhaWwpCisgICAgICAgICAgIGdvdG8gdmFsXzE7Cisg ICAgICAgICBjYXNlICc9JzoKKyAgICAgICAgICAgY3BvcysrOworQEAgLTQyNSw3ICs0MjYsNyBA QAorICAgICAgICAgICBjdXJub2RlLT56ID0gY3BvcysxLXhtbGluOworICAgICAgICAgICBjdXJu b2RlID0gY3Vybm9kZS0+cGFyZW50OworICAgICAgICAgICBpZiggIWN1cm5vZGUgKSBnb3RvIGRv bmU7CistICAgICAgICAgIGNwb3MgKz0gMjsKKysgICAgICAgICAgaWYoICooY3BvcysxKSApIGNw b3MgKz0gMjsgZWxzZSBjcG9zKys7IC8vICIvPiBhc3N1bWVkIiDigJQgc2tpcCAnPicgb25seSBp ZiBwcmVzZW50LCBub3QgdGhlIE5VTAorICAgICAgICAgICBnb3RvIHZhbF8xOworICAgICAgICAg Y2FzZSAnICc6CisgICAgICAgICAgIGlmKCAqKGNwb3MrMSkgPT0gJz0nICkgewoKZGlmZiAtLWdp dCBhL3BlcmwtWE1MLUJhcmUuc3BlYyBiL3BlcmwtWE1MLUJhcmUuc3BlYwppbmRleCA0ZGFkMzAx Li43ZTBiNzgyIDEwMDY0NAotLS0gYS9wZXJsLVhNTC1CYXJlLnNwZWMKKysrIGIvcGVybC1YTUwt QmFyZS5zcGVjCkBAIC0xLDEyICsxLDIwIEBACiBOYW1lOiAgICAgICAgICAgcGVybC1YTUwtQmFy ZQogVmVyc2lvbjogICAgICAgIDAuNTMKLVJlbGVhc2U6ICAgICAgICA0MyV7P2Rpc3R9CitSZWxl YXNlOiAgICAgICAgNDQlez9kaXN0fQogU3VtbWFyeTogICAgICAgIE1pbmltYWwgWE1MIHBhcnNl ciBpbXBsZW1lbnRlZCB2aWEgYSBDIHN0YXRlIGVuZ2luZQogTGljZW5zZTogICAgICAgIEdQTC0x LjAtb3ItbGF0ZXIgT1IgQXJ0aXN0aWMtMS4wLVBlcmwKLVVSTDogICAgICAgICAgICBodHRwczov L21ldGFjcGFuLm9yZy9yZWxlYXNlL1hNTC1CYXJlCitVUkw6ICAgICAgICAgICAgaHR0cHM6Ly9t ZXRhY3Bhbi5vcmcvZGlzdC9YTUwtQmFyZQogU291cmNlMDogICAgICAgIGh0dHBzOi8vY3Bhbi5t ZXRhY3Bhbi5vcmcvYXV0aG9ycy9pZC9DL0NPL0NPREVDSElMRC9YTUwtQmFyZS0le3ZlcnNpb259 LnRhci5negorIyBodHRwczovL3J0LmNwYW4ub3JnL1RpY2tldC9EaXNwbGF5Lmh0bWw/aWQ9MTQ1 NjUzCiBQYXRjaDA6ICAgICAgICAgcGVybC1YTUwtQmFyZS1jOTkucGF0Y2gKLVBhdGNoMTogcGVy bC1YTUwtQmFyZS1jOTktMi5wYXRjaAorIyBodHRwczovL3J0LmNwYW4ub3JnL1B1YmxpYy9CdWcv RGlzcGxheS5odG1sP2lkPTE1MTA0MQorUGF0Y2gxOiAgICAgICAgIHBlcmwtWE1MLUJhcmUtYzk5 LTIucGF0Y2gKKyMgaHR0cHM6Ly9naXRodWIuY29tL25hbm9zY29waWMvcGVybC1YTUwtQmFyZS9w dWxsLzEKKyMgaHR0cHM6Ly9zZWN1cml0eS5tZXRhY3Bhbi5vcmcvcGF0Y2hlcy9YL1hNTC1CYXJl LzAuNTMvQ1ZFLTIwMjYtNTcwNzQtcjEucGF0Y2gKK1BhdGNoMjogICAgICAgICBDVkUtMjAyNi01 NzA3NC1yMS5wYXRjaAorIyBodHRwczovL2dpdGh1Yi5jb20vbmFub3Njb3BpYy9wZXJsLVhNTC1C YXJlL3B1bGwvMgorIyBodHRwczovL3NlY3VyaXR5Lm1ldGFjcGFuLm9yZy9wYXRjaGVzL1gvWE1M LUJhcmUvMC41My9DVkUtMjAyNi0xMzQwMS1yMS5wYXRjaAorUGF0Y2gzOiAgICAgICAgIENWRS0y MDI2LTEzNDAxLXIxLnBhdGNoCiBCdWlsZFJlcXVpcmVzOiAgZ2NjCiBCdWlsZFJlcXVpcmVzOiAg bWFrZQogQnVpbGRSZXF1aXJlczogIHBlcmwtZGV2ZWwKQEAgLTQ5LDExICs1NywxNCBAQCBjaG1v ZCA2NDQgQmFyZS5wbQogCiAlZmlsZXMKICVkb2MgQ2hhbmdlcyBSRUFETUUKLSV7cGVybF92ZW5k b3JhcmNofS9hdXRvLyoKKyV7cGVybF92ZW5kb3JhcmNofS9hdXRvL1hNTCoKICV7cGVybF92ZW5k b3JhcmNofS9YTUwqCiAle19tYW5kaXJ9L21hbjMvWE1MKgogCiAlY2hhbmdlbG9nCisqIFN1biBB dWcgMzAgMjAyNiBFbW1hbnVlbCBTZXltYW4gPGVtbWFudWVsQHNleW1hbi5mcj4gLSAwLjUzLTQ3 CistIEluY2x1ZGUgdHdvIHNlY3VyaXR5IGZpeGVzIGZvciBYTUwtQmFyZSA9PCAwLjUzCisKICog RnJpIEp1bCAyNSAyMDI1IEZlZG9yYSBSZWxlYXNlIEVuZ2luZWVyaW5nIDxyZWxlbmdAZmVkb3Jh cHJvamVjdC5vcmc+IC0gMC41My00MwogLSBSZWJ1aWx0IGZvciBodHRwczovL2ZlZG9yYXByb2pl Y3Qub3JnL3dpa2kvRmVkb3JhXzQzX01hc3NfUmVidWlsZAogCg==