From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Emmanuel Seyman To: git-commits@fedoraproject.org Subject: [rpms/perl-XML-Bare] epel9: Include two security fixes for XML-Bare =< 0.53 Date: Sun, 30 Aug 2026 09:50:25 GMT Message-ID: <178808342523.1.15166696723314442036.rpms-perl-XML-Bare-570e83ef3103@fedoraproject.org> List-ID: X-Git-Repo: rpms/perl-XML-Bare X-Git-Branch: epel9 X-Git-Rev: 570e83ef310321a7204d4947b656f7feb5ad1fa3 QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvcGVybC1YTUwtQmFy ZQpCcmFuY2ggOiBlcGVsOQpDb21taXQgOiA1NzBlODNlZjMxMDMyMWE3MjA0ZDQ5NDdiNjU2Zjdm ZWI1YWQxZmEzCkF1dGhvciA6IEVtbWFudWVsIFNleW1hbiA8ZW1tYW51ZWxAc2V5bWFuLmZyPgpE YXRlICAgOiAyMDI2LTA4LTMwVDExOjQyOjI5KzAyOjAwClN0YXRzICA6ICsxMDYvLTQgaW4gMyBm aWxlKHMpClVSTCAgICA6IGh0dHBzOi8vc3JjLmZlZG9yYXByb2plY3Qub3JnL3JwbXMvcGVybC1Y TUwtQmFyZS9jLzU3MGU4M2VmMzEwMzIxYTcyMDRkNDk0N2I2NTZmN2ZlYjVhZDFmYTM/YnJhbmNo PWVwZWw5CgpMb2c6CkluY2x1ZGUgdHdvIHNlY3VyaXR5IGZpeGVzIGZvciBYTUwtQmFyZSA9PCAw LjUzCgotLS0KZGlmZiAtLWdpdCBhL0NWRS0yMDI2LTEzNDAxLXIxLnBhdGNoIGIvQ1ZFLTIwMjYt MTM0MDEtcjEucGF0Y2gKbmV3IGZpbGUgbW9kZSAxMDA2NDQKaW5kZXggMDAwMDAwMC4uZjQ3OGE1 MAotLS0gL2Rldi9udWxsCisrKyBiL0NWRS0yMDI2LTEzNDAxLXIxLnBhdGNoCkBAIC0wLDAgKzEs MjYgQEAKK0Zyb206IENQQU5TZWMgU2VjdXJpdHkgU2Nhbm5lciBCb3QgPGNwYW4tc2VjdXJpdHlA c2VjdXJpdHkubWV0YWNwYW4ub3JnPgorU3ViamVjdDogW1BBVENIXSBYTUw6OkJhcmU6IGFkdmFu Y2Ugc3R1Y2sgYXR0cmlidXRlLW5hbWUgc3RhdGUgKGluZmluaXRlIGxvb3ApCisKK0luZmluaXRl IGxvb3AgKENXRS04MzUpIGluIHRoZSBoYW5kLXJvbGxlZCBDIHBhcnNlciAocGFyc2VyLmMpLCBy ZWFjaGVkCitieSB0aGUgZGVmYXVsdCBYTUw6OkJhcmUtPm5ldyh0ZXh0PT4keG1sKS0+cGFyc2Ug b24gdW50cnVzdGVkIFhNTC4KKworVGhlIGBhdHRfbmFtZXFzZG9uZWAgc3RhdGUg4oCUIHJlYWNo ZWQgYWZ0ZXIgYSBzaW5nbGUtcXVvdGVkIGF0dHJpYnV0ZQorKm5hbWUqIOKAlCBsb29wcyBiYWNr IHRvIGl0c2VsZiB3aXRob3V0IGFkdmFuY2luZyBgY3Bvc2Agb24gYW55IGNoYXJhY3Rlcgorb3Ro ZXIgdGhhbiBgPWAgb3IgTlVMLCBzcGlubmluZyBmb3JldmVyIGluIEMgb24gbWFsZm9ybWVkIGlu cHV0LiBUaGUKK3BhcnNlciBob2xkcyB0aGUgaW50ZXJwcmV0ZXIgZm9yIHRoZSBkdXJhdGlvbiBv ZiB0aGUgY2FsbCwgc28gbm8KK1BlcmwtbGV2ZWwgc2lnbmFsIChgYWxhcm1gLCBldGMuKSBjYW4g aW50ZXJydXB0IGl0OiBhIHNpbmdsZSByZXF1ZXN0CitwaW5zIGEgQ1BVIGluZGVmaW5pdGVseS4g VHJpZ2dlcnM6IGA8YSA9J2MnPmAsIGA8YSBiPScnJycnJydjJz5gLAorYDx4IHk9JycnJycneic+ YC4KKworRml4OiBhZHZhbmNlIHRoZSBjdXJzb3IgYmVmb3JlIGxvb3BpbmcsIHNvIHRoZSBzY2Fu IHRlcm1pbmF0ZXMgYXQgdGhlCituZXh0IGA9YCBvciBhdCB0aGUgTlVMIHNlbnRpbmVsIChhbHJl YWR5IGhhbmRsZWQgYnkgdGhlIGBjYXNlIDBgIGJyYW5jaCkuCistLS0gYS9wYXJzZXIuYworKysr IGIvcGFyc2VyLmMKK0BAIC00ODQsNiArNDg1LDcgQEAKKyAgICAgICAgICAgY3BvcysrOworICAg ICAgICAgICBnb3RvIGF0dF9lcTE7CisgICAgICAgfQorKyAgICAgIGNwb3MrKzsgLy8gYWR2YW5j ZSB0aGUgY3Vyc29yIHNvIG1hbGZvcm1lZCBpbnB1dCAobm8gJz0nIGFmdGVyIGEgcXVvdGVkIGF0 dHIgbmFtZSkgY2Fubm90IHNwaW4gZm9yZXZlcgorICAgICAgIGdvdG8gYXR0X25hbWVxc2RvbmU7 CisgICAgICAgCisgICAgIGF0dF9lcTE6CgpkaWZmIC0tZ2l0IGEvQ1ZFLTIwMjYtNTcwNzQtcjEu cGF0Y2ggYi9DVkUtMjAyNi01NzA3NC1yMS5wYXRjaApuZXcgZmlsZSBtb2RlIDEwMDY0NAppbmRl eCAwMDAwMDAwLi4yOWUzODJjCi0tLSAvZGV2L251bGwKKysrIGIvQ1ZFLTIwMjYtNTcwNzQtcjEu cGF0Y2gKQEAgLTAsMCArMSw2NSBAQAorRnJvbTogQ1BBTlNlYyBTZWN1cml0eSBTY2FubmVyIEJv dCA8Y3Bhbi1zZWN1cml0eUBzZWN1cml0eS5tZXRhY3Bhbi5vcmc+CitTdWJqZWN0OiBbUEFUQ0hd IFhNTDo6QmFyZTogYm91bmRzIHRydW5jYXRlZCBmaXhlZC1hZHZhbmNlIGxvb2thaGVhZCAoaGVh cCBPT0IgcmVhZCkKKworSGVhcC1idWZmZXItb3ZlcmZsb3cgUkVBRCAoQ1dFLTEyNSkgaW4gdGhl IGhhbmQtcm9sbGVkIEMgcGFyc2VyCisocGFyc2VyLmMpLCByZWFjaGVkIGJ5IHRoZSBkZWZhdWx0 IFhNTDo6QmFyZS0+bmV3KHRleHQ9PiR4bWwpLT5wYXJzZSBvbgordW50cnVzdGVkIFhNTC4KKwor U2V2ZXJhbCB0cmFuc2l0aW9ucyBhZHZhbmNlIGBjcG9zYCBieSBhIGZpeGVkIGFtb3VudCBwYXN0 IGEgcmVjb2duaXNlZAordG9rZW4gd2l0aG91dCBjaGVja2luZyB0aGUgYnVmZmVyIGVuZCwgdGhl biBkZXJlZmVyZW5jZSB0aGUgbmV3IHBvc2l0aW9uOgorCisgIC0gdGhlIGA8IVtDREFUQWAgbWF0 Y2ggZG9lcyBgY3BvcyArPSA5YCBhZnRlciBjb25maXJtaW5nIG9ubHkgZWlnaHQKKyAgICBieXRl cyAoYDwhW0NEQVRBYCksIHNvIGEgdHJ1bmNhdGVkIHRhaWwgc3VjaCBhcyBgPCFbQ0RBVEFcMGAg c3RlcHMKKyAgICBvbmUgYnl0ZSBwYXN0IHRoZSBOVUwgdGVybWluYXRvcjsKKyAgLSB0aGUgdGhy ZWUgInNlbGYtY2xvc2luZyB0YWciIGJyYW5jaGVzIChuYW1lX3gsIG5hbWVfZ2FwLCBhdHRfbmFt ZSkKKyAgICBkbyBgY3BvcyArPSAyYCBvbiB0aGUgYXNzdW1wdGlvbiB0aGF0IGEgYD5gIGZvbGxv d3MgdGhlIGAvYCwgc28gYQorICAgIHRydW5jYXRlZCB0YWlsIHN1Y2ggYXMgYDxhL1wwYCBzdGVw cyBwYXN0IHRoZSBOVUwuCisKK1RoZSBzdWJzZXF1ZW50IGBsZXQgPSAqY3BvcztgIGluIHZhbF8x L3ZhbF94L2NkYXRhIHRoZW4gcmVhZHMgb3V0IG9mCitib3VuZHMuIFRyaWdnZXI6IGA8IS0tIGMg LS0+PGEvYC4KKworRml4OiByZXF1aXJlIHRoZSBmdWxsIGA8IVtDREFUQVtgIChuaW5lIGJ5dGVz KSBiZWZvcmUgdGhlIGArPSA5YCwgYW5kCitvbmx5IHNraXAgdGhlIGFzc3VtZWQgYD5gIHdoZW4g YCooY3BvcysxKWAgaXMgbm9uLU5VTC4gQm90aCBjaGFuZ2VzIGFyZQorYmVoYXZpb3VyLXByZXNl cnZpbmcgZm9yIHdlbGwtZm9ybWVkIGlucHV0IOKAlCByZWFsIENEQVRBIGFsd2F5cyBjYXJyaWVz Cit0aGUgYFtgLCBhbmQgYSBub24tdHJ1bmNhdGVkIHNlbGYtY2xvc2UgYWx3YXlzIGhhcyBhIGJ5 dGUgYWZ0ZXIgdGhlIGAvYDsKK3RoZXkgZGlmZmVyIG9ubHkgb24gdGhlIHRydW5jYXRlZC10YWls IGNhc2UgdGhhdCBwcmV2aW91c2x5IG92ZXJyYW4gdGhlCithbGxvY2F0aW9uLgorLS0tIGEvcGFy c2VyLmMKKysrKyBiL3BhcnNlci5jCitAQCAtMTkzLDcgKzE5Myw4IEBACisgICAgICAgICAgICAg ICAgICAgICAqKGNwb3MrNCkgPT0gJ0QnICYmCisgICAgICAgICAgICAgICAgICAgICAqKGNwb3Mr NSkgPT0gJ0EnICYmCisgICAgICAgICAgICAgICAgICAgICAqKGNwb3MrNikgPT0gJ1QnICYmCist ICAgICAgICAgICAgICAgICAgICAqKGNwb3MrNykgPT0gJ0EnICAgICkgeworKyAgICAgICAgICAg ICAgICAgICAgKihjcG9zKzcpID09ICdBJyAmJgorKyAgICAgICAgICAgICAgICAgICAgKihjcG9z KzgpID09ICdbJyAgICApIHsgLy8gcmVxdWlyZSBmdWxsICI8IVtDREFUQVsiIHNvIGNwb3MrPTkg Y2Fubm90IHNraXAgcGFzdCBhIHRydW5jYXRlZCB0YWlsCisgICAgICAgICAgICAgICAgICAgY3Bv cyArPSA5OworICAgICAgICAgICAgICAgICAgIGN1cm5vZGUtPnR5cGUgPSAxOworICAgICAgICAg ICAgICAgICAgIGdvdG8gY2RhdGE7CitAQCAtMzQ0LDcgKzM0NSw3IEBACisgICAgICAgICAgIHRl bXAgPSBub2RlY19hZGRjaGlsZHIoIGN1cm5vZGUsIHRhZ25hbWUsIHRhZ25hbWVfbGVuICk7Cisg ICAgICAgICAgIHRlbXAtPnogPSBjcG9zICsxIC0geG1saW47CisgICAgICAgICAgIHRhZ25hbWVf bGVuICAgICAgICAgICAgPSAwOworLSAgICAgICAgICBjcG9zKz0yOworKyAgICAgICAgICBpZigg KihjcG9zKzEpICkgY3BvcyArPSAyOyBlbHNlIGNwb3MrKzsgLy8gc2tpcCBhc3N1bWVkICc+JyBv bmx5IGlmIG5vdCB0aGUgTlVMIHRlcm1pbmF0b3IKKyAgICAgICAgICAgZ290byB2YWxfMTsKKyAg ICAgICB9CisgICAgICAgCitAQCAtMzY4LDcgKzM2OSw3IEBACisgICAgICAgICAgIGN1cm5vZGUt PnogPSBjcG9zKzEteG1saW47CisgICAgICAgICAgIGN1cm5vZGUgPSBjdXJub2RlLT5wYXJlbnQ7 CisgICAgICAgICAgIGlmKCAhY3Vybm9kZSApIGdvdG8gZG9uZTsKKy0gICAgICAgICAgY3Bvcys9 MjsgLy8gYW0gYXNzdW1pbmcgbmV4dCBjaGFyIGlzID4KKysgICAgICAgICAgaWYoICooY3Bvcysx KSApIGNwb3MgKz0gMjsgZWxzZSBjcG9zKys7IC8vIHdhczogYXNzdW1lIG5leHQgY2hhciBpcyA+ IChza2lwIHBhc3QgTlVMIG9uIHRydW5jYXRlZCB0YWlsKQorICAgICAgICAgICBnb3RvIHZhbF8x OworICAgICAgICAgY2FzZSAnPSc6CisgICAgICAgICAgIGNwb3MrKzsKK0BAIC00MjUsNyArNDI2 LDcgQEAKKyAgICAgICAgICAgY3Vybm9kZS0+eiA9IGNwb3MrMS14bWxpbjsKKyAgICAgICAgICAg Y3Vybm9kZSA9IGN1cm5vZGUtPnBhcmVudDsKKyAgICAgICAgICAgaWYoICFjdXJub2RlICkgZ290 byBkb25lOworLSAgICAgICAgICBjcG9zICs9IDI7CisrICAgICAgICAgIGlmKCAqKGNwb3MrMSkg KSBjcG9zICs9IDI7IGVsc2UgY3BvcysrOyAvLyAiLz4gYXNzdW1lZCIg4oCUIHNraXAgJz4nIG9u bHkgaWYgcHJlc2VudCwgbm90IHRoZSBOVUwKKyAgICAgICAgICAgZ290byB2YWxfMTsKKyAgICAg ICAgIGNhc2UgJyAnOgorICAgICAgICAgICBpZiggKihjcG9zKzEpID09ICc9JyApIHsKCmRpZmYg LS1naXQgYS9wZXJsLVhNTC1CYXJlLnNwZWMgYi9wZXJsLVhNTC1CYXJlLnNwZWMKaW5kZXggNDNi MDdjZS4uZjcyNjA0ZiAxMDA2NDQKLS0tIGEvcGVybC1YTUwtQmFyZS5zcGVjCisrKyBiL3Blcmwt WE1MLUJhcmUuc3BlYwpAQCAtMSwxMiArMSwyMCBAQAogTmFtZTogICAgICAgICAgIHBlcmwtWE1M LUJhcmUKIFZlcnNpb246ICAgICAgICAwLjUzCi1SZWxlYXNlOiAgICAgICAgMzklez9kaXN0fQor UmVsZWFzZTogICAgICAgIDQwJXs/ZGlzdH0KIFN1bW1hcnk6ICAgICAgICBNaW5pbWFsIFhNTCBw YXJzZXIgaW1wbGVtZW50ZWQgdmlhIGEgQyBzdGF0ZSBlbmdpbmUKIExpY2Vuc2U6ICAgICAgICBH UEwtMS4wLW9yLWxhdGVyIE9SIEFydGlzdGljLTEuMC1QZXJsCi1VUkw6ICAgICAgICAgICAgaHR0 cHM6Ly9tZXRhY3Bhbi5vcmcvcmVsZWFzZS9YTUwtQmFyZQorVVJMOiAgICAgICAgICAgIGh0dHBz Oi8vbWV0YWNwYW4ub3JnL2Rpc3QvWE1MLUJhcmUKIFNvdXJjZTA6ICAgICAgICBodHRwczovL2Nw YW4ubWV0YWNwYW4ub3JnL2F1dGhvcnMvaWQvQy9DTy9DT0RFQ0hJTEQvWE1MLUJhcmUtJXt2ZXJz aW9ufS50YXIuZ3oKKyMgaHR0cHM6Ly9ydC5jcGFuLm9yZy9UaWNrZXQvRGlzcGxheS5odG1sP2lk PTE0NTY1MwogUGF0Y2gwOiAgICAgICAgIHBlcmwtWE1MLUJhcmUtYzk5LnBhdGNoCi1QYXRjaDE6 IHBlcmwtWE1MLUJhcmUtYzk5LTIucGF0Y2gKKyMgaHR0cHM6Ly9ydC5jcGFuLm9yZy9QdWJsaWMv QnVnL0Rpc3BsYXkuaHRtbD9pZD0xNTEwNDEKK1BhdGNoMTogICAgICAgICBwZXJsLVhNTC1CYXJl LWM5OS0yLnBhdGNoCisjIGh0dHBzOi8vZ2l0aHViLmNvbS9uYW5vc2NvcGljL3BlcmwtWE1MLUJh cmUvcHVsbC8xCisjIGh0dHBzOi8vc2VjdXJpdHkubWV0YWNwYW4ub3JnL3BhdGNoZXMvWC9YTUwt QmFyZS8wLjUzL0NWRS0yMDI2LTU3MDc0LXIxLnBhdGNoCitQYXRjaDI6ICAgICAgICAgQ1ZFLTIw MjYtNTcwNzQtcjEucGF0Y2gKKyMgaHR0cHM6Ly9naXRodWIuY29tL25hbm9zY29waWMvcGVybC1Y TUwtQmFyZS9wdWxsLzIKKyMgaHR0cHM6Ly9zZWN1cml0eS5tZXRhY3Bhbi5vcmcvcGF0Y2hlcy9Y L1hNTC1CYXJlLzAuNTMvQ1ZFLTIwMjYtMTM0MDEtcjEucGF0Y2gKK1BhdGNoMzogICAgICAgICBD VkUtMjAyNi0xMzQwMS1yMS5wYXRjaAogQnVpbGRSZXF1aXJlczogIGdjYwogQnVpbGRSZXF1aXJl czogIG1ha2UKIEJ1aWxkUmVxdWlyZXM6ICBwZXJsLWRldmVsCkBAIC00OSwxMSArNTcsMTQgQEAg Y2htb2QgNjQ0IEJhcmUucG0KIAogJWZpbGVzCiAlZG9jIENoYW5nZXMgUkVBRE1FCi0le3Blcmxf dmVuZG9yYXJjaH0vYXV0by8qCisle3BlcmxfdmVuZG9yYXJjaH0vYXV0by9YTUwqCiAle3Blcmxf dmVuZG9yYXJjaH0vWE1MKgogJXtfbWFuZGlyfS9tYW4zL1hNTCoKIAogJWNoYW5nZWxvZworKiBT dW4gQXVnIDMwIDIwMjYgRW1tYW51ZWwgU2V5bWFuIDxlbW1hbnVlbEBzZXltYW4uZnI+IC0gMC41 My00NworLSBJbmNsdWRlIHR3byBzZWN1cml0eSBmaXhlcyBmb3IgWE1MLUJhcmUgPTwgMC41Mwor CiAqIFRodSBKdWwgMTEgMjAyNCBFbW1hbnVlbCBTZXltYW4gPGVtbWFudWVsQHNleW1hbi5mcj4g LSAwLjUzLTM5CiAtIE1pZ3JhdGUgdG8gU1BEWCBsaWNlbnNlCiAtIFVzZSAlJXttYWtlX2J1aWxk fSBhbmQgJSV7bWFrZV9pbnN0YWxsfSB3aGVyZSBhcHByb3ByaWF0ZQo=