[rpms/NetworkManager-iodine] f43: Fix CVE-2026-91837

[rpms/NetworkManager-iodine] f43: Fix CVE-2026-91837

[Dan Fruehauf]

A new commit has been pushed.

Repo   : rpms/NetworkManager-iodine
Branch : f43
Commit : 9bfec9162fc0920389d494b37524a647c5af25ba
Author : Dan Fruehauf <malkodan@gmail.com>
Date   : 2026-09-20T17:09:56+10:00
Stats  : +8/-2 in 3 file(s)
URL    : https://src.fedoraproject.org/rpms/NetworkManager-iodine/c/9bfec9162fc0920389d494b37524a647c5af25ba?branch=f43

Log:
Fix CVE-2026-91837

---
diff --git a/.gitignore b/.gitignore
index eb45597..e54098e 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,3 +1,4 @@
 /network-manager-iodine-0.0.4.tar.gz
 /network-manager-iodine-0.0.5.tar.gz
 /NetworkManager-iodine-1.2.0.tar.xz
+/cve-2026-91837.patch

diff --git a/NetworkManager-iodine.spec b/NetworkManager-iodine.spec
index f3687a3..ccc5beb 100644
--- a/NetworkManager-iodine.spec
+++ b/NetworkManager-iodine.spec
@@ -8,11 +8,12 @@
 Summary: NetworkManager VPN plugin for iodine
 Name: NetworkManager-iodine
 Version: 1.2.0
-Release: 25%{?dist}
+Release: 29%{?dist}
 # Automatically converted from old format: GPLv2+ - review is highly recommended.
 License: GPL-2.0-or-later
 URL: https://honk.sigxcpu.org/piki/projects/network-manager-iodine
 Source0: https://download.gnome.org/sources/NetworkManager-iodine/1.2/%{name}-1.2.0.tar.xz
+Patch0: cve-2026-91837.patch
 
 BuildRequires: make
 BuildRequires: gcc
@@ -89,6 +90,9 @@ mv %{buildroot}%{_sysconfdir}/dbus-1 %{buildroot}%{_datadir}/
 %endif
 
 %changelog
+* Sun Sep 20 2026 Dan Fruehauf <malkodan@gmail.com> - 1.2.0-29
+- Fix CVE-2026-91837
+
 * Wed Jul 23 2025 Fedora Release Engineering <releng@fedoraproject.org> - 1.2.0-25
 - Rebuilt for https://fedoraproject.org/wiki/Fedora_43_Mass_Rebuild
 

diff --git a/sources b/sources
index cca85f4..66368f2 100644
--- a/sources
+++ b/sources
@@ -1 +1,2 @@
-8753cc831435c21796035034fe16dc91  NetworkManager-iodine-1.2.0.tar.xz
+SHA512 (NetworkManager-iodine-1.2.0.tar.xz) = 2a8a55d960aef4a7519fc55a829d2370eb301c66b285cda004df72a2ba0ed09e542e3081427aa7cea086cae24115161a53a35756db42b71db53e2d01fb3d0d95
+SHA512 (cve-2026-91837.patch) = e6971f4c9b1e403b56a3a72488f3d5d8c5b46b1d7083fc2601b074ad97b41a1c0db7f7db0a95ad7ffde590bfeaf5c689a3c66e47a00a3871acc591ba11634ddf