From mboxrd@z Thu Jan 1 00:00:00 1970 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 From: Emmanuel Seyman To: git-commits@fedoraproject.org Subject: [rpms/perl-Catalyst-Plugin-Static-Simple] f44: Apply fix for CVE-2026-15743 Date: Sun, 20 Sep 2026 12:32:15 GMT Message-ID: <178990753553.1.8836405445858807168.rpms-perl-Catalyst-Plugin-Static-Simple-56a83c7a9f8f@fedoraproject.org> List-ID: X-Git-Repo: rpms/perl-Catalyst-Plugin-Static-Simple X-Git-Branch: f44 X-Git-Rev: 56a83c7a9f8f875ed32a676685d814c4459f27e2 QSBuZXcgY29tbWl0IGhhcyBiZWVuIHB1c2hlZC4KClJlcG8gICA6IHJwbXMvcGVybC1DYXRhbHlz dC1QbHVnaW4tU3RhdGljLVNpbXBsZQpCcmFuY2ggOiBmNDQKQ29tbWl0IDogNTZhODNjN2E5Zjhm ODc1ZWQzMmE2NzY2ODVkODE0YzQ0NTlmMjdlMgpBdXRob3IgOiBFbW1hbnVlbCBTZXltYW4gPGVt bWFudWVsQHNleW1hbi5mcj4KRGF0ZSAgIDogMjAyNi0wOS0yMFQxNDozMTozOSswMjowMApTdGF0 cyAgOiArMTMyLy01IGluIDIgZmlsZShzKQpVUkwgICAgOiBodHRwczovL3NyYy5mZWRvcmFwcm9q ZWN0Lm9yZy9ycG1zL3BlcmwtQ2F0YWx5c3QtUGx1Z2luLVN0YXRpYy1TaW1wbGUvYy81NmE4M2M3 YTlmOGY4NzVlZDMyYTY3NjY4NWQ4MTRjNDQ1OWYyN2UyP2JyYW5jaD1mNDQKCkxvZzoKQXBwbHkg Zml4IGZvciBDVkUtMjAyNi0xNTc0MwoKLS0tCmRpZmYgLS1naXQgYS9DYXRhbHlzdC1QbHVnaW4t U3RhdGljLVNpbXBsZS1DVkUtMjAyNi0xNTc0My5wYXRjaCBiL0NhdGFseXN0LVBsdWdpbi1TdGF0 aWMtU2ltcGxlLUNWRS0yMDI2LTE1NzQzLnBhdGNoCm5ldyBmaWxlIG1vZGUgMTAwNjQ0CmluZGV4 IDAwMDAwMDAuLjEzODk4OWQKLS0tIC9kZXYvbnVsbAorKysgYi9DYXRhbHlzdC1QbHVnaW4tU3Rh dGljLVNpbXBsZS1DVkUtMjAyNi0xNTc0My5wYXRjaApAQCAtMCwwICsxLDEyMyBAQAorY29tbWl0 IDE3YzAzMWY3ODc2YTdkOGI0YWIxNTZhYzhiZTkyMjAwNDc1NGVmYTUKK0F1dGhvcjogUm9iZXJ0 IFJvdGhlbmJlcmcgPHBlcmxAcmhpem9tbmljLmNvbT4KK0RhdGU6ICAgTW9uIEF1ZyAxNyAwNzo1 ODowOCAyMDI2ICswMTAwCisKKyAgICBBbGxvdyBDYWNoZS1Db250cm9sIHRvIGJlIGNvbmZpZ3Vy ZWQsIGFuZCBmaXggdGhlIEV4cGlyZXMgaGVhZGVyCisgICAgCisgICAgVGhlIENhY2hlLUNvbnRy b2wgaGVhZGVyIHdhcyBhbHdheXMgc2V0IHRvIHB1YmxpYywgd2l0aCBubyBtZWFucyBvZgorICAg IG92ZXJyaWRpbmcgaXQuIChDVkUtMjAyNi0xNTc0MykKKyAgICAKKyAgICBBbiBleHBpcmVzIGhl YWRlciBvZiAwIHdhcyBpZ25vcmVkLgorICAgIAorICAgIFRoaXMgY2hhbmdlIGFsbG93cyB0aGUg Q2FjaGUtQ29udHJvbCBoZWFkZXIgdG8gYmUgb3ZlcnJpZGRlbiwgYW5kIHRoZQorICAgIEV4cGly ZXMgaGVhZGVyIHRvIGJlIHNldCB0byAwLgorICAgIAorICAgIE5vdGU6IHRoaXMgcGF0Y2ggd2Fz IG9yaWdpbmFsbHkgd3JpdHRlbiBieSBDbGF1ZGUgT3B1cyA1IGJ1dCB3YXMKKyAgICBtb2RpZmll ZCBieSBSUldPIHRvIGtlZXAgdGhlIGRlZmF1bHQgQ2FjaGUtQ29udHJvbCBhcyAicHVibGljIiwg dG8KKyAgICBzdXBwb3J0IGNvbmZpZ3VyaW5nIHRoZSBkZWZhdWx0IENhY2hlLUNvbnRyb2wsIGFu ZCB0byBzaW1wbGlmeSB0aGUgbG9naWMKKyAgICBmb3IgaGFuZGxpbmcgdGhlIGNvbmZpZ3VyZWQg RXhwaXJlcyBoZWFkZXIuICBSUldPIGFsc28gYWRkZWQKKyAgICBkb2N1bWVudGF0aW9uLgorICAg IAorICAgIENvLUF1dGhvcmVkLUJ5OiBDbGF1ZGUgT3B1cyA1ICgxTSBjb250ZXh0KSA8bm9yZXBs eUBhbnRocm9waWMuY29tPgorICAgIAorICAgIFNpZ25lZC1vZmYtYnk6IFJvYmVydCBSb3RoZW5i ZXJnIDxwZXJsQHJoaXpvbW5pYy5jb20+CisKK2RpZmYgLS1naXQgYS9saWIvQ2F0YWx5c3QvUGx1 Z2luL1N0YXRpYy9TaW1wbGUucG0gYi9saWIvQ2F0YWx5c3QvUGx1Z2luL1N0YXRpYy9TaW1wbGUu cG0KK2luZGV4IGQ4ZWU5YzMuLmU2NTdjYTQgMTAwNzU1CistLS0gYS9saWIvQ2F0YWx5c3QvUGx1 Z2luL1N0YXRpYy9TaW1wbGUucG0KKysrKyBiL2xpYi9DYXRhbHlzdC9QbHVnaW4vU3RhdGljL1Np bXBsZS5wbQorQEAgLTE5OCwxOSArMTk4LDMyIEBAIHN1YiBfc2VydmVfc3RhdGljIHsKKyAgICAg bXkgJGNvbmZpZyA9ICRjLT5jb25maWctPnsnUGx1Z2luOjpTdGF0aWM6OlNpbXBsZSd9OworIAor ICAgICBteSAkZnVsbF9wYXRoID0gc2hpZnQgfHwgJGMtPl9zdGF0aWNfZmlsZTsKKysgICAgbXkg JHJlcXVlc3RlZF9jYWNoZV9jb250cm9sID0gc2hpZnQ7CisgICAgIG15ICR0eXBlICAgICAgPSAk Yy0+X2V4dF90b190eXBlKCAkZnVsbF9wYXRoICk7CisgICAgIG15ICRzdGF0ICAgICAgPSBzdGF0 ICRmdWxsX3BhdGg7CisgCisgICAgICRjLT5yZXMtPmhlYWRlcnMtPmNvbnRlbnRfdHlwZSggJHR5 cGUgKTsKKyAgICAgJGMtPnJlcy0+aGVhZGVycy0+Y29udGVudF9sZW5ndGgoICRzdGF0LT5zaXpl ICk7CisgICAgICRjLT5yZXMtPmhlYWRlcnMtPmxhc3RfbW9kaWZpZWQoICRzdGF0LT5tdGltZSAp OworLSAgICAjIFRlbGwgRmlyZWZveCAmIGZyaWVuZHMgaXRzIE9LIHRvIGNhY2hlLCBldmVuIG92 ZXIgU1NMOgorLSAgICAkYy0+cmVzLT5oZWFkZXJzLT5oZWFkZXIoJ0NhY2hlLWNvbnRyb2wnID0+ ICdwdWJsaWMnKTsKKy0gICAgIyBPcHRpb25hbGx5LCBzZXQgYSBmaXhlZCBleHBpcnkgdGltZToK Ky0gICAgaWYgKCRjb25maWctPntleHBpcmVzfSkgeworLSAgICAgICAgJGMtPnJlcy0+aGVhZGVy cy0+ZXhwaXJlcyh0aW1lKCkgKyAkY29uZmlnLT57ZXhwaXJlc30pOworKworKyAgICBteSAkY2Fj aGVfY29udHJvbCA9ICRjLT5yZXMtPmhlYWRlcnMtPmhlYWRlcignQ2FjaGUtQ29udHJvbCcpCisr ICAgICAgICB8fCAkcmVxdWVzdGVkX2NhY2hlX2NvbnRyb2wKKysgICAgICAgIHx8ICRjb25maWct PntjYWNoZV9jb250cm9sfQorKyAgICAgICAgfHwgJ3B1YmxpYyc7CisrCisrICAgIGlmICggZGVm aW5lZCAkY29uZmlnLT57ZXhwaXJlc30gKSB7CisrCisrICAgICAgICBpZiAoICRjb25maWctPntl eHBpcmVzfSA8PSAwICkgeworKyAgICAgICAgICAgICRjYWNoZV9jb250cm9sID0gJ25vLXN0b3Jl JzsKKysgICAgICAgICAgICAkYy0+cmVzLT5oZWFkZXJzLT5leHBpcmVzKDApOworKyAgICAgICAg fQorKyAgICAgICAgZWxzZSB7CisrICAgICAgICAgICAgJGMtPnJlcy0+aGVhZGVycy0+ZXhwaXJl cyh0aW1lKCkgKyAkY29uZmlnLT57ZXhwaXJlc30pOworKyAgICAgICAgfQorICAgICB9CisgCisr ICAgICRjLT5yZXMtPmhlYWRlcnMtPmhlYWRlcignQ2FjaGUtQ29udHJvbCcgPT4gJGNhY2hlX2Nv bnRyb2wpOworKworICAgICBteSAkZmggPSBJTzo6RmlsZS0+bmV3KCAkZnVsbF9wYXRoLCAncicg KTsKKyAgICAgaWYgKCBkZWZpbmVkICRmaCApIHsKKyAgICAgICAgIGJpbm1vZGUgJGZoOworQEAg LTIyNSw3ICsyMzgsNyBAQCBzdWIgX3NlcnZlX3N0YXRpYyB7CisgfQorIAorIHN1YiBzZXJ2ZV9z dGF0aWNfZmlsZSB7CistICAgIG15ICggJGMsICRmdWxsX3BhdGggKSA9IEBfOworKyAgICBteSAo ICRjLCAkZnVsbF9wYXRoLCAkY2FjaGVfY29udHJvbCApID0gQF87CisgCisgICAgIG15ICRjb25m aWcgPSAkYy0+Y29uZmlnLT57J1BsdWdpbjo6U3RhdGljOjpTaW1wbGUnfTsKKyAKK0BAIC0yNDEs NyArMjU0LDcgQEAgc3ViIHNlcnZlX3N0YXRpY19maWxlIHsKKyAgICAgICAgIHJldHVybjsKKyAg ICAgfQorIAorLSAgICAkYy0+X3NlcnZlX3N0YXRpYyggJGZ1bGxfcGF0aCApOworKyAgICAkYy0+ X3NlcnZlX3N0YXRpYyggJGZ1bGxfcGF0aCwgJGNhY2hlX2NvbnRyb2wgKTsKKyB9CisgCisgIyBs b29rcyB1cCB0aGUgY29ycmVjdCBNSU1FIHR5cGUgZm9yIHRoZSBjdXJyZW50IGZpbGUgZXh0ZW5z aW9uCitAQCAtNDgwLDYgKzQ5MywxNyBAQCBtb2R1bGUsIHlvdSBtYXkgZW50ZXIgeW91ciBvd24g ZXh0ZW5zaW9uIHRvIE1JTUUgdHlwZSBtYXBwaW5nLgorICAgICAgICAgfSwKKyAgICAgKTsKKyAK Kys9aGVhZDIgQ29udHJvbGxpbmcgY2FjaGluZyB3aXRoIHRoZSBDYWNoZS1Db250cm9sIGhlYWRl cgorKworK0J5IGRlZmF1bHQsIHRoZSBDYWNoZS1Db250cm9sIGhlYWRlciB3aWxsIGJlIHNldCB0 byAicHVibGljIi4KKytUaGF0IGNhbiBiZSBjaGFuZ2VkOgorKworKyAgICBNeUFwcC0+Y29uZmln KAorKyAgICAgICAgJ1BsdWdpbjo6U3RhdGljOjpTaW1wbGUnID0+IHsKKysgICAgICAgICAgICBj YWNoZV9jb250cm9sID0+ICdwcml2YXRlJywKKysgICAgICAgIH0sCisrICAgICk7CisrCisgPWhl YWQyIENvbnRyb2xsaW5nIGNhY2hpbmcgd2l0aCBFeHBpcmVzIGhlYWRlcgorIAorIFRoZSBmaWxl cyBzZXJ2ZWQgYnkgU3RhdGljOjpTaW1wbGUgd2lsbCBoYXZlIGEgTGFzdC1Nb2RpZmllZCBoZWFk ZXIgc2V0LAorQEAgLTU1Nyw3ICs1ODEsNyBAQCBMPENhdGFseXN0OjpFbmdpbmU6OkFwYWNoZTI6 Ok1QMjA+LgorIAorID1oZWFkMSBQVUJMSUMgTUVUSE9EUworIAorLT1oZWFkMiBzZXJ2ZV9zdGF0 aWNfZmlsZSAkZmlsZV9wYXRoCisrPWhlYWQyIHNlcnZlX3N0YXRpY19maWxlICRmaWxlX3BhdGgg JGNhY2hlX2NvbnRyb2wKKyAKKyBXaWxsIHNlcnZlIHRoZSBmaWxlIGxvY2F0ZWQgaW4gJGZpbGVf cGF0aCBzdGF0aWNhbGx5LiBUaGlzIGlzIHVzZWZ1bCB3aGVuCisgeW91IG5lZWQgdG8gIGF1dG9n ZW5lcmF0ZSB0aGVtIGlmIHRoZXkgZG9uJ3QgZXhpc3QsIG9yIHRoZXkgYXJlIHN0b3JlZCBpbiBh IG1vZGVsLgorQEAgLTU3MCw2ICs1OTQsMTEgQEAgeW91IG5lZWQgdG8gIGF1dG9nZW5lcmF0ZSB0 aGVtIGlmIHRoZXkgZG9uJ3QgZXhpc3QsIG9yIHRoZXkgYXJlIHN0b3JlZCBpbiBhIG1vZGUKKyAg ICAgICAgICRjLT5zZXJ2ZV9zdGF0aWNfZmlsZSgkZmlsZV9wYXRoKTsKKyAgICAgfQorIAorK1Ro ZSAkY2FjaGVfY29udHJvbCBvcHRpb24gd2lsbCBkZWZhdWx0IHRvIHdoYXQgaXMgY29uZmlndXJl ZCAob3IgdG8KKysicHVibGljIiBpZiBub3QgY29uZmlndXJlZCkuICBJdCBjYW4gYmUgb3ZlcnJp ZGRlbiBmb3Igc3BlY2lmaWMgZmlsZXM6CisrCisrICAgICRjLT5zZXJ2ZV9zdGF0aWNfZmlsZSgg JGZpbGVfcGF0aCwgInByaXZhdGUiICk7CisrCisgPWhlYWQxIElOVEVSTkFMIEVYVEVOREVEIE1F VEhPRFMKKyAKKyBTdGF0aWM6OlNpbXBsZSBleHRlbmRzIHRoZSBmb2xsb3dpbmcgc3RlcHMgaW4g dGhlIENhdGFseXN0IHByb2Nlc3MuCgpkaWZmIC0tZ2l0IGEvcGVybC1DYXRhbHlzdC1QbHVnaW4t U3RhdGljLVNpbXBsZS5zcGVjIGIvcGVybC1DYXRhbHlzdC1QbHVnaW4tU3RhdGljLVNpbXBsZS5z cGVjCmluZGV4IGYzMzU2NjguLjk0MzBjZWMgMTAwNjQ0Ci0tLSBhL3BlcmwtQ2F0YWx5c3QtUGx1 Z2luLVN0YXRpYy1TaW1wbGUuc3BlYworKysgYi9wZXJsLUNhdGFseXN0LVBsdWdpbi1TdGF0aWMt U2ltcGxlLnNwZWMKQEAgLTEsMTIgKzEsMTIgQEAKIE5hbWU6ICAgICAgICAgICBwZXJsLUNhdGFs eXN0LVBsdWdpbi1TdGF0aWMtU2ltcGxlCiBWZXJzaW9uOiAgICAgICAgMC4zOAotUmVsZWFzZTog ICAgICAgIDElez9kaXN0fQorUmVsZWFzZTogICAgICAgIDIlez9kaXN0fQogU3VtbWFyeTogICAg ICAgIE1ha2Ugc2VydmluZyBzdGF0aWMgcGFnZXMgcGFpbmxlc3MKLSMgQXV0b21hdGljYWxseSBj b252ZXJ0ZWQgZnJvbSBvbGQgZm9ybWF0OiBHUEwrIG9yIEFydGlzdGljIC0gcmV2aWV3IGlzIGhp Z2hseSByZWNvbW1lbmRlZC4KIExpY2Vuc2U6ICAgICAgICBHUEwtMS4wLW9yLWxhdGVyIE9SIEFy dGlzdGljLTEuMC1QZXJsCiAKLVVSTDogICAgICAgICAgICBodHRwczovL21ldGFjcGFuLm9yZy9y ZWxlYXNlL0NhdGFseXN0LVBsdWdpbi1TdGF0aWMtU2ltcGxlCitVUkw6ICAgICAgICAgICAgaHR0 cHM6Ly9tZXRhY3Bhbi5vcmcvZGlzdC9DYXRhbHlzdC1QbHVnaW4tU3RhdGljLVNpbXBsZQogU291 cmNlMDogICAgICAgIGh0dHBzOi8vY3Bhbi5tZXRhY3Bhbi5vcmcvYXV0aG9ycy9pZC9FL0VUL0VU SEVSL0NhdGFseXN0LVBsdWdpbi1TdGF0aWMtU2ltcGxlLSV7dmVyc2lvbn0udGFyLmd6CitQYXRj aDA6ICAgICAgICAgQ2F0YWx5c3QtUGx1Z2luLVN0YXRpYy1TaW1wbGUtQ1ZFLTIwMjYtMTU3NDMu cGF0Y2gKIEJ1aWxkQXJjaDogICAgICBub2FyY2gKIAogQnVpbGRSZXF1aXJlczogIGNvcmV1dGls cwpAQCAtNTUsNiArNTUsNyBAQCBzaW5nbGUgbGluZSBvZiBjb2RlIGZyb20geW91LgogCiAlcHJl cAogJXNldHVwIC1xIC1uIENhdGFseXN0LVBsdWdpbi1TdGF0aWMtU2ltcGxlLSV7dmVyc2lvbn0K KyVwYXRjaCAtUCAwIC1wMQogCiBmb3IgZmlsZSBpbiB0LzA3bWltZV90eXBlcy50IHQvbGliL0lu Y1Rlc3RBcHAvQ29udHJvbGxlci9Sb290LnBtIFwKICAgICAgICAgICAgIHQvbGliL1Rlc3RBcHAu cG0gdC9saWIvVGVzdEFwcC9Db250cm9sbGVyL1Jvb3QucG07IGRvCkBAIC03NSwxMCArNzYsMTMg QEAgVEVTVF9QT0Q9MSAle21ha2VfYnVpbGR9IHRlc3QKIAogJWZpbGVzCiAlZG9jIENoYW5nZXMg dC8KLSV7cGVybF92ZW5kb3JsaWJ9LyoKLSV7X21hbmRpcn0vbWFuMy8qCisle3BlcmxfdmVuZG9y bGlifS9DYXRhbHlzdCoKKyV7X21hbmRpcn0vbWFuMy9DYXRhbHlzdCoKIAogJWNoYW5nZWxvZwor KiBTdW4gU2VwIDIwIDIwMjYgRW1tYW51ZWwgU2V5bWFuIDxlbW1hbnVlbEBzZXltYW4uZnI+IC0g MC4zOC0yCistIEFwcGx5IGZpeCBmb3IgQ1ZFLTIwMjYtMTU3NDMKKwogKiBTdW4gSnVsIDE5IDIw MjYgRW1tYW51ZWwgU2V5bWFuIDxlbW1hbnVlbEBzZXltYW4uZnI+IC0gMC4zOC0xCiAtIFVwZGF0 ZSB0byAwLjM4CiAK