From ea08a1eb2c83a81b114a3d373f99656c5daccdab Mon Sep 17 00:00:00 2001 From: Oyvind Albrigtsen Date: Mon, 8 Jun 2026 14:20:32 +0200 Subject: [PATCH] - bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 Resolves: RHEL-182311 --- fence-agents.spec | 10 +++++++--- sources | 2 +- 2 files changed, 8 insertions(+), 4 deletions(-) diff --git a/fence-agents.spec b/fence-agents.spec index 69715a2..255541a 100644 --- a/fence-agents.spec +++ b/fence-agents.spec @@ -47,7 +47,7 @@ Name: fence-agents Summary: Set of unified programs capable of host isolation ("fencing") Version: 4.10.0 -Release: 113%{?alphatag:.%{alphatag}}%{?dist} +Release: 114%{?alphatag:.%{alphatag}}%{?dist} License: GPLv2+ and LGPLv2+ URL: https://github.com/ClusterLabs/fence-agents Source0: https://fedorahosted.org/releases/f/e/fence-agents/%{name}-%{version}.tar.gz @@ -95,7 +95,7 @@ Source1407: isodate-0.6.1.tar.gz Source1408: msrest-0.7.1.zip Source1409: msrestazure-0.6.4.post1.tar.gz Source1410: %{oauthlib}-%{oauthlib_version}.tar.gz -Source1411: pyjwt-2.12.1.tar.gz +Source1411: pyjwt-2.13.0.tar.gz Source1412: requests_oauthlib-1.3.0-py2.py3-none-any.whl Source1413: msal-1.36.0.tar.gz Source1414: msal_extensions-1.3.1.tar.gz @@ -650,7 +650,7 @@ Provides: bundled(python-msrest) = 0.7.1 Provides: bundled(python-msrestazure) = 0.6.4.post1 Provides: bundled(python-%{oauthlib}) = %{oauthlib_version} Provides: bundled(python-portalocker) = 2.5.1 -Provides: bundled(python-PyJWT) = 2.12.1 +Provides: bundled(python-PyJWT) = 2.13.0 Provides: bundled(python-requests-oauthlib) = 1.3.0 Provides: bundled(python-typing-extensions) = 4.12.2 # google @@ -1518,6 +1518,10 @@ are located on corosync cluster nodes. %endif %changelog +* Mon Jun 8 2026 Oyvind Albrigtsen - 4.10.0-114 +- bundled PyJWT: upgrade to v2.13.0 to fix CVE-2026-48526 + Resolves: RHEL-182311 + * Thu May 21 2026 Oyvind Albrigtsen - 4.10.0-113 - fence_kubevirt: report Succeeded and Failed as OFF Resolves: RHEL-146216 diff --git a/sources b/sources index e7aa587..095705a 100644 --- a/sources +++ b/sources @@ -30,7 +30,7 @@ SHA512 (isodate-0.6.1.tar.gz) = 437e420ec7ee68dedded825f30d3289eeb0da526208443e5 SHA512 (msrest-0.7.1.zip) = 430e982adf89c79356e59182587c62ecb935e983f2e339738b54c48d0cd3cfa66ab48aad52d342b3efe5938d5e02693f24d603a4d637e3e5818bac6d03cc19db SHA512 (msrestazure-0.6.4.post1.tar.gz) = 8fc4eba2520cecae612e9f1ab279662a1b531c73da3ee9af5abf59bc478b4edbf7ce0ea17d4491ff498d17269c31a82a9327eea4d1f1c704a4a7f434ef284acb SHA512 (oauthlib-3.2.2.tar.gz) = c147b96e0ab0d1a8845f525e80831cfd04495134dd1f17fd95eac62f3a95c91e6dca9d38e34206537d77f3c12dd5b553252239318ba39546979c350e96536b8b -SHA512 (pyjwt-2.12.1.tar.gz) = ad1e925b9aa39017bd83863233b39de06a919daed664d5835e58def47f6fb4435fab057a37a5fa8a7543f691f5fc9f82e6d879ef0ad60960f982a214b305078a +SHA512 (pyjwt-2.13.0.tar.gz) = e12fcc5171e48ef74f4384287c05d94367b7add4844066b650abd6c82534e557959f59ffce9bd6d4dc6970b99b7357be5bb652d0546937b3a64dfd329b63b561 SHA512 (requests_oauthlib-1.3.0-py2.py3-none-any.whl) = 17d5e66d174e57ef1dae451a20bce215a3cc3d7ab1a5b922d4a66cb49b497c9a0799bd90b5a378648335daee7cf80f843f065d90410bfa791f989f76300a02d7 SHA512 (msal-1.36.0.tar.gz) = 228617a9bb1465595867f8429d2127e03ba395f3054ebc78ba5805a4712c6776b2db7e2496ef2b2675173e54e4ff2c8f39b4119ed1d91138f61b77bc67b39025 SHA512 (msal_extensions-1.3.1.tar.gz) = ea0409a7ff3e3a885203b35efbbdd674a08baadfdf2f80e96d849a4949197ef9702a6f051595c1346eab5c8f178254b79fe60180e17888fbc8bb73e8d4c93589