import UBI git-lfs-3.6.1-4.el10_1

git-lfs.spec

@@ -1,8 +1,8 @@
 ## START: Set by rpmautospec
-## (rpmautospec version 0.6.5)
+## (rpmautospec version 0.8.1)
 ## RPMAUTOSPEC: autorelease, autochangelog
 %define autorelease(e:s:pb:n) %{?-p:0.}%{lua:
-    release_number = 3;
+    release_number = 4;
     base_release_number = tonumber(rpm.expand("%{?-b*}%{!?-b:1}"));
     print(release_number + base_release_number - 1);
 }%{?-e:.%{-e*}}%{?-s:.%{-s*}}%{!?-n:%{?dist}}
@@ -39,6 +39,15 @@ Source1:        README.Fedora
 # Based on https://github.com/git-lfs/git-lfs/pull/5998
 # Added logic that preserves original behavior of error messages and avoids the format string test failures
 Patch0:         0001-Use-constant-format-string.patch
+# Fixes CVE-2025-26625
+# Backports all the commits from:
+# https://github.com/git-lfs/git-lfs/compare/v3.7.0...v3.7.1
+# With added test functions from:
+# 91fc2280b5ea0c75d178c9fe289b428615c4f5f0
+# 3d8f497ea50ef550d15907bcc91868e608e56c14
+# And changes from:
+# b490f91cfe5c53e67753feec18d62958decd3be9
+Patch1:         git-lfs-3.6.1-cve-2025-26625.patch
 
 # Generated provides by vendor2provides.py
 # https://src.fedoraproject.org/rpms/syncthing/blob/603e4e03a92a7d704d199629dd85304018e8279d/f/vendor2provides.py
@@ -190,6 +199,9 @@ PATH=%{buildroot}%{_bindir}:%{gobuilddir}/bin:$PATH \
 
 %changelog
 ## START: Generated by rpmautospec
+* Mon Dec 01 2025 Ondřej Pohořelský <opohorel@redhat.com> - 3.6.1-4
+- Backport fix for CVE-2025-26625
+
 * Mon Aug 11 2025 Ondřej Pohořelský <opohorel@redhat.com> - 3.6.1-3
 - Use constant format string