Backport upstream commit 1a2fda3 to replace insecure
PRNG-based session identifiers with cryptographically secure
UUIDs in the web display module. The patch replaces
`import random` with `import uuid`, uses `uuid.uuid4().hex`
for generating session IDs, and updates the pipe name prefix
to `urwid_` for consistency with upstream.
CVE: CVE-2026-9323
Upstream patches:
- 1a2fda3470.patch
Resolves: RHEL-212562
This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.
Assisted-by: Ymir
