rpms/python-urwid
7
0
Fork 0
Code Issues Pull Requests Releases Activity
Console user interface library
3 Commits 8 Branches 8 Tags 116 KiB
d2e82d2f8c
Go to file
RHEL Packaging Agent d2e82d2f8c Fix CVE-2026-9323: use secure random session identifiers in web display 
Backport upstream commit 1a2fda3 to replace insecure
PRNG-based session identifiers with cryptographically secure
UUIDs in the web display module. The patch replaces
`import random` with `import uuid`, uses `uuid.uuid4().hex`
for generating session IDs, and updates the pipe name prefix
to `urwid_` for consistency with upstream.

CVE: CVE-2026-9323
Upstream patches:
 - 1a2fda3470.patch
Resolves: RHEL-212562

This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.

Assisted-by: Ymir
2026-07-21 08:34:03 +00:00
.gitignore Auto sync2gitlab import of python-urwid-1.3.1-4.el8.src.rpm 2022-05-26 13:47:02 -04:00
python-urwid-1.3.1-CVE-2026-9323.patch Fix CVE-2026-9323: use secure random session identifiers in web display 2026-07-21 08:34:03 +00:00
python-urwid-test_event_loops.patch Auto sync2gitlab import of python-urwid-1.3.1-4.el8.src.rpm 2022-05-26 13:47:02 -04:00
python-urwid-test_vterm-EINTR.patch Auto sync2gitlab import of python-urwid-1.3.1-4.el8.src.rpm 2022-05-26 13:47:02 -04:00
python-urwid-test_vterm-NUL.patch Auto sync2gitlab import of python-urwid-1.3.1-4.el8.src.rpm 2022-05-26 13:47:02 -04:00
python-urwid.spec Fix CVE-2026-9323: use secure random session identifiers in web display 2026-07-21 08:34:03 +00:00
sources Auto sync2gitlab import of python-urwid-1.3.1-4.el8.src.rpm 2022-05-26 13:47:02 -04:00