From 0f2b4adbb41f39b187b7297797df7925ae214f28 Mon Sep 17 00:00:00 2001 From: CBL-Mariner Servicing Account Date: Mon, 11 May 2026 07:52:37 +0000 Subject: [PATCH 1/2] Upgrade python-mistune to 3.2.1 CVE-2026-33079 --- SPECS/python-mistune/python-mistune.signatures.json | 4 ++-- SPECS/python-mistune/python-mistune.spec | 5 ++++- cgmanifest.json | 4 ++-- 3 files changed, 8 insertions(+), 5 deletions(-) diff --git a/SPECS/python-mistune/python-mistune.signatures.json b/SPECS/python-mistune/python-mistune.signatures.json index 990898c82b3..280f2fb1fd5 100644 --- a/SPECS/python-mistune/python-mistune.signatures.json +++ b/SPECS/python-mistune/python-mistune.signatures.json @@ -1,5 +1,5 @@ { "Signatures": { - "mistune-3.0.2.tar.gz": "fc7f93ded930c92394ef2cb6f04a8aabab4117a91449e72dcc8dfa646a508be8" + "mistune-3.2.1.tar.gz": "7c8e5501d38bac1582e067e46c8343f17d57ea1aaa735823f3aba1fd59c88a28" } -} \ No newline at end of file +} diff --git a/SPECS/python-mistune/python-mistune.spec b/SPECS/python-mistune/python-mistune.spec index 6035dbae5db..54467e2bd0f 100644 --- a/SPECS/python-mistune/python-mistune.spec +++ b/SPECS/python-mistune/python-mistune.spec @@ -1,6 +1,6 @@ Summary: The fastest markdown parser in pure Python. Name: python-mistune -Version: 3.0.2 +Version: 3.2.1 Release: 1%{?dist} License: BSD Vendor: Microsoft Corporation @@ -45,6 +45,9 @@ The fastest markdown parser in pure Python with renderer features, inspired by m %{python3_sitelib}/* %changelog +* Mon May 11 2026 CBL-Mariner Servicing Account - 3.2.1-1 +- Auto-upgrade to 3.2.1 - CVE-2026-33079 + * Mon Feb 05 2024 CBL-Mariner Servicing Account - 3.0.2-1 - Auto-upgrade to 3.0.2 - 3.0 package upgrade diff --git a/cgmanifest.json b/cgmanifest.json index f69503049f5..4eaf37bccc2 100644 --- a/cgmanifest.json +++ b/cgmanifest.json @@ -23773,8 +23773,8 @@ "type": "other", "other": { "name": "python-mistune", - "version": "3.0.2", - "downloadUrl": "https://files.pythonhosted.org/packages/source/m/mistune/mistune-3.0.2.tar.gz" + "version": "3.2.1", + "downloadUrl": "https://files.pythonhosted.org/packages/ca/84/620cc3f7e3adf6f5067e10f4dbae71295d8f9e16d5d3f9ef97c40f2f592c/mistune-3.2.1.tar.gz" } } }, From 8b61c06172113e9aca0dabcf46ae2562f4b72c2b Mon Sep 17 00:00:00 2001 From: Kanishk Bansal <103916909+Kanishk-Bansal@users.noreply.github.com> Date: Tue, 12 May 2026 14:58:23 +0530 Subject: [PATCH 2/2] Update download URL for python-mistune package --- cgmanifest.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cgmanifest.json b/cgmanifest.json index 4eaf37bccc2..ebb8e916a1f 100644 --- a/cgmanifest.json +++ b/cgmanifest.json @@ -23774,7 +23774,7 @@ "other": { "name": "python-mistune", "version": "3.2.1", - "downloadUrl": "https://files.pythonhosted.org/packages/ca/84/620cc3f7e3adf6f5067e10f4dbae71295d8f9e16d5d3f9ef97c40f2f592c/mistune-3.2.1.tar.gz" + "downloadUrl": "https://files.pythonhosted.org/packages/source/m/mistune/mistune-3.2.1.tar.gz" } } },