From 6a446286e4c22fc858067fcd8c0ddea0d50c0d61 Mon Sep 17 00:00:00 2001 From: CBL-Mariner Servicing Account Date: Wed, 26 Aug 2026 20:10:51 +0000 Subject: [PATCH 1/2] Upgrade python-mistune to 3.3.4 for CVE-2026-76098 --- SPECS/python-mistune/python-mistune.signatures.json | 2 +- SPECS/python-mistune/python-mistune.spec | 5 ++++- cgmanifest.json | 4 ++-- 3 files changed, 7 insertions(+), 4 deletions(-) diff --git a/SPECS/python-mistune/python-mistune.signatures.json b/SPECS/python-mistune/python-mistune.signatures.json index b0f62289d43..b836198d5a2 100644 --- a/SPECS/python-mistune/python-mistune.signatures.json +++ b/SPECS/python-mistune/python-mistune.signatures.json @@ -1,5 +1,5 @@ { "Signatures": { - "mistune-3.3.0.tar.gz": "3074ec4c61b384abe725128e4dcbb483f5a09cc4632012505cdee655d3a113b9" + "mistune-3.3.4.tar.gz": "58b5c96d6fcb61190dfe5fae498d2b2065f99cf61e9649418fd54cf1ada86dfe" } } diff --git a/SPECS/python-mistune/python-mistune.spec b/SPECS/python-mistune/python-mistune.spec index bae6dd22497..e37cd05d446 100644 --- a/SPECS/python-mistune/python-mistune.spec +++ b/SPECS/python-mistune/python-mistune.spec @@ -1,6 +1,6 @@ Summary: The fastest markdown parser in pure Python. Name: python-mistune -Version: 3.3.0 +Version: 3.3.4 Release: 1%{?dist} License: BSD Vendor: Microsoft Corporation @@ -46,6 +46,9 @@ The fastest markdown parser in pure Python with renderer features, inspired by m %{python3_sitelib}/* %changelog +* Wed Aug 26 2026 CBL-Mariner Servicing Account - 3.3.4-1 +- Auto-upgrade to 3.3.4 - for CVE-2026-76098 + * Sun Jun 28 2026 CBL-Mariner Servicing Account - 3.3.0-1 - Auto-upgrade to 3.3.0 - for CVE-2026-49851 diff --git a/cgmanifest.json b/cgmanifest.json index 97424c2930c..f445b20e526 100644 --- a/cgmanifest.json +++ b/cgmanifest.json @@ -23863,8 +23863,8 @@ "type": "other", "other": { "name": "python-mistune", - "version": "3.3.0", - "downloadUrl": "https://files.pythonhosted.org/packages/source/m/mistune/mistune-3.3.0.tar.gz" + "version": "3.3.4", + "downloadUrl": "https://files.pythonhosted.org/packages/7b/92/328a294a6de83bacb95bed01f04e0eaff4e3616ee359fc821a5dfc539b02/mistune-3.3.4.tar.gz" } } }, From d624e2232d9fb625463455c127f7c477d1e41377 Mon Sep 17 00:00:00 2001 From: Kanishk Bansal <103916909+Kanishk-Bansal@users.noreply.github.com> Date: Thu, 27 Aug 2026 02:02:32 +0530 Subject: [PATCH 2/2] Update cgmanifest.json --- cgmanifest.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cgmanifest.json b/cgmanifest.json index f445b20e526..10a6432ae12 100644 --- a/cgmanifest.json +++ b/cgmanifest.json @@ -23864,7 +23864,7 @@ "other": { "name": "python-mistune", "version": "3.3.4", - "downloadUrl": "https://files.pythonhosted.org/packages/7b/92/328a294a6de83bacb95bed01f04e0eaff4e3616ee359fc821a5dfc539b02/mistune-3.3.4.tar.gz" + "downloadUrl": "https://files.pythonhosted.org/packages/source/m/mistune/mistune-3.3.4.tar.gz" } } },