Backport fixes for CVE-2024-49768 and CVE-2024-49769

This commit is contained in:
Sandro Mani 2024-11-19 08:18:55 +01:00
commit 41df591a30
4 changed files with 466 additions and 1 deletions

View file

@ -6,7 +6,7 @@
Name: mingw-python-%{mod_name}
Summary: MinGW Windows Python %{pypi_name} library
Version: 2.1.2
Release: 6%{?dist}
Release: 7%{?dist}
BuildArch: noarch
License: ZPL-2.1
@ -18,6 +18,12 @@ URL: https://github.com/Pylons/waitress
Source0: waitress-2.1.2-nodocs.tar.xz
Source1: waitress-tarball-nodocs.sh
# Backport fix for CVE-2024-49769
Patch0: https://github.com/Pylons/waitress/commit/6943dcf556610ece2ff3cddb39e59a05ef110661.patch
# Backport fixes for CVE-2024-49768
Patch1: https://github.com/Pylons/waitress/commit/f4ba1c260cf17156b582c6252496213ddc96b591.patch
Patch2: https://github.com/Pylons/waitress/commit/1ae4e894c9f76543bee06584001583fc6fa8c95c.patch
BuildRequires: mingw32-filesystem >= 95
BuildRequires: mingw32-python3
BuildRequires: mingw32-python3-build
@ -73,6 +79,9 @@ MinGW Windows Python3 %{pypi_name} library.
%changelog
* Tue Nov 19 2024 Sandro Mani <manisandro@gmail.com> - 2.1.2-7
- Backport fixes for CVE-2024-49768 and CVE-2024-49769
* Thu Jan 25 2024 Fedora Release Engineering <releng@fedoraproject.org> - 2.1.2-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_40_Mass_Rebuild