rpms/python-OWSLib
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Backport upstream PR#863 (“use only lxml for XML handling”)

Browse source 
- Fixes CVE-2023-27476 https://nvd.nist.gov/vuln/detail/CVE-2023-27476
- Fixes GHSA-8h9c-r582-mggc https://github.com/geopython/OWSLib/security/advisories/GHSA-8h9c-r582-mggc
- Fixes RHBZ#2176417 https://bugzilla.redhat.com/show_bug.cgi?id=2176417
This commit is contained in:
Benjamin A. Beasley 2023-03-08 09:09:29 -05:00
commit 3a8551e706
2 changed files with 244 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

13
python-OWSLib.spec
View file

@ -13,6 +13,13 @@ URL: http://geopython.github.io/OWSLib
%global forgeurl https://github.com/geopython/OWSLib
Source0: %{forgeurl}/archive/%{version}/OWSLib-%{version}.tar.gz
# use only lxml for XML handling
# Backport of PR#863 (https://github.com/geopython/OWSLib/pull/863) to 0.9.2
# Fixes: CVE-2023-27476 https://nvd.nist.gov/vuln/detail/CVE-2023-27476
# GHSA-8h9c-r582-mggc https://github.com/geopython/OWSLib/security/advisories/GHSA-8h9c-r582-mggc
# RHBZ#2176417 https://bugzilla.redhat.com/show_bug.cgi?id=2176417
Patch0: 0001-use-only-lxml-for-XML-handling.patch
BuildArch: noarch
%global common_description %{expand:
@ -35,11 +42,13 @@ BuildRequires: python2-dateutil >= 1.5
BuildRequires: python2-requests >= 1.0
BuildRequires: python2-pytz
BuildRequires: pyproj
BuildRequires: python-lxml
Requires: python2-dateutil >= 1.5
Requires: python2-requests >= 1.0
Requires: python2-pytz
Requires: python2-pyproj
Requires: python-lxml
%description -n python2-OWSLib %{common_description}
@ -58,18 +67,20 @@ BuildRequires: python%{python3_pkgversion}-dateutil >= 1.5
BuildRequires: python%{python3_pkgversion}-requests >= 1.0
BuildRequires: python%{python3_pkgversion}-pytz
BuildRequires: python%{python3_pkgversion}-pyproj
BuildRequires: python%{python3_pkgversion}-lxml
Requires: python%{python3_pkgversion}-dateutil >= 1.5
Requires: python%{python3_pkgversion}-requests >= 1.0
Requires: python%{python3_pkgversion}-pytz
Requires: python%{python3_pkgversion}-pyproj
Requires: python%{python3_pkgversion}-lxml
%description -n python%{python3_pkgversion}-OWSLib %{common_description}
%endif
%prep
%autosetup -n OWSLib-%{version}
%autosetup -n OWSLib-%{version} -p1
rm -rf OWSLib.egg-info
# Remove shebangs from non-script sources. The find-then-modify pattern