rpms/python-pip
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Security fix for the bundled urllib3 for CVE-2025-50181

Browse source
This commit is contained in:
Miro Hrončok 2025-09-10 19:11:16 +02:00
commit 32b5b38cb0
2 changed files with 56 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

5
python-pip.spec
View file

@ -107,6 +107,11 @@ Patch: python3.14-file-urls.patch
# https://github.com/sethmlarson/truststore/pull/183
Patch: truststore-pem-path.patch
# Patch for the bundled urllib3 for CVE-2025-50181
# Redirects are not disabled when retries are disabled on PoolManager instantiation
# Upstream fix: https://github.com/urllib3/urllib3/commit/f05b1329126d5be6de501f9d1e3e36738bc08857
Patch: urllib3-CVE-2025-50181.patch
# Remove -s from Python shebang - ensure that packages installed with pip
# to user locations are seen by pip itself
%undefine _py3_shebang_s