rpms/python-pip
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Security fix for the bundled urllib3 for CVE-2025-50181

Browse source
This commit is contained in:
Miro Hrončok 2025-09-10 19:11:16 +02:00
commit 4a2bfe6c57
2 changed files with 56 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

5
python-pip.spec
View file

@ -68,6 +68,11 @@ Patch: dummy-certifi.patch
# this warning is juts moot. Also, the warning breaks CPython test suite.
Patch: nowarn-pip._internal.main.patch
# Patch for the bundled urllib3 for CVE-2025-50181
# Redirects are not disabled when retries are disabled on PoolManager instantiation
# Upstream fix: https://github.com/urllib3/urllib3/commit/f05b1329126d5be6de501f9d1e3e36738bc08857
Patch: urllib3-CVE-2025-50181.patch
# Remove -s from Python shebang - ensure that packages installed with pip
# to user locations are seen by pip itself
%undefine _py3_shebang_s