Update to 2.32.4

- Security fix for CVE-2024-47081: .netrc credentials leak via malicious URLs
This commit is contained in:
Miro Hrončok 2025-07-07 12:12:42 +02:00
commit 8607c2fb65
8 changed files with 11 additions and 804 deletions

View file

@ -6,7 +6,7 @@
%bcond extradeps %{undefined rhel}
Name: python-requests
Version: 2.32.3
Version: 2.32.4
Release: %autorelease
Summary: HTTP library, written in Python, for human beings
@ -32,29 +32,6 @@ Patch: support_IPv6_CIDR_in_no_proxy.patch
# when it is ready, or dropped in a release where that is merged
Patch: 0001-Don-t-create-default-SSLContext-if-CA-bundle-isn-t-p.patch
# Add CA constraint to test CA
#
# Otherwise recent versions of OpenSSL reject it as an invalid CA certificate
# (at least once the test certificates are regenerated).
#
# https://github.com/psf/requests/commit/507409661335bd3dd8a7e39f04d07b42e519becc
Patch: https://github.com/psf/requests/commit/507409661335bd3dd8a7e39f04d07b42e519becc.patch
# Regenerate test certificates
# https://github.com/psf/requests/commit/9ebebdef98a6aacfbedcf2ca61ba0eaecc2563f4
Patch: https://github.com/psf/requests/commit/9ebebdef98a6aacfbedcf2ca61ba0eaecc2563f4.patch
# Add key usage extension to test ca.crt
# https://github.com/psf/requests/pull/6924
Patch: https://github.com/psf/requests/pull/6924.patch
# Together, these three patches fix one of the three regressions reported in
# the following issue, and the only one that we see downstream:
#
# Test regressions with urllib3 2.4.0 on Python 3.13
# https://github.com/psf/requests/issues/6934
#
# See also:
#
# https://github.com/urllib3/urllib3/pull/3577#issuecomment-2765190031
BuildArch: noarch
BuildRequires: python%{python3_pkgversion}-devel
%if %{with tests}