Update to 2.32.4
- Security fix for CVE-2024-47081: .netrc credentials leak via malicious URLs
This commit is contained in:
parent
e4b73fd858
commit
8607c2fb65
8 changed files with 11 additions and 804 deletions
|
|
@ -6,7 +6,7 @@
|
|||
%bcond extradeps %{undefined rhel}
|
||||
|
||||
Name: python-requests
|
||||
Version: 2.32.3
|
||||
Version: 2.32.4
|
||||
Release: %autorelease
|
||||
Summary: HTTP library, written in Python, for human beings
|
||||
|
||||
|
|
@ -32,29 +32,6 @@ Patch: support_IPv6_CIDR_in_no_proxy.patch
|
|||
# when it is ready, or dropped in a release where that is merged
|
||||
Patch: 0001-Don-t-create-default-SSLContext-if-CA-bundle-isn-t-p.patch
|
||||
|
||||
# Add CA constraint to test CA
|
||||
#
|
||||
# Otherwise recent versions of OpenSSL reject it as an invalid CA certificate
|
||||
# (at least once the test certificates are regenerated).
|
||||
#
|
||||
# https://github.com/psf/requests/commit/507409661335bd3dd8a7e39f04d07b42e519becc
|
||||
Patch: https://github.com/psf/requests/commit/507409661335bd3dd8a7e39f04d07b42e519becc.patch
|
||||
# Regenerate test certificates
|
||||
# https://github.com/psf/requests/commit/9ebebdef98a6aacfbedcf2ca61ba0eaecc2563f4
|
||||
Patch: https://github.com/psf/requests/commit/9ebebdef98a6aacfbedcf2ca61ba0eaecc2563f4.patch
|
||||
# Add key usage extension to test ca.crt
|
||||
# https://github.com/psf/requests/pull/6924
|
||||
Patch: https://github.com/psf/requests/pull/6924.patch
|
||||
# Together, these three patches fix one of the three regressions reported in
|
||||
# the following issue, and the only one that we see downstream:
|
||||
#
|
||||
# Test regressions with urllib3 2.4.0 on Python 3.13
|
||||
# https://github.com/psf/requests/issues/6934
|
||||
#
|
||||
# See also:
|
||||
#
|
||||
# https://github.com/urllib3/urllib3/pull/3577#issuecomment-2765190031
|
||||
|
||||
BuildArch: noarch
|
||||
BuildRequires: python%{python3_pkgversion}-devel
|
||||
%if %{with tests}
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue