rpms/python3.11
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Security fix for CVE-2024-8088

Browse source 
Fixes: rhbz#2307460
This commit is contained in:
Charalampos Stratakis 2024-08-23 15:08:45 +02:00
commit 73a97226f5
2 changed files with 137 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

10
python3.11.spec
View file

@ -17,7 +17,7 @@ URL: https://www.python.org/
#global prerel ...
%global upstream_version %{general_version}%{?prerel}
Version: %{general_version}%{?prerel:~%{prerel}}
Release: 5%{?dist}
Release: 6%{?dist}
License: Python-2.0.1
@ -375,6 +375,10 @@ Patch431: 00431-gh-113171-gh-65056-fix-private-non-global-ip-address-ranges-gh-1
# about newlines.
Patch435: 00435-gh-121650-encode-newlines-in-headers-and-verify-headers-are-sound-gh-122233.patch
# 00436 # 1acd6db660ad1124ab7ae449a841608dd9d9062d
# [CVE-2024-8088] gh-122905: Sanitize names in zipfile.Path.
Patch436: 00436-cve-2024-8088-gh-122905-sanitize-names-in-zipfile-path.patch
# (New patches go here ^^^)
#
# When adding new patches to "python" and "python3" in Fedora, EL, etc.,
@ -1685,6 +1689,10 @@ CheckPython optimized
# ======================================================
%changelog
* Fri Aug 23 2024 Charalampos Stratakis <cstratak@redhat.com> - 3.11.9-6
- Security fix for CVE-2024-8088
- Fixes: rhbz#2307460
* Thu Aug 15 2024 Charalampos Stratakis <cstratak@redhat.com> - 3.11.9-5
- Security fix for CVE-2024-4032 (rhbz#2293391)
- Security fix for CVE-2024-6923 (rhbz#2303158)