Security fix for CVE-2024-12254

Fixes: rhbz#2330926

python3.12.spec

@@ -17,7 +17,7 @@ URL: https://www.python.org/
 #global prerel ...
 %global upstream_version %{general_version}%{?prerel}
 Version: %{general_version}%{?prerel:~%{prerel}}
-Release: 1%{?dist}
+Release: 2%{?dist}
 License: Python-2.0.1
 
 
@@ -364,6 +364,14 @@ Patch251: 00251-change-user-install-location.patch
 # https://github.com/GrahamDumpleton/mod_wsgi/issues/730
 Patch371: 00371-revert-bpo-1596321-fix-threading-_shutdown-for-the-main-thread-gh-28549-gh-28589.patch
 
+# 00445 # d1a32daddefad32ceb93155552858c0a0311b23e
+# CVE-2024-12254: Ensure _SelectorSocketTransport.writelines pauses the protocol if needed
+#
+# Ensure _SelectorSocketTransport.writelines pauses the protocol if it reaches the high water mark as needed.
+#
+# Resolved upstream: https://github.com/python/cpython/issues/127655
+Patch445: 00445-cve-2024-12254-ensure-_selectorsockettransport-writelines-pauses-the-protocol-if-needed.patch
+
 # (New patches go here ^^^)
 #
 # When adding new patches to "python" and "python3" in Fedora, EL, etc.,
@@ -1683,6 +1691,10 @@ CheckPython optimized
 # ======================================================
 
 %changelog
+* Fri Dec 06 2024 Charalampos Stratakis <cstratak@redhat.com> - 3.12.8-2
+- Security fix for CVE-2024-12254
+- Fixes: rhbz#2330926
+
 * Tue Dec 03 2024 Charalampos Stratakis <cstratak@redhat.com> - 3.12.8-1
 - Update to 3.12.8
 - Security fix for CVE-2024-9287