rpms/python3.12
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Security fix for CVE-2025-0938

Browse source 
Fixes: rhbz#2343275
This commit is contained in:
Charalampos Stratakis 2025-02-04 04:53:39 +01:00
commit 80ff1f7ed1
2 changed files with 130 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

10
python3.12.spec
View file

@ -17,7 +17,7 @@ URL: https://www.python.org/
#global prerel ...
%global upstream_version %{general_version}%{?prerel}
Version: %{general_version}%{?prerel:~%{prerel}}
Release: 4%{?dist}
Release: 5%{?dist}
License: Python-2.0.1
@ -373,6 +373,10 @@ Patch371: 00371-revert-bpo-1596321-fix-threading-_shutdown-for-the-main-thread-g
# Resolved upstream: https://github.com/python/cpython/issues/127655
Patch445: 00445-cve-2024-12254-ensure-_selectorsockettransport-writelines-pauses-the-protocol-if-needed.patch
# 00450 # 4ab8663661748eb994c09e4ae89f59eb84c5d3ea
# CVE-2025-0938: Disallow square brackets ([ and ]) in domain names for parsed URLs
Patch450: 00450-cve-2025-0938-disallow-square-brackets-and-in-domain-names-for-parsed-urls.patch
# (New patches go here ^^^)
#
# When adding new patches to "python" and "python3" in Fedora, EL, etc.,
@ -1691,6 +1695,10 @@ CheckPython optimized
# ======================================================
%changelog
* Tue Feb 04 2025 Charalampos Stratakis <cstratak@redhat.com> - 3.12.8-5
- Security fix for CVE-2025-0938
- Fixes: rhbz#2343275
* Sat Feb 01 2025 Björn Esser <besser82@fedoraproject.org> - 3.12.8-4
- Add explicit BR: libxcrypt-devel