Security fix for CVE-2024-12254

Fixes: rhbz#2330928

python3.14.spec

@@ -17,7 +17,7 @@ URL: https://www.python.org/
 %global prerel a2
 %global upstream_version %{general_version}%{?prerel}
 Version: %{general_version}%{?prerel:~%{prerel}}
-Release: 1%{?dist}
+Release: 2%{?dist}
 License: Python-2.0.1
 
 
@@ -351,6 +351,14 @@ Source11: idle3.appdata.xml
 # pypa/distutils integration: https://github.com/pypa/distutils/pull/70
 Patch251: 00251-change-user-install-location.patch
 
+# 00445 # d1a32daddefad32ceb93155552858c0a0311b23e
+# CVE-2024-12254: Ensure _SelectorSocketTransport.writelines pauses the protocol if needed
+#
+# Ensure _SelectorSocketTransport.writelines pauses the protocol if it reaches the high water mark as needed.
+#
+# Resolved upstream: https://github.com/python/cpython/issues/127655
+Patch445: 00445-cve-2024-12254-ensure-_selectorsockettransport-writelines-pauses-the-protocol-if-needed.patch
+
 # (New patches go here ^^^)
 #
 # When adding new patches to "python" and "python3" in Fedora, EL, etc.,
@@ -1688,6 +1696,10 @@ CheckPython freethreading
 # ======================================================
 
 %changelog
+* Sun Dec 08 2024 Charalampos Stratakis <cstratak@redhat.com> - 3.14.0~a2-2
+- Security fix for CVE-2024-12254
+- Fixes: rhbz#2330928
+
 * Wed Nov 20 2024 Karolina Surma <ksurma@redhat.com> - 3.14.0~a2-1
 - Update to Python 3.14.0a2