Security fix for CVE-2025-0938

Fixes: rhbz#2343273

python3.14.spec

@@ -17,7 +17,7 @@ URL: https://www.python.org/
 %global prerel a4
 %global upstream_version %{general_version}%{?prerel}
 Version: %{general_version}%{?prerel:~%{prerel}}
-Release: 1%{?dist}
+Release: 2%{?dist}
 License: Python-2.0.1
 
 
@@ -370,6 +370,10 @@ Patch448: 00448-gh-128916-do-not-set-so_reuseport-on-non--af_inet-sockets-gh-128
 # gh-128889: Zero out memory ctypes for generated struct layout tests (GH-128944)
 Patch449: 00449-gh-128889-zero-out-memory-ctypes-for-generated-struct-layout-tests-gh-128944.patch
 
+# 00450 # 4ab8663661748eb994c09e4ae89f59eb84c5d3ea
+# CVE-2025-0938: Disallow square brackets ([ and ]) in domain names for parsed URLs
+Patch450: 00450-cve-2025-0938-disallow-square-brackets-and-in-domain-names-for-parsed-urls.patch
+
 # (New patches go here ^^^)
 #
 # When adding new patches to "python" and "python3" in Fedora, EL, etc.,
@@ -1713,6 +1717,10 @@ CheckPython freethreading
 # ======================================================
 
 %changelog
+* Tue Feb 04 2025 Charalampos Stratakis <cstratak@redhat.com> - 3.14.0~a4-2
+- Security fix for CVE-2025-0938
+- Fixes: rhbz#2343273
+
 * Mon Jan 20 2025 Karolina Surma <ksurma@redhat.com> - 3.14.0~a4-1
 - Update to Python 3.14.0a4