rpms/python3.6
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Security fix for CVE-2024-9287 (rhbz#2321659)

Browse source
This commit is contained in:
Lumir Balhar 2024-11-04 15:05:21 +01:00
commit 3a8e45d12c
2 changed files with 291 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

11
python3.6.spec
View file

@ -17,7 +17,7 @@ URL: https://www.python.org/
#global prerel ...
%global upstream_version %{general_version}%{?prerel}
Version: %{general_version}%{?prerel:~%{prerel}}
Release: 37%{?dist}
Release: 38%{?dist}
# Python is Python
# pip MIT is and bundles:
# appdirs: MIT
@ -772,6 +772,12 @@ Patch435: 00435-gh-121650-encode-newlines-in-headers-and-verify.patch
# * Optimize parsing of GNU extended sparse headers v0.0
Patch437: 00437-cve-2024-6232-remove-backtracking-when-parsing-tarfile-headers.patch
# 00443 # 49e939f29e3551ec4e7bdb2cc8b8745e3d1fca35
# gh-124651: Quote template strings in `venv` activation scripts
#
# (cherry picked from 3.9)
Patch443: 00443-gh-124651-quote-template-strings-in-venv-activation-scripts.patch
# (New patches go here ^^^)
#
# When adding new patches to "python" and "python3" in Fedora, EL, etc.,
@ -2041,6 +2047,9 @@ CheckPython optimized
# ======================================================
%changelog
* Mon Nov 04 2024 Lumír Balhar <lbalhar@redhat.com> - 3.6.15-38
- Security fix for CVE-2024-9287 (rhbz#2321659)
* Thu Sep 05 2024 Lumír Balhar <lbalhar@redhat.com> - 3.6.15-37
- Security fix for CVE-2024-6232 (rhbz#2310092)