rpms/python3.6
3
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Security fix CVE-2025-0938

Browse source 
Fixes: rhbz#2343277
This commit is contained in:
Charalampos Stratakis 2025-02-14 23:47:25 +01:00
commit 5fcb85d793
2 changed files with 128 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

10
python3.6.spec
View file

@ -17,7 +17,7 @@ URL: https://www.python.org/
#global prerel ...
%global upstream_version %{general_version}%{?prerel}
Version: %{general_version}%{?prerel:~%{prerel}}
Release: 42%{?dist}
Release: 43%{?dist}
# Python is Python
# pip MIT is and bundles:
# appdirs: MIT
@ -800,6 +800,10 @@ Patch444: 00444-security-fix-for-cve-2024-11168.patch
# https://en.cppreference.com/w/c/experimental/fpext4).
Patch446: 00446-Resolve-sinpi-name-clash-with-libm.patch
# 00450 # 31aa7c11975e890489e31d8b293c3f92d3ea1180
# CVE-2025-0938: Disallow square brackets ([ and ]) in domain names for parsed URLs
Patch450: 00450-cve-2025-0938-disallow-square-brackets-and-in-domain-names-for-parsed-urls.patch
# (New patches go here ^^^)
#
# When adding new patches to "python" and "python3" in Fedora, EL, etc.,
@ -2069,6 +2073,10 @@ CheckPython optimized
# ======================================================
%changelog
* Fri Feb 14 2025 Charalampos Stratakis <cstratak@redhat.com> - 3.6.15-43
- Security fix CVE-2025-0938
- Fixes: rhbz#2343277
* Sat Feb 01 2025 Björn Esser <besser82@fedoraproject.org> - 3.6.15-42
- Add explicit BR: libxcrypt-devel