Security fix for CVE-2019-5010

python36.spec

@@ -14,7 +14,7 @@ URL: https://www.python.org/
 #  WARNING  When rebasing to a new Python version,
 #           remember to update the python3-docs package as well
 Version: %{pybasever}.8
-Release: 2%{?dist}
+Release: 3%{?dist}
 License: Python
 
 
@@ -351,6 +351,11 @@ Patch292: 00292-restore-PyExc_RecursionErrorInst-symbol.patch
 # See also: https://bugzilla.redhat.com/show_bug.cgi?id=1489816
 Patch294: 00294-define-TLS-cipher-suite-on-build-time.patch
 
+# 00317 #
+# Security fix for CVE-2019-5010: Fix segfault in ssl's cert parser
+# Fixed upstream https://bugs.python.org/issue35746
+Patch317: 00317-CVE-2019-5010.patch
+
 # (New patches go here ^^^)
 #
 # When adding new patches to "python" and "python3" in Fedora, EL, etc.,
@@ -676,6 +681,7 @@ rm Lib/ensurepip/_bundled/*.whl
 %patch274 -p1
 %patch292 -p1
 %patch294 -p1
+%patch317 -p1
 
 
 # Remove files that should be generated by the build
@@ -1557,6 +1563,9 @@ CheckPython optimized
 # ======================================================
 
 %changelog
+* Wed Jan 23 2019 Patrik Kopkan <pkopkan@redhat.com> - 3.6.8-3
+- fix for CVE-2019-5010 (#1666519, #1666520)
+
 * Mon Jan 14 2019 Björn Esser <besser82@fedoraproject.org> - 3.6.8-2
 - Rebuilt for libcrypt.so.2 (#1666033)