Accepting request 919877 from devel:languages:python:Factory

addressing CVE-2019-18348 (bpo#38576, bsc#1155094). Such
    potentially malicious header injection URLs now cause
    InvalidURL to be raised.

OBS-URL: https://build.opensuse.org/request/show/919877
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python?expand=0&rev=157

python-base.changes

@@ -76,8 +76,9 @@ Thu Apr 23 09:17:24 UTC 2020 - Matej Cepl <mcepl@suse.com>
   - Fixed line numbers and column offsets for AST nodes for calls
     without arguments in decorators.
   - Disallow control characters in hostnames in http.client,
-    addressing CVE-2019-18348. Such potentially malicious header
-    injection URLs now cause a InvalidURL to be raised.
+    addressing CVE-2019-18348 (bpo#38576, bsc#1155094). Such
+    potentially malicious header injection URLs now cause
+    InvalidURL to be raised.
   - Fix urllib.urlretrieve failing on subsequent ftp transfers
     from the same host.
   - Fix problems identified by GCC's -Wstringop-truncation

python-doc.changes

@@ -76,8 +76,9 @@ Thu Apr 23 09:17:24 UTC 2020 - Matej Cepl <mcepl@suse.com>
   - Fixed line numbers and column offsets for AST nodes for calls
     without arguments in decorators.
   - Disallow control characters in hostnames in http.client,
-    addressing CVE-2019-18348. Such potentially malicious header
-    injection URLs now cause a InvalidURL to be raised.
+    addressing CVE-2019-18348 (bpo#38576, bsc#1155094). Such
+    potentially malicious header injection URLs now cause
+    InvalidURL to be raised.
   - Fix urllib.urlretrieve failing on subsequent ftp transfers
     from the same host.
   - Fix problems identified by GCC's -Wstringop-truncation

python-doc.spec

@@ -186,13 +186,13 @@ Python, and Macintosh Module Reference in PDF format.
 
 # drop Autoconf version requirement
 sed -i 's/^version_required/dnl version_required/' configure.ac
+# COMMON-PREP-END
 
 # Update documentation formatting for Sphinx 3.0 (bpo#40204)
 for i in `find Doc/ -type f -name "*.rst"`
 do
   sed -i 's/:c:type:/:c:expr:/g' $i
 done
-# COMMON-PREP-END
 
 %build
 TODAY_DATE=`date -r %{S:0} "+%B %d, %Y"`

python.changes

@@ -76,8 +76,9 @@ Thu Apr 23 09:17:24 UTC 2020 - Matej Cepl <mcepl@suse.com>
   - Fixed line numbers and column offsets for AST nodes for calls
     without arguments in decorators.
   - Disallow control characters in hostnames in http.client,
-    addressing CVE-2019-18348. Such potentially malicious header
-    injection URLs now cause a InvalidURL to be raised.
+    addressing CVE-2019-18348 (bpo#38576, bsc#1155094). Such
+    potentially malicious header injection URLs now cause
+    InvalidURL to be raised.
   - Fix urllib.urlretrieve failing on subsequent ftp transfers
     from the same host.
   - Fix problems identified by GCC's -Wstringop-truncation