- Add CVE-2024-11168-validation-IPv6-addrs.patch

fixing bsc#1233307 (CVE-2024-11168,
  gh#python/cpython#103848): Improper validation of IPv6 and
  IPvFuture addresses.

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python310?expand=0&rev=159
This commit is contained in:
2024-11-13 14:50:14 +00:00
committed by Git OBS Bridge
parent 3c83f96183
commit 8760128921
3 changed files with 109 additions and 0 deletions

View File

@@ -207,6 +207,9 @@ Patch28: sphinx-802.patch
# PATCH-FIX-UPSTREAM CVE-2024-9287-venv_path_unquoted.patch gh#python/cpython#124651 mcepl@suse.com
# venv should properly quote path names provided when creating a venv
Patch29: CVE-2024-9287-venv_path_unquoted.patch
# PATCH-FIX-UPSTREAM CVE-2024-11168-validation-IPv6-addrs.patch bsc#1233307 mcepl@suse.com
# improve validation of IPv6 and IPvFuture addresses in urlparse and urlsplit
Patch30: CVE-2024-11168-validation-IPv6-addrs.patch
BuildRequires: autoconf-archive
BuildRequires: automake
BuildRequires: fdupes
@@ -487,6 +490,7 @@ other applications.
%patch -p1 -P 27
%patch -p1 -P 28
%patch -p1 -P 29
%patch -p1 -P 30
# drop Autoconf version requirement
sed -i 's/^AC_PREREQ/dnl AC_PREREQ/' configure.ac