- Add CVE-2025-0938-sq-brackets-domain-names.patch which

disallows square brackets ([ and ]) in domain names for parsed
  URLs (bsc#1236705, CVE-2025-0938, gh#python/cpython#105704)

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python311?expand=0&rev=158
This commit is contained in:
2025-02-04 14:51:05 +00:00
committed by Git OBS Bridge
commit 108a2a7e18
43 changed files with 9248 additions and 0 deletions

View File

@@ -0,0 +1,13 @@
Index: Python-3.11.8/Lib/site.py
===================================================================
--- Python-3.11.8.orig/Lib/site.py
+++ Python-3.11.8/Lib/site.py
@@ -77,7 +77,7 @@ import io
import stat
# Prefixes for site-packages; add additional prefixes like /usr/local here
-PREFIXES = [sys.prefix, sys.exec_prefix]
+PREFIXES = [sys.prefix, sys.exec_prefix, '/usr/local']
# Enable per user site-packages directory
# set it to False to disable the feature or True to force the feature
ENABLE_USER_SITE = None