python-interpreters/python39
SHA256
7
0
Fork 0
forked from pool/python39
Code Pull Requests Activity

- Add CVE-2024-9287-venv_path_unquoted.patch to properly quote

Browse Source 
path names provided when creating a virtual environment
  (bsc#1232241, CVE-2024-9287)

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python:Factory/python39?expand=0&rev=211
This commit is contained in:
Matej Cepl
2024-10-24 17:06:14 +00:00
committed by Git OBS Bridge
parent c05bd945fa
commit 087c362626
3 changed files with 279 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
python39.spec
View File

@@ -194,6 +194,9 @@ Patch50: gh120226-fix-sendfile-test-kernel-610.patch
# PATCH-FIX-UPSTREAM sphinx-802.patch mcepl@suse.com
# status_iterator method moved between the Sphinx versions
Patch51: sphinx-802.patch
# PATCH-FIX-UPSTREAM CVE-2024-9287-venv_path_unquoted.patch gh#python/cpython#124651 mcepl@suse.com
# venv should properly quote path names provided when creating a venv
Patch52: CVE-2024-9287-venv_path_unquoted.patch
BuildRequires: autoconf-archive
BuildRequires: automake
@@ -467,6 +470,7 @@ other applications.
%patch -P 48 -p1
%patch -P 50 -p1
%patch -P 51 -p1
%patch -P 52 -p1
# drop Autoconf version requirement
sed -i 's/^AC_PREREQ/dnl AC_PREREQ/' configure.ac