fix CVE-2024-3651

(cherry picked from commit 568e4758622687f52545f83752b5b15944e82b53)

python-idna.spec

@@ -1,13 +1,14 @@
 %global _empty_manifest_terminate_build 0
 Name:		python-idna
 Version:	3.6
-Release:	2
+Release:	3
 Summary:	Internationalized Domain Names in Applications (IDNA)
 License:	BSD
 URL:		https://github.com/kjd/idna
 Source0:	https://github.com/kjd/idna/archive/refs/tags/idna-3.6.tar.gz
 BuildArch:	noarch
 
+Patch6000:      backport-CVE-2024-3651.patch
 
 %description
 A library to support the Internationalised Domain Names in
@@ -44,7 +45,7 @@ is often referred to as “IDNA2008” and can produce different
 results from the earlier standard from 2003.
 
 %prep
-%autosetup -n idna-%{version}
+%autosetup -n idna-%{version} -p1
 
 %build
 %pyproject_build
@@ -88,6 +89,9 @@ mv %{buildroot}/doclist.lst .
 %{_docdir}/*
 
 %changelog
+* Sat Apr 20 2024 zhangpan <zhangpan103@h-partners.com> - 3.6-3
+- fix CVE-2024-3651
+
 * Sat Apr 20 2024 zhangpan <zhangpan103@h-partners.com> - 3.6-2
 - correct the tar package