!24 [sync] PR-23: fix CVE-2024-3651

From: @openeuler-sync-bot 
Reviewed-by: @zengwefeng 
Signed-off-by: @zengwefeng
This commit is contained in:
openeuler-ci-bot 2024-04-22 03:34:35 +00:00 committed by Gitee
commit 66cbd7e43c
No known key found for this signature in database
GPG Key ID: 173E9B9CA92EEF8F
2 changed files with 2495 additions and 2 deletions

2489
backport-CVE-2024-3651.patch Normal file

File diff suppressed because it is too large Load Diff

View File

@ -1,13 +1,14 @@
%global _empty_manifest_terminate_build 0
Name: python-idna
Version: 3.6
Release: 2
Release: 3
Summary: Internationalized Domain Names in Applications (IDNA)
License: BSD
URL: https://github.com/kjd/idna
Source0: https://github.com/kjd/idna/archive/refs/tags/idna-3.6.tar.gz
BuildArch: noarch
Patch6000: backport-CVE-2024-3651.patch
%description
A library to support the Internationalised Domain Names in
@ -44,7 +45,7 @@ is often referred to as “IDNA2008” and can produce different
results from the earlier standard from 2003.
%prep
%autosetup -n idna-%{version}
%autosetup -n idna-%{version} -p1
%build
%pyproject_build
@ -88,6 +89,9 @@ mv %{buildroot}/doclist.lst .
%{_docdir}/*
%changelog
* Sat Apr 20 2024 zhangpan <zhangpan103@h-partners.com> - 3.6-3
- fix CVE-2024-3651
* Sat Apr 20 2024 zhangpan <zhangpan103@h-partners.com> - 3.6-2
- correct the tar package