import python-idna-2.10-4.module+el8.10.0+21815+bb024982

SPECS/python-idna.spec

@@ -2,12 +2,18 @@
 
 Name:           python-%{srcname}
 Version:        2.10
-Release:        3%{?dist}
+Release:        4%{?dist}
 Summary:        Internationalized Domain Names in Applications (IDNA)
 
 License:        BSD and Python and Unicode
 URL:            https://github.com/kjd/idna
 Source0:        https://pypi.io/packages/source/i/%{srcname}/%{srcname}-%{version}.tar.gz
+
+# Security fix for CVE-2024-3651
+# Upstream: https://github.com/kjd/idna/commit/5beb28b9dd77912c0dd656d8b0fdba3eb80222e7
+# Tracking bugzilla: https://bugzilla.redhat.com/show_bug.cgi?id=2274779
+Patch:          CVE-2024-3651.patch
+
 BuildArch:      noarch
 # Exclude i686 arch. Due to a modularity issue it's being added to the
 # x86_64 compose of CRB, but we don't want to ship it at all.
@@ -65,6 +71,10 @@ rm -rf %{srcname}.egg-info
 
 
 %changelog
+* Thu May 09 2024 Charalampos Stratakis <cstratak@redhat.com> - 2.10-4
+- Security fix for CVE-2024-3651
+Resolves: RHEL-32705
+
 * Mon Dec 11 2023 MSVSphere Packaging Team <packager@msvsphere-os.ru> - 2.10-3
 - Rebuilt for MSVSphere 8.8