diff --git a/SPECS/python-pip.spec b/SPECS/python-pip.spec index 2977611..c458aa1 100644 --- a/SPECS/python-pip.spec +++ b/SPECS/python-pip.spec @@ -21,7 +21,7 @@ Name: python-%{srcname} Version: %{base_version}%{?prerel:~%{prerel}} -Release: 7%{?dist}.1 +Release: 8%{?dist} Summary: A tool for installing and managing Python packages # We bundle a lot of libraries with pip, which itself is under MIT license. @@ -248,7 +248,7 @@ Obsoletes: %{name}-wheel < %{version}-%{release} # Older versions of python3-libs (< 3.9.9-2) expect Python wheels at the old unversioned # location, so we conflict with the old Python versions that wouldn't work with # the new wheel location. -# Moreover, Python older than (3.9.17-2) does not provide tarfile filters (fix for CVE-2007-4559). +# Moreover, Python older than (3.9.16-2) does not provide tarfile filters (fix for CVE-2007-4559). Conflicts: python3-libs < 3.9.17-2 # Virtual provides for the packages bundled by pip: @@ -416,9 +416,9 @@ pytest_k='not completion and %{python_wheel_dir}/%{python_wheel_name} %changelog -* Wed Feb 14 2024 Lumír Balhar - 21.2.3-7.1 +* Wed Feb 14 2024 Lumír Balhar - 21.2.3-8 - Require Python with tarfile filters -Resolves: RHEL-25452 +Resolves: RHEL-25451 * Tue Aug 08 2023 Petr Viktorin - 21.2.3-7 - Use tarfile.data_filter for extracting (CVE-2007-4559, PEP-721, PEP-706)