Switch the hardcoded dependency on urllib3[socks] to a weak one

This commit is contained in:
Miro Hrončok 2023-10-09 19:45:30 +02:00
parent 20e01faab8
commit 85ab608837

View File

@ -8,7 +8,7 @@
Name: python-urllib3 Name: python-urllib3
Version: 1.26.17 Version: 1.26.17
Release: 1%{?dist} Release: 2%{?dist}
Summary: HTTP library with thread-safe connection pooling, file post, and more Summary: HTTP library with thread-safe connection pooling, file post, and more
# SPDX # SPDX
@ -77,9 +77,9 @@ Requires: %{py3_dist idna}
Provides: bundled(python3dist(six)) = 1.16.0 Provides: bundled(python3dist(six)) = 1.16.0
# There has historically been a manual hard dependency on python3-pysocks; # There has historically been a manual hard dependency on python3-pysocks;
# since bringing it in is the sole function of python3-urllib3+socks, we just # since bringing it in is the sole function of python3-urllib3+socks,
# depend on that instead. # we recommend it, so it is installed by default.
Requires: python3-urllib3+socks = %{version}-%{release} Recommends: python3-urllib3+socks
%description -n python3-urllib3 %{_description} %description -n python3-urllib3 %{_description}
@ -154,6 +154,9 @@ ignore="${ignore-} --ignore=test/test_no_ssl.py"
%changelog %changelog
* Mon Oct 09 2023 Miro Hrončok <mhroncok@redhat.com> - 1.26.17-2
- Switch the hardcoded dependency on urllib3[socks] to a weak one
* Mon Oct 02 2023 Benjamin A. Beasley <code@musicinmybrain.net> - 1.26.17-1 * Mon Oct 02 2023 Benjamin A. Beasley <code@musicinmybrain.net> - 1.26.17-1
- Update to 1.26.17: fix CVE-2023-43804 (GHSA-v845-jxx5-vc9f) - Update to 1.26.17: fix CVE-2023-43804 (GHSA-v845-jxx5-vc9f)