From 0d3a20f68bd7f8b96221d7ed6031e5fbeded2ac7 Mon Sep 17 00:00:00 2001
From: jeremiazhao <345865759@163.com>
Date: Mon, 23 Oct 2023 02:24:33 +0000
Subject: [PATCH 1/2] fixed CVE-2023-45803 and CVE-2023-43804

Signed-off-by: jeremiazhao <345865759@163.com>
---
 python-urllib3.spec | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/python-urllib3.spec b/python-urllib3.spec
index 2a89e0d..4f3808d 100644
--- a/python-urllib3.spec
+++ b/python-urllib3.spec
@@ -4,7 +4,7 @@
 
 Summary:        Python HTTP library with thread-safe connection pooling and file post
 Name:           python-%{srcname}
-Version:        1.26.16
+Version:        1.26.18
 Release:        1%{?dist}
 License:        MIT
 URL:            https://github.com/urllib3/urllib3
@@ -75,6 +75,9 @@ ln -s %{python3_sitelib}/__pycache__/six.cpython-%{python3_version_nodots}.pyc \
 %{python3_sitelib}/urllib3-*.egg-info/
 
 %changelog
+* Mon Oct 23 2023 Zhao Zhen <jeremiazhao@tencent.com> - 1.26.18-1
+- fixed CVE-2023-45803 and CVE-2023-43804
+
 * Tue Sep 26 2023 Wang Guodong <gordonwwang@tencent.com> - 1.26.16-1
 - Upgrade to version 1.26.16
 
-- 
Gitee


From d1a8982681c10b58ccd8c9a3a2168c54f2459143 Mon Sep 17 00:00:00 2001
From: jeremiazhao <345865759@163.com>
Date: Mon, 23 Oct 2023 02:25:29 +0000
Subject: [PATCH 2/2] update sources.

Signed-off-by: jeremiazhao <345865759@163.com>
---
 sources | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/sources b/sources
index 81f5417..66ed1d0 100644
--- a/sources
+++ b/sources
@@ -1 +1 @@
-SHA512 (urllib3-1.26.16.tar.gz) = 47cb993acabf169470448bc91b1a0d1fb4df6e60bf97ce6fb06f5397935f33f693cd0851a663fb36a7c5a4b19ed4dbcc0fcce9f45839315354a013f41d837f7a
+SHA512 (urllib3-1.26.18.tar.gz) = c89e93a032bf6b11375c06ef7c5abc1868f93e7655cfdca09e9bd939ad415d206ea159fe151ecd2e5f725e0e18a831c7a5382ad01dbc32264154fc8af7aec156
-- 
Gitee