Peter Korsgaard 44dda06940 package/python-urllib3: security bump to version 2.6.3 ...

Release notes:
https://github.com/urllib3/urllib3/releases/tag/2.6.3

Fixes the following vulnerability:

CVE-2026-21441: Decompression-bomb safeguards bypassed when following HTTP
redirects (streaming API)

https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
[Julien: add link to release notes]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 888beb6c44)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>

2026-02-04 17:23:36 +01:00

..

Config.in

…

python-urllib3.hash

package/python-urllib3: security bump to version 2.6.3

2026-02-04 17:23:36 +01:00

python-urllib3.mk

package/python-urllib3: security bump to version 2.6.3

2026-02-04 17:23:36 +01:00