mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-09-09 07:51:59 -09:00
8201f39111
Fixes the following security issues:
CVE-2026-44431: Sensitive headers forwarded across origins in proxied
low-level redirects
https://github.com/urllib3/urllib3/security/advisories/GHSA-qccp-gfcp-xxvc
CVE-2026-44432: Decompression-bomb safeguards bypassed in parts of the
streaming API
https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j
For more details, see the release notes:
https://urllib3.readthedocs.io/en/stable/changelog.html#id1
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 8b606d9074)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
20 lines
760 B
Makefile
20 lines
760 B
Makefile
################################################################################
|
|
#
|
|
# python-urllib3
|
|
#
|
|
################################################################################
|
|
|
|
PYTHON_URLLIB3_VERSION = 2.7.0
|
|
PYTHON_URLLIB3_SOURCE = urllib3-$(PYTHON_URLLIB3_VERSION).tar.gz
|
|
PYTHON_URLLIB3_SITE = https://files.pythonhosted.org/packages/53/0c/06f8b233b8fd13b9e5ee11424ef85419ba0d8ba0b3138bf360be2ff56953
|
|
PYTHON_URLLIB3_LICENSE = MIT
|
|
PYTHON_URLLIB3_LICENSE_FILES = LICENSE.txt
|
|
PYTHON_URLLIB3_CPE_ID_VENDOR = python
|
|
PYTHON_URLLIB3_CPE_ID_PRODUCT = urllib3
|
|
PYTHON_URLLIB3_SETUP_TYPE = hatch
|
|
PYTHON_URLLIB3_DEPENDENCIES = host-python-hatch-vcs
|
|
HOST_PYTHON_URLLIB3_DEPENDENCIES = host-python-hatch-vcs
|
|
|
|
$(eval $(python-package))
|
|
$(eval $(host-python-package))
|