Files
buildroot/package
Peter Korsgaard a4001260d6 package/python-urllib3: security bump to version 2.6.3
Release notes:
https://github.com/urllib3/urllib3/releases/tag/2.6.3

Fixes the following vulnerability:

CVE-2026-21441: Decompression-bomb safeguards bypassed when following HTTP
redirects (streaming API)

https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
[Julien: add link to release notes]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 888beb6c44)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
2026-02-04 17:23:36 +01:00
..
2026-01-09 16:56:30 +01:00
2025-12-07 18:10:13 +01:00
2025-11-09 18:48:38 +01:00
2026-01-15 08:44:47 +01:00
2025-12-07 18:10:12 +01:00
2026-01-09 17:03:12 +01:00
2025-11-07 23:27:05 +01:00
2025-11-16 21:58:57 +01:00
2025-11-05 21:01:20 +01:00
2025-12-03 20:55:25 +01:00
2026-01-06 08:50:58 +01:00
2025-12-06 07:26:59 +01:00
2025-12-07 18:10:13 +01:00
2025-11-10 19:11:37 +01:00
2025-11-10 19:25:00 +01:00
2025-11-12 08:52:00 +01:00
2025-12-09 22:16:08 +01:00
2026-01-06 08:59:11 +01:00
2025-11-19 19:16:49 +01:00
2025-11-30 17:29:13 +01:00
2025-11-19 21:37:24 +01:00
2026-01-06 08:54:13 +01:00
2025-12-07 18:09:33 +01:00
2025-11-29 13:03:49 +01:00
2026-01-06 08:41:16 +01:00
2025-11-12 20:25:42 +01:00
2025-11-16 17:51:55 +01:00
2025-12-24 15:13:11 +01:00
2026-01-15 09:32:31 +01:00
2026-01-09 16:10:45 +01:00
2025-11-17 22:10:03 +01:00
2025-11-18 22:13:14 +01:00
2025-12-24 15:13:19 +01:00
2026-01-22 15:52:40 +01:00