mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-09-19 16:40:46 -09:00
a4001260d6
Release notes:
https://github.com/urllib3/urllib3/releases/tag/2.6.3
Fixes the following vulnerability:
CVE-2026-21441: Decompression-bomb safeguards bypassed when following HTTP
redirects (streaming API)
https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
[Julien: add link to release notes]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 888beb6c44)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
6 lines
331 B
Plaintext
6 lines
331 B
Plaintext
# md5, sha256 from https://pypi.org/pypi/urllib3/json
|
|
md5 2c381874816fe551f50a2551abae62b3 urllib3-2.6.3.tar.gz
|
|
sha256 1b62b6884944a57dbe321509ab94fd4d3b307075e0c2eae991ac71ee15ad38ed urllib3-2.6.3.tar.gz
|
|
# Locally computed sha256 checksums
|
|
sha256 130e3a64d5fdd5d096a752694634a7d9df284469de86e5732100268041e3d686 LICENSE.txt
|