mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-10-04 16:01:49 -09:00
a4001260d6
Release notes:
https://github.com/urllib3/urllib3/releases/tag/2.6.3
Fixes the following vulnerability:
CVE-2026-21441: Decompression-bomb safeguards bypassed when following HTTP
redirects (streaming API)
https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
[Julien: add link to release notes]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 888beb6c44)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
20 lines
760 B
Makefile
20 lines
760 B
Makefile
################################################################################
|
|
#
|
|
# python-urllib3
|
|
#
|
|
################################################################################
|
|
|
|
PYTHON_URLLIB3_VERSION = 2.6.3
|
|
PYTHON_URLLIB3_SOURCE = urllib3-$(PYTHON_URLLIB3_VERSION).tar.gz
|
|
PYTHON_URLLIB3_SITE = https://files.pythonhosted.org/packages/c7/24/5f1b3bdffd70275f6661c76461e25f024d5a38a46f04aaca912426a2b1d3
|
|
PYTHON_URLLIB3_LICENSE = MIT
|
|
PYTHON_URLLIB3_LICENSE_FILES = LICENSE.txt
|
|
PYTHON_URLLIB3_CPE_ID_VENDOR = python
|
|
PYTHON_URLLIB3_CPE_ID_PRODUCT = urllib3
|
|
PYTHON_URLLIB3_SETUP_TYPE = hatch
|
|
PYTHON_URLLIB3_DEPENDENCIES = host-python-hatch-vcs
|
|
HOST_PYTHON_URLLIB3_DEPENDENCIES = host-python-hatch-vcs
|
|
|
|
$(eval $(python-package))
|
|
$(eval $(host-python-package))
|