mirror of
https://git.yoctoproject.org/poky
synced 2026-10-24 07:48:24 +00:00
Sudhir Dumbhare
a184998193
Applies the upstream fix [1] referenced in [2] and addresses the sensitive-header redirect handling issue in proxied low-level urllib3 requests. [1] https://github.com/urllib3/urllib3/commit/5ec0de499b9166ca71c65ab04f2a7e4eb0d66fcc [2] https://ubuntu.com/security/CVE-2026-44431 References: https://nvd.nist.gov/vuln/detail/CVE-2026-44431 (From OE-Core rev: a7f0523f5ff7a8fef611d30ad41b12d73eecec8c) Signed-off-by: Sudhir Dumbhare <sudumbha@cisco.com> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev>
33 lines
848 B
BlitzBasic
33 lines
848 B
BlitzBasic
SUMMARY = "Python HTTP library with thread-safe connection pooling, file post support, sanity friendly, and more"
|
|
HOMEPAGE = "https://github.com/shazow/urllib3"
|
|
LICENSE = "MIT"
|
|
LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=52d273a3054ced561275d4d15260ecda"
|
|
|
|
SRC_URI[sha256sum] = "dd505485549a7a552833da5e6063639d0d177c04f23bc3864e41e5dc5f612168"
|
|
|
|
inherit pypi python_hatchling
|
|
|
|
SRC_URI += " \
|
|
file://CVE-2025-50181.patch \
|
|
file://CVE-2025-66418.patch \
|
|
file://CVE-2025-66471.patch \
|
|
file://CVE-2026-21441.patch \
|
|
file://CVE-2026-44431.patch \
|
|
"
|
|
|
|
RDEPENDS:${PN} += "\
|
|
python3-certifi \
|
|
python3-cryptography \
|
|
python3-email \
|
|
python3-idna \
|
|
python3-json \
|
|
python3-netclient \
|
|
python3-pyopenssl \
|
|
python3-threading \
|
|
python3-logging \
|
|
"
|
|
|
|
CVE_PRODUCT = "urllib3"
|
|
|
|
BBCLASSEXTEND = "native nativesdk"
|