For release note, see: https://github.com/urllib3/urllib3/releases/tag/2.5.0 This fixes the following vulnerabilities: - CVE-2025-50181: urllib3 redirects are not disabled when retries are disabled on PoolManager instantiation - CVE-2025-50182: urllib3 does not control redirects in browsers and Node.js Signed-off-by: Titouan Christophe <titouan.christophe@mind.be> [Julien: add link to release note in commit log] Signed-off-by: Julien Olivain <ju.o@free.fr>
20 lines
760 B
Makefile
20 lines
760 B
Makefile
################################################################################
|
|
#
|
|
# python-urllib3
|
|
#
|
|
################################################################################
|
|
|
|
PYTHON_URLLIB3_VERSION = 2.5.0
|
|
PYTHON_URLLIB3_SOURCE = urllib3-$(PYTHON_URLLIB3_VERSION).tar.gz
|
|
PYTHON_URLLIB3_SITE = https://files.pythonhosted.org/packages/15/22/9ee70a2574a4f4599c47dd506532914ce044817c7752a79b6a51286319bc
|
|
PYTHON_URLLIB3_LICENSE = MIT
|
|
PYTHON_URLLIB3_LICENSE_FILES = LICENSE.txt
|
|
PYTHON_URLLIB3_CPE_ID_VENDOR = python
|
|
PYTHON_URLLIB3_CPE_ID_PRODUCT = urllib3
|
|
PYTHON_URLLIB3_SETUP_TYPE = hatch
|
|
PYTHON_URLLIB3_DEPENDENCIES = host-python-hatch-vcs
|
|
HOST_PYTHON_URLLIB3_DEPENDENCIES = host-python-hatch-vcs
|
|
|
|
$(eval $(python-package))
|
|
$(eval $(host-python-package))
|