Fixes the following security issue:
- CVE-2025-43859: A leniency in h11's parsing of line terminators in
chunked-coding message bodies can lead to request smuggling
vulnerabilities under certain conditions.
For more information, see:
- https://nvd.nist.gov/vuln/detail/CVE-2025-43859
- 114803a29c
For more details on the version bump, see:
- https://github.com/python-hyper/h11/compare/v0.14.0...v0.16.0
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
15 lines
512 B
Makefile
15 lines
512 B
Makefile
################################################################################
|
|
#
|
|
# python-h11
|
|
#
|
|
################################################################################
|
|
|
|
PYTHON_H11_VERSION = 0.16.0
|
|
PYTHON_H11_SOURCE = h11-$(PYTHON_H11_VERSION).tar.gz
|
|
PYTHON_H11_SITE = https://files.pythonhosted.org/packages/01/ee/02a2c011bdab74c6fb3c75474d40b3052059d95df7e73351460c8588d963
|
|
PYTHON_H11_SETUP_TYPE = setuptools
|
|
PYTHON_H11_LICENSE = MIT
|
|
PYTHON_H11_LICENSE_FILES = LICENSE.txt
|
|
|
|
$(eval $(python-package))
|