ab2b4f5a06
For release note, see:
https://github.com/urllib3/urllib3/releases/tag/2.5.0
This fixes the following vulnerabilities:
- CVE-2025-50181:
urllib3 redirects are not disabled when retries are disabled on
PoolManager instantiation
- CVE-2025-50182:
urllib3 does not control redirects in browsers and Node.js
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
[Julien: add link to release note in commit log]
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 7006854ce1)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>
20 lines
760 B
Makefile
20 lines
760 B
Makefile
################################################################################
|
|
#
|
|
# python-urllib3
|
|
#
|
|
################################################################################
|
|
|
|
PYTHON_URLLIB3_VERSION = 2.5.0
|
|
PYTHON_URLLIB3_SOURCE = urllib3-$(PYTHON_URLLIB3_VERSION).tar.gz
|
|
PYTHON_URLLIB3_SITE = https://files.pythonhosted.org/packages/15/22/9ee70a2574a4f4599c47dd506532914ce044817c7752a79b6a51286319bc
|
|
PYTHON_URLLIB3_LICENSE = MIT
|
|
PYTHON_URLLIB3_LICENSE_FILES = LICENSE.txt
|
|
PYTHON_URLLIB3_CPE_ID_VENDOR = python
|
|
PYTHON_URLLIB3_CPE_ID_PRODUCT = urllib3
|
|
PYTHON_URLLIB3_SETUP_TYPE = hatch
|
|
PYTHON_URLLIB3_DEPENDENCIES = host-python-hatch-vcs
|
|
HOST_PYTHON_URLLIB3_DEPENDENCIES = host-python-hatch-vcs
|
|
|
|
$(eval $(python-package))
|
|
$(eval $(host-python-package))
|