mirrors/poky
1
0
Fork 0
mirror of https://git.yoctoproject.org/poky synced 2026-07-31 19:17:45 +02:00
Code Issues Packages Projects Releases Wiki Activity

python3-urllib3: fix CVE-2026-44431

Browse Source 
Applies the upstream fix [1] referenced in [2] and addresses the
sensitive-header redirect handling issue in proxied low-level urllib3 requests.

[1] 5ec0de499b
[2] https://ubuntu.com/security/CVE-2026-44431

References:
https://nvd.nist.gov/vuln/detail/CVE-2026-44431

(From OE-Core rev: a7f0523f5ff7a8fef611d30ad41b12d73eecec8c)

Signed-off-by: Sudhir Dumbhare <sudumbha@cisco.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
This commit is contained in:
Sudhir Dumbhare
2026-06-01 11:11:58 -07:00
committed by Paul Barker
parent 3d80d019e6
commit a184998193
2 changed files with 164 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
meta/recipes-devtools/python/python3-urllib3_2.2.2.bb
View File

@@ -12,6 +12,7 @@ SRC_URI += " \
file://CVE-2025-66418.patch \
file://CVE-2025-66471.patch \
file://CVE-2026-21441.patch \
file://CVE-2026-44431.patch \
"
RDEPENDS:${PN} += "\