mirror of
https://git.yoctoproject.org/poky
synced 2026-07-31 10:17:45 +02:00
a184998193
Applies the upstream fix [1] referenced in [2] and addresses the
sensitive-header redirect handling issue in proxied low-level urllib3 requests.
[1] 5ec0de499b
[2] https://ubuntu.com/security/CVE-2026-44431
References:
https://nvd.nist.gov/vuln/detail/CVE-2026-44431
(From OE-Core rev: a7f0523f5ff7a8fef611d30ad41b12d73eecec8c)
Signed-off-by: Sudhir Dumbhare <sudumbha@cisco.com>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
33 lines
848 B
BlitzBasic
33 lines
848 B
BlitzBasic
SUMMARY = "Python HTTP library with thread-safe connection pooling, file post support, sanity friendly, and more"
|
|
HOMEPAGE = "https://github.com/shazow/urllib3"
|
|
LICENSE = "MIT"
|
|
LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=52d273a3054ced561275d4d15260ecda"
|
|
|
|
SRC_URI[sha256sum] = "dd505485549a7a552833da5e6063639d0d177c04f23bc3864e41e5dc5f612168"
|
|
|
|
inherit pypi python_hatchling
|
|
|
|
SRC_URI += " \
|
|
file://CVE-2025-50181.patch \
|
|
file://CVE-2025-66418.patch \
|
|
file://CVE-2025-66471.patch \
|
|
file://CVE-2026-21441.patch \
|
|
file://CVE-2026-44431.patch \
|
|
"
|
|
|
|
RDEPENDS:${PN} += "\
|
|
python3-certifi \
|
|
python3-cryptography \
|
|
python3-email \
|
|
python3-idna \
|
|
python3-json \
|
|
python3-netclient \
|
|
python3-pyopenssl \
|
|
python3-threading \
|
|
python3-logging \
|
|
"
|
|
|
|
CVE_PRODUCT = "urllib3"
|
|
|
|
BBCLASSEXTEND = "native nativesdk"
|