Files
poky/meta/recipes-devtools/python/python3-urllib3_2.2.2.bb
Adarsh Jagadish Kamini 54e7eb5951 python-urllib3: Backport fix for CVE-2026-21441
Include the patch linked in the NVD report : https://nvd.nist.gov/vuln/detail/CVE-2026-21441
(From OE-Core rev: bf85dff7bf4340a691df3da21f04a651fff11a17)

Signed-off-by: Adarsh Jagadish Kamini <adarsh.jagadish.kamini@est.tech>
Signed-off-by: Yoann Congal <yoann.congal@smile.fr>
Signed-off-by: Paul Barker <paul@pbarker.dev>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
2026-02-16 09:52:35 +00:00

32 lines
814 B
BlitzBasic

SUMMARY = "Python HTTP library with thread-safe connection pooling, file post support, sanity friendly, and more"
HOMEPAGE = "https://github.com/shazow/urllib3"
LICENSE = "MIT"
LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=52d273a3054ced561275d4d15260ecda"
SRC_URI[sha256sum] = "dd505485549a7a552833da5e6063639d0d177c04f23bc3864e41e5dc5f612168"
inherit pypi python_hatchling
SRC_URI += " \
file://CVE-2025-50181.patch \
file://CVE-2025-66418.patch \
file://CVE-2025-66471.patch \
file://CVE-2026-21441.patch \
"
RDEPENDS:${PN} += "\
python3-certifi \
python3-cryptography \
python3-email \
python3-idna \
python3-json \
python3-netclient \
python3-pyopenssl \
python3-threading \
python3-logging \
"
CVE_PRODUCT = "urllib3"
BBCLASSEXTEND = "native nativesdk"