mirror of
https://git.yoctoproject.org/poky
synced 2026-02-26 11:29:40 +01:00
Include the patch linked in the NVD report : https://nvd.nist.gov/vuln/detail/CVE-2026-21441 (From OE-Core rev: bf85dff7bf4340a691df3da21f04a651fff11a17) Signed-off-by: Adarsh Jagadish Kamini <adarsh.jagadish.kamini@est.tech> Signed-off-by: Yoann Congal <yoann.congal@smile.fr> Signed-off-by: Paul Barker <paul@pbarker.dev> Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
32 lines
814 B
BlitzBasic
32 lines
814 B
BlitzBasic
SUMMARY = "Python HTTP library with thread-safe connection pooling, file post support, sanity friendly, and more"
|
|
HOMEPAGE = "https://github.com/shazow/urllib3"
|
|
LICENSE = "MIT"
|
|
LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=52d273a3054ced561275d4d15260ecda"
|
|
|
|
SRC_URI[sha256sum] = "dd505485549a7a552833da5e6063639d0d177c04f23bc3864e41e5dc5f612168"
|
|
|
|
inherit pypi python_hatchling
|
|
|
|
SRC_URI += " \
|
|
file://CVE-2025-50181.patch \
|
|
file://CVE-2025-66418.patch \
|
|
file://CVE-2025-66471.patch \
|
|
file://CVE-2026-21441.patch \
|
|
"
|
|
|
|
RDEPENDS:${PN} += "\
|
|
python3-certifi \
|
|
python3-cryptography \
|
|
python3-email \
|
|
python3-idna \
|
|
python3-json \
|
|
python3-netclient \
|
|
python3-pyopenssl \
|
|
python3-threading \
|
|
python3-logging \
|
|
"
|
|
|
|
CVE_PRODUCT = "urllib3"
|
|
|
|
BBCLASSEXTEND = "native nativesdk"
|