mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-08-01 21:23:51 -09:00
66066ece80
Fixes the following security issues:
CVE-2026-44431: Sensitive headers forwarded across origins in proxied
low-level redirects
https://github.com/urllib3/urllib3/security/advisories/GHSA-qccp-gfcp-xxvc
CVE-2026-44432: Decompression-bomb safeguards bypassed in parts of the
streaming API
https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j
For more details, see the release notes:
https://urllib3.readthedocs.io/en/stable/changelog.html#id1
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Julien Olivain <ju.o@free.fr>
(cherry picked from commit 8b606d9074)
Signed-off-by: Thomas Perale <thomas.perale@mind.be>