Files
buildroot/package/python-urllib3/python-urllib3.hash
Peter Korsgaard 888beb6c44 package/python-urllib3: security bump to version 2.6.3
Release notes:
https://github.com/urllib3/urllib3/releases/tag/2.6.3

Fixes the following vulnerability:

CVE-2026-21441: Decompression-bomb safeguards bypassed when following HTTP
redirects (streaming API)

https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
[Julien: add link to release notes]
Signed-off-by: Julien Olivain <ju.o@free.fr>
2026-01-19 21:16:56 +01:00

6 lines
331 B
Plaintext

# md5, sha256 from https://pypi.org/pypi/urllib3/json
md5 2c381874816fe551f50a2551abae62b3 urllib3-2.6.3.tar.gz
sha256 1b62b6884944a57dbe321509ab94fd4d3b307075e0c2eae991ac71ee15ad38ed urllib3-2.6.3.tar.gz
# Locally computed sha256 checksums
sha256 130e3a64d5fdd5d096a752694634a7d9df284469de86e5732100268041e3d686 LICENSE.txt