mirror of
https://gitlab.com/buildroot.org/buildroot.git
synced 2026-08-01 21:23:51 -09:00
Fixes the following security issues: CVE-2026-44431: Sensitive headers forwarded across origins in proxied low-level redirects https://github.com/urllib3/urllib3/security/advisories/GHSA-qccp-gfcp-xxvc CVE-2026-44432: Decompression-bomb safeguards bypassed in parts of the streaming API https://github.com/urllib3/urllib3/security/advisories/GHSA-mf9v-mfxr-j63j For more details, see the release notes: https://urllib3.readthedocs.io/en/stable/changelog.html#id1 Signed-off-by: Peter Korsgaard <peter@korsgaard.com> Signed-off-by: Julien Olivain <ju.o@free.fr>