86f86a724b
Fixes the following security vulnerability: CVE-2019-9740: An issue was discovered in urllib2 in Python 2.x through 2.7.16 and urllib in Python 3.x through 3.7.3. CRLF injection is possible if the attacker controls a url parameter, as demonstrated by the first argument to urllib.request.urlopen with \r\n (specifically in the query string after a ? character) followed by an HTTP header or a Redis command. Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
15 lines
548 B
Makefile
15 lines
548 B
Makefile
################################################################################
|
|
#
|
|
# python-urllib3
|
|
#
|
|
################################################################################
|
|
|
|
PYTHON_URLLIB3_VERSION = 1.24.3
|
|
PYTHON_URLLIB3_SOURCE = urllib3-$(PYTHON_URLLIB3_VERSION).tar.gz
|
|
PYTHON_URLLIB3_SITE = https://files.pythonhosted.org/packages/8a/3c/1bb7ef6c435dea026f06ed9f3ba16aa93f9f4f5d3857a51a35dfa00882f1
|
|
PYTHON_URLLIB3_LICENSE = MIT
|
|
PYTHON_URLLIB3_LICENSE_FILES = LICENSE.txt
|
|
PYTHON_URLLIB3_SETUP_TYPE = setuptools
|
|
|
|
$(eval $(python-package))
|