From 8159c17bdd9a6e35382bb3467cd21a2d2a72a729 Mon Sep 17 00:00:00 2001 From: Khem Raj Date: Sun, 15 Oct 2023 08:28:44 -0700 Subject: python3-urllib3: Update to 2.0.6 Only changes in this release [1] fixes CVE-2023-43804 [2] on top of 2.0.5 [1] https://github.com/urllib3/urllib3/commit/644124ecd0b6e417c527191f866daa05a5a2056d [2] https://github.com/advisories/GHSA-v845-jxx5-vc9f (From OE-Core rev: 2a9ae3ca372075868c046d3a3ba2ba9b483e986d) Signed-off-by: Khem Raj Signed-off-by: Richard Purdie --- .../python/python3-urllib3_2.0.6.bb | 24 ++++++++++++++++++++++ 1 file changed, 24 insertions(+) create mode 100644 meta/recipes-devtools/python/python3-urllib3_2.0.6.bb (limited to 'meta/recipes-devtools/python/python3-urllib3_2.0.6.bb') diff --git a/meta/recipes-devtools/python/python3-urllib3_2.0.6.bb b/meta/recipes-devtools/python/python3-urllib3_2.0.6.bb new file mode 100644 index 0000000000..cd2a9dd4ef --- /dev/null +++ b/meta/recipes-devtools/python/python3-urllib3_2.0.6.bb @@ -0,0 +1,24 @@ +SUMMARY = "Python HTTP library with thread-safe connection pooling, file post support, sanity friendly, and more" +HOMEPAGE = "https://github.com/shazow/urllib3" +LICENSE = "MIT" +LIC_FILES_CHKSUM = "file://LICENSE.txt;md5=52d273a3054ced561275d4d15260ecda" + +SRC_URI[sha256sum] = "b19e1a85d206b56d7df1d5e683df4a7725252a964e3993648dd0fb5a1c157564" + +inherit pypi python_hatchling + +RDEPENDS:${PN} += "\ + ${PYTHON_PN}-certifi \ + ${PYTHON_PN}-cryptography \ + ${PYTHON_PN}-email \ + ${PYTHON_PN}-idna \ + ${PYTHON_PN}-json \ + ${PYTHON_PN}-netclient \ + ${PYTHON_PN}-pyopenssl \ + ${PYTHON_PN}-threading \ + ${PYTHON_PN}-logging \ +" + +CVE_PRODUCT = "urllib3" + +BBCLASSEXTEND = "native nativesdk" -- cgit v1.2.3-54-g00ecf