Update to 1.26.19 to fix CVE-2024-37891 (rhbz#2292790)

This commit is contained in:
Lumir Balhar 2024-06-26 14:29:39 +02:00
commit e25dc5dd23
3 changed files with 6 additions and 2 deletions

1
.gitignore vendored
View file

@ -40,3 +40,4 @@
/urllib3-1.26.16.tar.gz
/urllib3-1.26.17.tar.gz
/urllib3-1.26.18.tar.gz
/urllib3-1.26.19.tar.gz

View file

@ -7,7 +7,7 @@
%endif
Name: python-urllib3
Version: 1.26.18
Version: 1.26.19
Release: 1%{?dist}
Summary: HTTP library with thread-safe connection pooling, file post, and more
@ -154,6 +154,9 @@ ignore="${ignore-} --ignore=test/test_no_ssl.py"
%changelog
* Wed Jun 26 2024 Lumír Balhar <lbalhar@redhat.com> - 1.26.19-1
- Update to 1.26.19 to fix CVE-2024-37891 (rhbz#2292790)
* Tue Oct 17 2023 Maxwell G <maxwell@gtmx.me> - 1.26.18-1
- Update to 1.26.18.
- Mitigates CVE-2023-45803 / GHSA-g4mx-q9vg-27p4.

View file

@ -1 +1 @@
SHA512 (urllib3-1.26.18.tar.gz) = 62c0af4b11e797a85420ef3f0888f2e608334329eddd88b9fe563b5437189cbea8dbbcd53f999557d9828fcf4bf03b8ca9f6e3d401533bc4ae8ff96e3ece1557
SHA512 (urllib3-1.26.19.tar.gz) = 6b72012dbd85434b2441229cbdea2a94583693f904dde349780e1290d581c8a5e10fe00a287a032ed1276349d0078b530f16a133e0f164dcea18105fa3dec79a