Matt Weber a6af42abe2 package/python-urllib3: security bump to 1.25.9 ...

Fixes CVE-2020-7212 (1.25.2 - 1.25.7)
The _encode_invalid_chars function does not remove duplicate percent
encodings in the _percent_encodings array, which combined with the
normalization step could take O(N^2) time to compute for a URL of
length N. This results in a marginally higher CPU consumption
compared to the potential linear time achieved by deduplicating
the _percent_encodings array.

CC: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Matthew Weber <matthew.weber@rockwellcollins.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit fc57db8401b806494ceeb20e4c91d2be8a8456eb)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>

2020-07-22 09:03:18 +02:00

..

Config.in

…

python-urllib3.hash

…

python-urllib3.mk

…