package/python-urllib3: security bump to version 1.24.2
authorPeter Korsgaard <peter@korsgaard.com>
Thu, 25 Apr 2019 07:07:22 +0000 (09:07 +0200)
committerThomas Petazzoni <thomas.petazzoni@bootlin.com>
Fri, 26 Apr 2019 07:13:52 +0000 (09:13 +0200)
commit5bc45c5e77505cc07902e6fbd99a15c9d352ded7
tree459e498272e5417432a4f25c8384fc64da9bd29f
parentef333f99a25d328a9d21d3ea26f163b1a79bfdef
package/python-urllib3: security bump to version 1.24.2

Fixes the following security issue:

- CVE-2019-11324: The urllib3 library before 1.24.2 for Python mishandles
  certain cases where the desired set of CA certificates is different from
  the OS store of CA certificates, which results in SSL connections
  succeeding in situations where a verification failure is the correct
  outcome.  This is related to use of the ssl_context, ca_certs, or
  ca_certs_dir argument.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
package/python-urllib3/python-urllib3.hash
package/python-urllib3/python-urllib3.mk