mirror of
https://github.com/godotengine/buildroot.git
synced 2026-01-22 12:51:25 +03:00
fa75b09956
Fixes CVE-2018-18074: The Requests package before 2.20.0 for Python sends an
HTTP Authorization header to an http URI upon receiving a same-hostname
https-to-http redirect, which makes it easier for remote attackers to
discover credentials by sniffing the network.
LICENSE update: replaced http address with https.
Signed-off-by: Asaf Kahlon <asafka7@gmail.com>
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit 42bebd1e7c)
[Peter: mention security impact]
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
15 lines
560 B
Makefile
15 lines
560 B
Makefile
################################################################################
|
|
#
|
|
# python-requests
|
|
#
|
|
################################################################################
|
|
|
|
PYTHON_REQUESTS_VERSION = 2.20.0
|
|
PYTHON_REQUESTS_SOURCE = requests-$(PYTHON_REQUESTS_VERSION).tar.gz
|
|
PYTHON_REQUESTS_SITE = https://files.pythonhosted.org/packages/97/10/92d25b93e9c266c94b76a5548f020f3f1dd0eb40649cb1993532c0af8f4c
|
|
PYTHON_REQUESTS_SETUP_TYPE = setuptools
|
|
PYTHON_REQUESTS_LICENSE = Apache-2.0
|
|
PYTHON_REQUESTS_LICENSE_FILES = LICENSE
|
|
|
|
$(eval $(python-package))
|