-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-9a652403b1 2026-09-29 00:15:02.251208+00:00 --------------------------------------------------------------------------------
Name : python-urllib3 Product : Fedora 45 Version : 2.8.0 Release : 1.fc45 URL : https://github.com/urllib3/urllib3 Summary : HTTP library with thread-safe connection pooling, file post, and more Description : urllib3 is a powerful, user-friendly HTTP client for Python. urllib3 brings many critical features that are missing from the Python standard libraries: ⢠Thread safety. ⢠Connection pooling. ⢠Client-side SSL/TLS verification. ⢠File uploads with multipart encoding. ⢠Helpers for retrying requests and dealing with HTTP redirects. ⢠Support for gzip, deflate, brotli, and zstd encoding. ⢠Proxy support for HTTP and SOCKS. ⢠100% test coverage. -------------------------------------------------------------------------------- Update Information: Update python-urllib3 to version 2.8.0, fixing three security issues: The TLS configuration for HTTPS proxies could be ignored or overridden. (Rated high severity by upstream, GHSA-8988-9cw3-xx77) HTTPResponse.stream() and read_chunked() could buffer a chunk-size line of unbounded length in memory. (Rated high severity by upstream, GHSA- vxq7-64xx-v4gw) Chunked Deflate streaming could enter an infinite loop. (Rated medium severity by upstream, GHSA-gh4c-6fx4-qh6g) -------------------------------------------------------------------------------- ChangeLog: * Thu Sep 17 2026 Benjamin A. Beasley <[email protected]> - 2.8.0-1 - Update to version 2.8.0 (close RHBZ#2534200) -------------------------------------------------------------------------------- References: [ 1 ] Bug #2534200 - python-urllib3-2.8.0 is available https://bugzilla.redhat.com/show_bug.cgi?id=2534200 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-9a652403b1' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------
-- _______________________________________________ package-announce mailing list -- [email protected] To unsubscribe send an email to [email protected] Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/[email protected] Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new
