[Midnightbsd-cvs] [MidnightBSD/mports] aa0e0e: net/py-urllib3: update to 2.8.0 (CVE-2026-97688)

[Lucas Holt]

  Branch: refs/heads/net/py-urllib3
  Home:   https://github.com/MidnightBSD/mports
  Commit: aa0e0ec5ca4d35b15d06983d04d5c69b24a06a06
      https://github.com/MidnightBSD/mports/commit/aa0e0ec5ca4d35b15d06983d04d5c69b24a06a06
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2026-09-30 (Wed, 30 Sep 2026)

  Changed paths:
    M net/py-urllib3/Makefile
    M net/py-urllib3/distinfo

  Log Message:
  -----------
  net/py-urllib3: update to 2.8.0 (CVE-2026-97688)

urllib3 2.6.2 through 2.7.x can loop forever in HTTPResponse.stream() /
read_chunked() when a server sends a chunked Deflate response with
trailing bytes after the compressed stream (GHSA-gh4c-6fx4-qh6g).
Fixed upstream in 2.8.0.

Fixes: #1657

AI-Assisted-by: Claude Opus 5.5 <noreply at anthropic.com>
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply at anthropic.com>
Signed-off-by: Lucas Holt <luke at foolishgames.com>



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/mports/settings/notifications