branch master updated: gnu: python-urllib3: Update to 1.26.4 [fixes CVE-2021-28363].

[guix-commits]

This is an automated email from the git hooks/post-receive script.

lle_bout pushed a commit to branch master
in repository guix.

The following commit(s) were added to refs/heads/master by this push:
     new a01bfa7  gnu: python-urllib3: Update to 1.26.4 [fixes CVE-2021-28363].
a01bfa7 is described below

commit a01bfa7deed1d556fc75ab5588517442054bc5a9
Author: Léo Le Bouter <lle-bout@zaclys.net>
AuthorDate: Tue Mar 16 08:56:51 2021 +0100

    gnu: python-urllib3: Update to 1.26.4 [fixes CVE-2021-28363].
    
    * gnu/packages/python-web.scm (python-urllib3/fixed): New variable.
    (python-urllib3)[replacement]: Graft.
---
 gnu/packages/python-web.scm | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/gnu/packages/python-web.scm b/gnu/packages/python-web.scm
index e327b3b..fe79537 100644
--- a/gnu/packages/python-web.scm
+++ b/gnu/packages/python-web.scm
@@ -2726,6 +2726,7 @@ authenticated session objects providing things like 
keep-alive.")
         (sha256
          (base32
           "024yldjwjavps39yb77sc422z8fa9bn20wcqrcncjwrqjab8y60r"))))
+    (replacement python-urllib3/fixed)
     (build-system python-build-system)
     (arguments `(#:tests? #f))
     (propagated-inputs
@@ -2744,6 +2745,17 @@ supports url redirection and retries, and also gzip and 
deflate decoding.")
     (properties `((python2-variant . ,(delay python2-urllib3))))
     (license license:expat)))
 
+(define python-urllib3/fixed
+  (package/inherit python-urllib3
+    (version "1.26.4")
+    (source
+     (origin
+       (method url-fetch)
+       (uri (pypi-uri "urllib3" version))
+       (sha256
+        (base32
+         "0dw9w9bs3hmr5dp3r3h43jyzzb1g1046ag7lj8pqf58i4kvj3c77"))))))
+
 ;; Some software requires an older version of urllib3, notably Docker.
 (define-public python-urllib3-1.24
   (package (inherit python-urllib3)