Skip to content

Version 2.8.905
Compare
Choose a tag to compare
@Ousret Ousret released this 04 Aug 05:56
· 29 commits to main since this release
2.8.905
8a03252
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Learn about vigilant mode.

2.8.905 (2024-08-04)

  • Fixed wrong upgrade attempt to QUIC when using a SOCKS proxy. Any usage of a proxy disable HTTP/3 over QUIC as per documented.
    until proper support is implemented in a next minor version.
  • Backported upstream urllib3 urllib3#3434: util/ssl: make code resilient to missing hash functions.
    In certain environments such as in a FIPS enabled system, certain algorithms such as md5 may be unavailable. Due
    to the importing of such a module on a system where it is unavailable, urllib3(-future) will crash and is unusable.
    urllib3#3434
  • Backported upstream urllib3 GHSA-34jh-p97f-mpxf: Strip Proxy-Authorization header on redirects.
    Added the Proxy-Authorization header to the list of headers to strip from requests when redirecting to a different host.
    As before, different headers can be set via Retry.remove_headers_on_redirect.
  • Fixed state-machine desync on a rare scenario when uploading a body using HTTP/3 over QUIC.
Assets 5
Loading