Fix a vulnerability issue that effects urllib3 library

urllib3 (below 1.26.5) is vulnerable to Denial Of Service (DoS)
opsgenie · Aug 2, 2021 · 9575eb4 · 9575eb4
1 parent 15d1bde
commit 9575eb4
Show file tree

Hide file tree

Showing 5 changed files with 5 additions and 5 deletions.
diff --git a/requirements.txt b/requirements.txt
@@ -2,5 +2,5 @@ certifi >= 14.05.14
 six >= 1.10
 python_dateutil >= 2.5.3
 setuptools >= 21.0.0
-urllib3 >= 1.26.2
+urllib3 >= 1.26.5
 tenacity >= 5.0.4
diff --git a/setup.py b/setup.py
@@ -24,7 +24,7 @@
 # prerequisite: setuptools
 # http://pypi.python.org/pypi/setuptools
 
-REQUIRES = ["urllib3 >= 1.26.2", "six >= 1.10", "certifi", "python-dateutil", "setuptools >= 21.0.0", "tenacity >= 5.0.4"]
+REQUIRES = ["urllib3 >= 1.26.5", "six >= 1.10", "certifi", "python-dateutil", "setuptools >= 21.0.0", "tenacity >= 5.0.4"]
 
 with open("README.md", "r") as fh:
     long_description = fh.read()

diff --git a/templates/README_onlypackage.mustache b/templates/README_onlypackage.mustache
@@ -25,7 +25,7 @@ This python library package is generated without supporting files like setup.py
 
 To be able to use it, you will need these dependencies in your own package that uses this library:
 
-* urllib3 >= 1.26.2
+* urllib3 >= 1.26.5
 * six >= 1.10
 * certifi
 * python-dateutil

diff --git a/templates/requirements.mustache b/templates/requirements.mustache
@@ -2,5 +2,5 @@ certifi >= 14.05.14
 six >= 1.10
 python_dateutil >= 2.5.3
 setuptools >= 21.0.0
-urllib3 >= 1.26.2
+urllib3 >= 1.26.5
 tenacity >= 5.0.4
diff --git a/templates/setup.mustache b/templates/setup.mustache
@@ -18,7 +18,7 @@ VERSION = "{{packageVersion}}"
 # prerequisite: setuptools
 # http://pypi.python.org/pypi/setuptools
 
-REQUIRES = ["urllib3 >= 1.26.2", "six >= 1.10", "certifi", "python-dateutil", "setuptools >= 21.0.0", "tenacity >= 5.0.4"]
+REQUIRES = ["urllib3 >= 1.26.5", "six >= 1.10", "certifi", "python-dateutil", "setuptools >= 21.0.0", "tenacity >= 5.0.4"]
 {{#asyncio}}
 REQUIRES.append("aiohttp >= 3.0.0")
 {{/asyncio}}