From 9575eb4dc2b87b417941f7a3f57085ef8a51a4a5 Mon Sep 17 00:00:00 2001 From: Zafer Genckaya Date: Mon, 2 Aug 2021 15:56:05 +0300 Subject: [PATCH] Fix a vulnerability issue that effects urllib3 library urllib3 (below 1.26.5) is vulnerable to Denial Of Service (DoS) --- requirements.txt | 2 +- setup.py | 2 +- templates/README_onlypackage.mustache | 2 +- templates/requirements.mustache | 2 +- templates/setup.mustache | 2 +- 5 files changed, 5 insertions(+), 5 deletions(-) diff --git a/requirements.txt b/requirements.txt index fbc47bf..34d758b 100644 --- a/requirements.txt +++ b/requirements.txt @@ -2,5 +2,5 @@ certifi >= 14.05.14 six >= 1.10 python_dateutil >= 2.5.3 setuptools >= 21.0.0 -urllib3 >= 1.26.2 +urllib3 >= 1.26.5 tenacity >= 5.0.4 diff --git a/setup.py b/setup.py index 452dc80..dfc6a1d 100644 --- a/setup.py +++ b/setup.py @@ -24,7 +24,7 @@ # prerequisite: setuptools # http://pypi.python.org/pypi/setuptools -REQUIRES = ["urllib3 >= 1.26.2", "six >= 1.10", "certifi", "python-dateutil", "setuptools >= 21.0.0", "tenacity >= 5.0.4"] +REQUIRES = ["urllib3 >= 1.26.5", "six >= 1.10", "certifi", "python-dateutil", "setuptools >= 21.0.0", "tenacity >= 5.0.4"] with open("README.md", "r") as fh: long_description = fh.read() diff --git a/templates/README_onlypackage.mustache b/templates/README_onlypackage.mustache index d0dd1f4..9523cce 100755 --- a/templates/README_onlypackage.mustache +++ b/templates/README_onlypackage.mustache @@ -25,7 +25,7 @@ This python library package is generated without supporting files like setup.py To be able to use it, you will need these dependencies in your own package that uses this library: -* urllib3 >= 1.26.2 +* urllib3 >= 1.26.5 * six >= 1.10 * certifi * python-dateutil diff --git a/templates/requirements.mustache b/templates/requirements.mustache index fbc47bf..34d758b 100755 --- a/templates/requirements.mustache +++ b/templates/requirements.mustache @@ -2,5 +2,5 @@ certifi >= 14.05.14 six >= 1.10 python_dateutil >= 2.5.3 setuptools >= 21.0.0 -urllib3 >= 1.26.2 +urllib3 >= 1.26.5 tenacity >= 5.0.4 diff --git a/templates/setup.mustache b/templates/setup.mustache index 29e8ad6..24c508e 100755 --- a/templates/setup.mustache +++ b/templates/setup.mustache @@ -18,7 +18,7 @@ VERSION = "{{packageVersion}}" # prerequisite: setuptools # http://pypi.python.org/pypi/setuptools -REQUIRES = ["urllib3 >= 1.26.2", "six >= 1.10", "certifi", "python-dateutil", "setuptools >= 21.0.0", "tenacity >= 5.0.4"] +REQUIRES = ["urllib3 >= 1.26.5", "six >= 1.10", "certifi", "python-dateutil", "setuptools >= 21.0.0", "tenacity >= 5.0.4"] {{#asyncio}} REQUIRES.append("aiohttp >= 3.0.0") {{/asyncio}}