From 737bf1b82dabbc87fdaac0dee3336317e02ee841 Mon Sep 17 00:00:00 2001 From: Robin Garen Aaberg Date: Sat, 20 Apr 2019 01:22:10 +0200 Subject: [PATCH] Make sure urllib3 is using a version without known vulnerabilities. see: https://github.com/srib-dev/podkast.srib.no/network/alert/requirements_prod.txt/urllib3/open --- requirements_dev.txt | 4 ++-- requirements_prod.txt | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/requirements_dev.txt b/requirements_dev.txt index 88dd885..650d0e0 100644 --- a/requirements_dev.txt +++ b/requirements_dev.txt @@ -12,8 +12,8 @@ lxml==3.8.0 podgen==1.0.0 python-dateutil==2.6.1 pytz==2017.2 -requests==2.18.1 +requests>=2.18.1 six==1.10.0 sqlparse==0.2.3 tinytag==0.18.0 -urllib3==1.21.1 +urllib3>=1.24.2 diff --git a/requirements_prod.txt b/requirements_prod.txt index 08a0c48..c852a76 100644 --- a/requirements_prod.txt +++ b/requirements_prod.txt @@ -16,5 +16,5 @@ requests==2.18.1 six==1.10.0 sqlparse==0.2.3 tinytag==0.18.0 -urllib3==1.21.1 -mysqlclient==1.3.10 \ No newline at end of file +urllib3>=1.24.2 +mysqlclient==1.3.10