Browse Source

Require urllib>=1.23, because of CVE-2018-20060

Jelmer Vernooij 6 years ago
parent
commit
8bbabacd26
2 changed files with 3 additions and 3 deletions
  1. 1 1
      requirements.txt
  2. 2 2
      setup.py

+ 1 - 1
requirements.txt

@@ -1 +1 @@
-urllib3[secure]==1.22
+urllib3[secure]>=1.23

+ 2 - 2
setup.py

@@ -77,9 +77,9 @@ setup_kwargs = {}
 if has_setuptools:
     setup_kwargs['extras_require'] = {
         'fastimport': ['fastimport'],
-        'https': ['urllib3[secure]>=1.21'],
+        'https': ['urllib3[secure]>=1.23'],
         }
-    setup_kwargs['install_requires'] = ['urllib3>=1.21', 'certifi']
+    setup_kwargs['install_requires'] = ['urllib3>=1.23', 'certifi']
     setup_kwargs['include_package_data'] = True
     setup_kwargs['test_suite'] = 'dulwich.tests.test_suite'
     setup_kwargs['tests_require'] = tests_require