Skip to content

Commit addace2

Browse files
authored
HBASE-26821 Bump dependencies in /dev-support/git-jira-release-audit (#4193)
Bumps urllib3 from 1.25.8 to 1.26.5 to resolve two dependabot warnings CRLF injection (Moderate) urllib3 (pip) · dev-support/git-jira-release-audit/requirements.txt Catastrophic backtracking in URL authority parser when passed URL containing many @ characters (High) urllib3 (pip) · dev-support/git-jira-release-audit/requirements.txt Bumps cryptography from 2.8 to 3.3.2 to resolve one dependabot warning RSA decryption vulnerable to Bleichenbacher timing vulnerability (Moderate) cryptography (pip) · dev-support/git-jira-release-audit/requirements.txt Signed-off-by: Duo Zhang <zhangduo@apache.org> Signed-off-by: Nick Dimiduk <ndimiduk@apache.org> Signed-off-by: Wei-Chiu Chuang <weichiu@apache.org>
1 parent e5dbbd2 commit addace2

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

dev-support/git-jira-release-audit/requirements.txt

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ blessed==1.17.0
1919
certifi==2019.11.28
2020
cffi==1.13.2
2121
chardet==3.0.4
22-
cryptography==2.8
22+
cryptography=3.3.2
2323
defusedxml==0.6.0
2424
enlighten==1.4.0
2525
gitdb2==2.0.6
@@ -35,5 +35,5 @@ requests-oauthlib==1.3.0
3535
requests-toolbelt==0.9.1
3636
six==1.14.0
3737
smmap2==2.0.5
38-
urllib3==1.25.8
38+
urllib3==1.26.5
3939
wcwidth==0.1.8

0 commit comments

Comments
 (0)