New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Allow urllib3 1.24 #4836

Closed

ofek wants to merge 1 commit into psf:master from ofek:patch-2

Contributor

ofek commented Oct 17, 2018

A new version of has been released. Most notably it ships urllib3/urllib3#1346

That, plus #4718 on our side will resolve https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18074. We just need to release after merging this.

cc @sigmavirus24 @nateprewitt


          Allow urllib3 1.24

318f906

Member

nateprewitt commented Oct 17, 2018 •

edited

Hi @ofek, we’ve got comms available in #4830 and the patch for 2.20 is staged in #4835.

nateprewitt closed this

ofek deleted the patch-2 branch

October 17, 2018 19:26

ofek mentioned this pull request

Allow requests 2.20.x for CVE fix docker/compose#6289

Merged

github-actions bot locked as resolved and limited conversation to collaborators

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.