-
Notifications
You must be signed in to change notification settings - Fork 28
[maintenance] upgrade urllib3 and psutil #1366
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[maintenance] upgrade urllib3 and psutil #1366
Conversation
Codecov Report
@@ Coverage Diff @@
## master #1366 +/- ##
=========================================
- Coverage 74.23% 72.73% -1.5%
=========================================
Files 158 187 +29
Lines 6676 7545 +869
Branches 710 812 +102
=========================================
+ Hits 4956 5488 +532
- Misses 1506 1818 +312
- Partials 214 239 +25
Continue to review full report at Codecov.
|
moderate severity Vulnerable versions: <= 5.6.5 Patched version: 5.6.6 psutil (aka python-psutil) through 5.6.5 can have a double free. This occurs because of refcount mishandling within a while or for loop that converts system data into a Python object. GHSA-qfc5-mcwq-26q8
…arc-simcore into maintenance/upgrade-urllib3
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
✔️
What do these changes do?
Upgrades urllib3 in all repo
and CVE-2019-18874