Addressed CVE-2023-32681 by upgrading requests version

jeffshurtliff · May 23, 2023 · 2af1117 · 2af1117
1 parent a3e67b3
commit 2af1117
Show file tree

Hide file tree

Showing 5 changed files with 40 additions and 42 deletions.
diff --git a/docs/changelog.rst b/docs/changelog.rst
@@ -3,6 +3,23 @@ Change Log
 ##########
 This page documents the additions, changes, fixes, deprecations and removals made in each release.
 
+******
+v5.2.2
+******
+**Release Date: 2023-05-23**
+
+Added
+=====
+
+General
+-------
+* Updated ``requests`` to v2.31.0 to address the security vulnerability CVE-2023-32681.
+* Updated the ``pyproject.toml`` and ``poetry.lock`` files accordingly.
+
+|
+
+-----
+
 ******
 v5.2.1
 ******

diff --git a/khoros/utils/version.py b/khoros/utils/version.py
@@ -6,7 +6,7 @@
 :Example:           ``__version__ = version.get_full_version()``
 :Created By:        Jeff Shurtliff
 :Last Modified:     Jeff Shurtliff
-:Modified Date:     02 Jan 2023
+:Modified Date:     23 May 2023
 """
 
 import json
@@ -15,7 +15,7 @@
 from . import log_utils
 
 # Define special and global variables
-__version__ = "5.2.1"
+__version__ = "5.2.2"
 latest_version_reported = False
 logger = log_utils.initialize_logging(__name__)
 

diff --git a/poetry.lock b/poetry.lock
diff --git a/pyproject.toml b/pyproject.toml
@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "khoros"
-version = "5.2.1"
+version = "5.2.2"
 description = "Useful tools and utilities to assist in managing a Khoros Communities (formerly Lithium) environment."
 authors = ["Jeff Shurtliff <jeff.shurtliff@rsa.com>"]
 license = "MIT"
@@ -12,7 +12,7 @@ defusedxml = ">=0.7.1"
 pytest = {version = ">=7.2.0", markers = "python_version > \"3.7\""}
 pyyaml = ">=5.3.1"
 urllib3 = ">=1.26.2,<1.27.0"
-requests = ">=2.23.0"
+requests = {version = ">=2.31.0", markers = "python_version > \"3.6\""}
 setuptools = {version = ">=65.5.1,<65.6.0", markers = "python_version > \"3.6\""}
 sphinx = ">=5.3.0"
 sphinxcontrib-applehelp = ">=1.0.2"

diff --git a/requirements.txt b/requirements.txt
@@ -3,7 +3,8 @@ pytest>=7.0.1; python_version <= '3.7'
 pytest>=7.2.0; python_version > '3.7'
 PyYAML>=5.3.1
 urllib3~=1.26.2
-requests>=2.23.0
+requests>=2.23.0; python_version == '3.6'
+requests>=2.31.0; python_version > '3.6'
 setuptools~=59.6.0; python_version == '3.6'
 setuptools~=65.5.1; python_version > '3.6'
 Sphinx>=5.3.0