From 691ec21ba41f98fb4ca77ed54a37071a92709ac1 Mon Sep 17 00:00:00 2001 From: Paulus Schoutsen Date: Mon, 1 Jun 2020 00:44:18 -0700 Subject: [PATCH] Mark min version of httplib2 (#36330) --- homeassistant/package_constraints.txt | 3 +++ script/gen_requirements_all.py | 3 +++ 2 files changed, 6 insertions(+) diff --git a/homeassistant/package_constraints.txt b/homeassistant/package_constraints.txt index 87f0b1feb76..ac7568b1b69 100644 --- a/homeassistant/package_constraints.txt +++ b/homeassistant/package_constraints.txt @@ -32,6 +32,9 @@ pycryptodome>=3.6.6 # Constrain urllib3 to ensure we deal with CVE-2019-11236 & CVE-2019-11324 urllib3>=1.24.3 +# Constrain httplib2 to protect against CVE-2020-11078 +httplib2>=0.18.0 + # Not needed for our supported Python versions enum34==1000000000.0.0 diff --git a/script/gen_requirements_all.py b/script/gen_requirements_all.py index fdd0c564efb..c3b7b05dc30 100755 --- a/script/gen_requirements_all.py +++ b/script/gen_requirements_all.py @@ -61,6 +61,9 @@ pycryptodome>=3.6.6 # Constrain urllib3 to ensure we deal with CVE-2019-11236 & CVE-2019-11324 urllib3>=1.24.3 +# Constrain httplib2 to protect against CVE-2020-11078 +httplib2>=0.18.0 + # Not needed for our supported Python versions enum34==1000000000.0.0