DeepBox

DeepBox copied to clipboard

Bumps [ecdsa](https://github.com/warner/python-ecdsa) from 0.13 to 0.13.3. Release notes *Sourced from [ecdsa's releases](https://github.com/warner/python-ecdsa/releases).* > ## ecdsa 0.13.3 > Fix CVE-2019-14853 - possible DoS caused by malformed signature decoding > Fix CVE-2019-14859...

dependabot[bot]

Bumps [psutil](https://github.com/giampaolo/psutil) from 1.2.1 to 5.6.6. Changelog Sourced from psutil's changelog. 5.6.6 2019-11-25 Bug fixes 1179_: [Linux] Process cmdline() now takes into account misbehaving processes renaming the command line and...

dependabot[bot]

Bumps [httplib2](https://github.com/httplib2/httplib2) from 0.8 to 0.19.0. Changelog Sourced from httplib2's changelog. 0.19.0 auth: parse headers using pyparsing instead of regexp httplib2/httplib2#182 auth: WSSE token needs to be string not bytes...

dependabot[bot]

Bumps [jinja2](https://github.com/pallets/jinja) from 2.8 to 2.11.3. Release notes Sourced from jinja2's releases. 2.11.3 This contains a fix for a speed issue with the urlize filter. urlize is likely to be...

dependabot[bot]

Bumps [pygments](https://github.com/pygments/pygments) from 2.0.2 to 2.7.4. Release notes Sourced from pygments's releases. 2.7.4 Updated lexers: Apache configurations: Improve handling of malformed tags (#1656) CSS: Add support for variables (#1633, #1666)...

dependabot[bot]

Bumps [rsa](https://github.com/sybrenstuvel/python-rsa) from 3.1.4 to 4.7. Changelog Sourced from rsa's changelog. Version 4.7 - released 2021-01-10 Fix #165: CVE-2020-25658 - Bleichenbacher-style timing oracle in PKCS#1 v1.5 decryption code Add padding...

dependabot[bot]

Bumps [urllib3](https://github.com/urllib3/urllib3) from 1.7.1 to 1.26.5. Release notes Sourced from urllib3's releases. 1.26.5 :warning: IMPORTANT: urllib3 v2.0 will drop support for Python 2: Read more in the v2.0 Roadmap Fixed...

dependabot[bot]

Bumps [babel](https://github.com/python-babel/babel) from 2.0 to 2.9.1. Release notes Sourced from babel's releases. Version 2.9.1 Bugfixes The internal locale-data loading functions now validate the name of the locale file to be...

dependabot[bot]

Bumps [ipython](https://github.com/ipython/ipython) from 4.0.0 to 7.16.3. Commits d43c7c7 release 7.16.3 5fa1e40 Merge pull request from GHSA-pq7m-3gw7-gq5x 8df8971 back to dev 9f477b7 release 7.16.2 138f266 bring back release helper from master...

dependabot[bot]

Bumps [paramiko](https://github.com/paramiko/paramiko) from 1.15.2 to 2.10.1. Commits 286bd9f Cut 2.10.1 4c491e2 Fix CVE re: PKey.write_private_key chmod race aa3cc6f Cut 2.10.0 e50e19f Fix up changelog entry with real links 02ad67e Helps...

dependabot[bot]