# HG changeset patch # User Mads Kiilerich # Date 1427312865 -3600 # Node ID 65c5e70a1d0c1861d7dc835f204d132342920da2 # Parent c04c2734e32f7533cf4dc364a5171b355d93a2d5 setup: update dulwich requirement to >= 0.9.9 which fixes CVE-2015-0838 diff -r c04c2734e32f -r 65c5e70a1d0c setup.py --- a/setup.py Wed Mar 25 20:38:09 2015 +0100 +++ b/setup.py Wed Mar 25 20:47:45 2015 +0100 @@ -56,6 +56,7 @@ "pycrypto>=2.6.0,<=2.6.1", "URLObject==2.3.4", "Routes==1.13", + "dulwich>=0.9.9,<=0.10.1", ] if sys.version_info < (2, 7): @@ -67,11 +68,6 @@ if not is_windows: requirements.append("py-bcrypt>=0.3.0,<=0.4") -if sys.version_info < (2, 7): - # Dulwich 0.9.6 and later do not support Python2.6. - requirements.append("dulwich>=0.9.3,<=0.9.5") -else: - requirements.append("dulwich>=0.9.3,<=0.9.7") dependency_links = [ ]