Merge pull request #54 from GoogleCloudPlatform/UpdateRSA

Peg RSA version to patch vulnerability but maintain PY2 compatibility.
GoogleCloudPlatform · Apr 13, 2021 · 22c3999 · 22c3999
2 parents a4f650a + 12f2d9f
commit 22c3999
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 3 deletions.
diff --git a/requirements.txt b/requirements.txt
@@ -1,4 +1,4 @@
-rsa<=4.0; python_version < "3.5"
+rsa==4.3; python_version < "3.5"
 boto>=2.29.1
 google-reauth>=0.1.0
 httplib2>=0.18

diff --git a/setup.py b/setup.py
@@ -29,8 +29,8 @@
 """
 
 requires = [
-    # rsa>4, from oauth2client (deprecated), does not support python 2 and 3.4.
-    'rsa<=4.0; python_version < "3.5"',
+    # Other versions of rsa>4 do not support Python 2.
+    'rsa==4.3; python_version < "3.5"',
     'boto>=2.29.1',
     'google-reauth>=0.1.0',
     'httplib2>=0.18',