Skip to content

Commit c71b348

Browse files
committed
Enforce numpy >= 1.21 when possible
This enforcement is due to the `numpy` vulnerability CVE-2021-33430.
1 parent 910d73f commit c71b348

File tree

2 files changed

+5
-4
lines changed

2 files changed

+5
-4
lines changed

CHANGELOG.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -7,6 +7,10 @@ since version 1.3.0.
77

88
## [Unreleased]
99

10+
### Fixed
11+
- Enforce dependency `numpy >= 1.21` for Python >= 3.7 due to `numpy`
12+
vulnerability CVE-2021-33430.
13+
1014
## [1.3.1] - 2022-01-22
1115

1216
### Added

packages/basemap/requirements.txt

Lines changed: 1 addition & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -9,10 +9,7 @@ numpy >= 1.11, < 1.12; python_version == "3.3"
99
numpy >= 1.11, < 1.17; python_version == "3.4"
1010
numpy >= 1.16, < 1.19; python_version == "3.5"
1111
numpy >= 1.16, < 1.20; python_version == "3.6"
12-
numpy >= 1.19, < 1.22; python_version == "3.7"
13-
numpy >= 1.19, < 1.23; python_version == "3.8"
14-
numpy >= 1.19, < 1.23; python_version == "3.9"
15-
numpy >= 1.21, < 1.23; python_version >= "3.10"
12+
numpy >= 1.21, < 1.23; python_version >= "3.7"
1613

1714
cycler < 0.11; python_version == "3.2"
1815
pyparsing >= 1.5, < 2.4.1; python_version == "2.6"

0 commit comments

Comments
 (0)