CVE-2021-33503

Advisory

Virl2-client 2.2.1post2 updates its dependency 'urllib3' to v1.26.7 to include a security fix.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This is a minor release with only a few fixes/changes. No API has changed and it is functionally equivalent to the 2.2.1 release.

What's Changed
* Show progress bar when uploading image by exjobo in https://github.com/CiscoDevNet/virl2-client/pull/15
* Small changes to the Makefiles to allow building the Sphinx docs and better cleanup
* Updated Python dependencies to get rid of dependency security vulnerability with urllib

New Contributors
* exjobo made their first contribution in https://github.com/CiscoDevNet/virl2-client/pull/15

**Full Changelog**: https://github.com/CiscoDevNet/virl2-client/compare/v2.2.1-update1...v2.2.1-post2

v2.2.1-update1
"Final" is too much of a word -- it's absolute. Especially when you realize that *final* in this case wasn't really final. Due to the nature of a "split brain", where we have the client as part of a private repository and this repository, things did not work out as planned and a few files and updates have missed the boat ride from "private" to "public".

While at it, we added some GitHub workflow to run the included (and now working) tests when doing PRs and merges to master. In more detail:

- added missing dependency `requests_toolbelt` which solved https://github.com/CiscoDevNet/virl2-client/issues/10
- added test configuration files to allow running the non-integration tests
- while at it, also added GitHub workflow configuration to run those tests for the supported Python versions 3.5 - 3.9.

This should now be complete and consistent. And the next release will be a *regular* one :-)

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-33503