You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
This repository has been archived by the owner on Jun 20, 2023. It is now read-only.
Issue - Facing warning/error in clamav scan log. Need to know how exactly should resolve this.
Error:
_/var/runtime/botocore/utils.py:32: UserWarning: Your function includes an outdated version of urllib3 (version: '1.24.2'). This dependency version is no longer compatible with Botocore (ref. https://github.com/boto/botocore/blob/b00276641e31e14f79e996aef769d8b0509467fe/setup.cfg), and is affected by at least the following CVEs: GHSA-wqvq-5m8c-6g24 (High), GHSA-q2q7-5pp4-w6pg (Med).
Lambda has included a custom layer to preserve backwards compatibility, which is why this message is being logged. This compatibility layer is put in place as a temporary mitigation for functions that see this warning, and will be removed from Lambda. To remove the risk of these CVEs and to stop seeing this warning, please take one of the following actions:
Update the version of urllib3 included in your function's deployment package.
Remove the packaged version of urllib3 in order to make use of the more recent version included in the Lambda Runtime._
Tried by updating version of urllib by updating version to urllib3==1.26.5 in requirements file, however it throws below error.
_ERROR: After October 2020 you may experience errors when installing or updating packages. This is because pip will change the way that it resolves dependency conflicts.
We recommend you use --use-feature=2020-resolver to test your packages with the new resolver before it becomes the default.
requests 2.21.0 requires urllib3<1.25,>=1.21.1, but you'll have urllib3 1.26.5 which is incompatible._
Please advise right way to fix this.
The text was updated successfully, but these errors were encountered:
I think I found the compatible version of requests and got over the error, so two things needs to updated in requirements.txt:
requests==2.27
urllib3==1.26.5
Sign up for freeto subscribe to this conversation on GitHub.
Already have an account?
Sign in.
Issue - Facing warning/error in clamav scan log. Need to know how exactly should resolve this.
Error:
_/var/runtime/botocore/utils.py:32: UserWarning: Your function includes an outdated version of urllib3 (version: '1.24.2'). This dependency version is no longer compatible with Botocore (ref. https://github.com/boto/botocore/blob/b00276641e31e14f79e996aef769d8b0509467fe/setup.cfg), and is affected by at least the following CVEs: GHSA-wqvq-5m8c-6g24 (High), GHSA-q2q7-5pp4-w6pg (Med).
Lambda has included a custom layer to preserve backwards compatibility, which is why this message is being logged. This compatibility layer is put in place as a temporary mitigation for functions that see this warning, and will be removed from Lambda. To remove the risk of these CVEs and to stop seeing this warning, please take one of the following actions:
Update the version of urllib3 included in your function's deployment package.
Remove the packaged version of urllib3 in order to make use of the more recent version included in the Lambda Runtime._
Tried by updating version of urllib by updating version to urllib3==1.26.5 in requirements file, however it throws below error.
_ERROR: After October 2020 you may experience errors when installing or updating packages. This is because pip will change the way that it resolves dependency conflicts.
We recommend you use --use-feature=2020-resolver to test your packages with the new resolver before it becomes the default.
requests 2.21.0 requires urllib3<1.25,>=1.21.1, but you'll have urllib3 1.26.5 which is incompatible._
Please advise right way to fix this.
The text was updated successfully, but these errors were encountered: