From a2655e3c79a67787e9a28a04f5f1be8b8a90d194 Mon Sep 17 00:00:00 2001 From: Dimitri Huisman Date: Tue, 4 Apr 2023 12:35:27 +0000 Subject: [PATCH 1/2] Update dependencies with CVEs --- core/base/requirements-prod.txt | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/core/base/requirements-prod.txt b/core/base/requirements-prod.txt index 33739ee1..1fc6fb43 100644 --- a/core/base/requirements-prod.txt +++ b/core/base/requirements-prod.txt @@ -12,7 +12,7 @@ cffi==1.15.1 charset-normalizer==2.1.1 click==8.1.3 colorclass==2.2.2 -cryptography==38.0.3 +cryptography==39.0.1 decorator==5.1.1 defusedxml==0.7.1 Deprecated==1.2.13 @@ -65,7 +65,7 @@ python-magic==0.4.27 pytz==2022.6 PyYAML==6.0 Radicale==3.1.8 -redis==4.3.4 +redis==4.3.6 requests==2.28.1 six==1.16.0 socrate @ file:///app/libs/socrate @@ -79,7 +79,7 @@ validators==0.20.0 visitor==0.1.3 vobject==0.9.6.1 watchdog==2.1.9 -Werkzeug==2.2.2 +Werkzeug==2.2.3 wrapt==1.14.1 WTForms==3.0.1 WTForms-Components==0.10.5 From 5f14c8ced1f2444451d7ed67d8f9a34512cfcefc Mon Sep 17 00:00:00 2001 From: Dimitri Huisman Date: Tue, 4 Apr 2023 12:51:59 +0000 Subject: [PATCH 2/2] Fix unmet dependency --- core/base/requirements-prod.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/core/base/requirements-prod.txt b/core/base/requirements-prod.txt index 1fc6fb43..0e7b3803 100644 --- a/core/base/requirements-prod.txt +++ b/core/base/requirements-prod.txt @@ -58,7 +58,7 @@ psycopg2-binary==2.9.5 pycares==4.2.2 pycparser==2.21 Pygments==2.13.0 -pyOpenSSL==22.1.0 +pyOpenSSL==23.1.1 pyparsing==2.4.7 python-dateutil==2.8.2 python-magic==0.4.27