Skip to content

Commit

Permalink
Bump dependency with security issue
Browse files Browse the repository at this point in the history
```
  +==============================================================================+
  |                                                                              |
  |                               /$$$$$$            /$$                         |
  |                              /$$__  $$          | $$                         |
  |           /$$$$$$$  /$$$$$$ | $$  \__//$$$$$$  /$$$$$$   /$$   /$$           |
  |          /$$_____/ |____  $$| $$$$   /$$__  $$|_  $$_/  | $$  | $$           |
  |         |  $$$$$$   /$$$$$$$| $$_/  | $$$$$$$$  | $$    | $$  | $$           |
  |          \____  $$ /$$__  $$| $$    | $$_____/  | $$ /$$| $$  | $$           |
  |          /$$$$$$$/|  $$$$$$$| $$    |  $$$$$$$  |  $$$$/|  $$$$$$$           |
  |         |_______/  \_______/|__/     \_______/   \___/   \____  $$           |
  |                                                          /$$  | $$           |
  |                                                         |  $$$$$$/           |
  |  by pyup.io                                              \______/            |
  |                                                                              |
  +==============================================================================+
  | REPORT                                                                       |
  | checked 90 packages, using default DB                                        |
  +============================+===========+==========================+==========+
  | package                    | installed | affected                 | ID       |
  +============================+===========+==========================+==========+
  | babel                      | 2.6.0     | <2.9.1                   | 42203    |
  +==============================================================================+
  | Babel 2.9.1 includes a fix for CVE-2021-42771: Babel.Locale in Babel before  |
  | 2.9.1 allows attackers to load arbitrary locale .dat files (containing       |
  | serialized Python objects) via directory traversal, leading to code          |
  | execution. python-babel/babel#782                    |
  | https://lists.debian.org/debian-lts/2021/10/msg00040.html                    |
  | https://www.tenable.com/security/research/tra-2021-14                        |
  | https://lists.debian.org/debian-lts-announce/2021/10/msg00018.html           |
  +==============================================================================+
  | pycryptodome               | 3.10.3    | <3.11.0                  | 42084    |
  +==============================================================================+
  | Pycryptodome version 3.11.0 includes a fix for the DSA construction          |
  | algorithm. Modulus "p" primality check wasn't working. https://github.com/Le |
  | grandin/pycryptodome/pull/557/commits/183f8d1c7a5e145e78b86fb54da7e327a277d9 |
  | c6                                                                           |
  +==============================================================================+
```
  • Loading branch information
sbrunner committed Nov 10, 2021
1 parent 7edf8ea commit 503e450
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions docker/build/requirements.txt
Expand Up @@ -2,7 +2,7 @@ alabaster==0.7.12 # Doc theme
alembic==1.0.9 # geoportal
astroid==2.2.5 # pylint
awscli==1.19.84 # Work with Object storage
Babel==2.6.0 # i18n
Babel==2.9.1 # i18n
beautifulsoup4==4.6.3 # admin tests, rq.filter: <4.7
boto3==1.9.130 # Tile generation
bottle==0.12.19 # geoportal
Expand Down Expand Up @@ -47,7 +47,7 @@ pep8==1.7.1 # lint
pep8-naming==0.8.2 # Lint
polib==1.1.0 # i18n
psycopg2-binary==2.8.2 # geoportal
pycryptodome==3.10.3 # geoportal
pycryptodome==3.11.0 # geoportal
pyflakes==2.1.1 # lint, flake8
Pygments==2.3.1 # doc
pylint==2.7.2 # lint
Expand Down

0 comments on commit 503e450

Please sign in to comment.