From eaa766df77a80ca2bab2dc8ed8ed046919c02352 Mon Sep 17 00:00:00 2001 From: Ryan Petrello Date: Wed, 26 Feb 2020 08:18:14 -0500 Subject: [PATCH] update Django to address a few open CVEs https://github.com/advisories/GHSA-hmr4-m2h5-33qx https://github.com/advisories/GHSA-vfq6-hq5r-27r6 --- requirements/requirements.in | 2 +- requirements/requirements.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/requirements/requirements.in b/requirements/requirements.in index 7cf75de287..09f08975a2 100644 --- a/requirements/requirements.in +++ b/requirements/requirements.in @@ -5,7 +5,7 @@ azure-keyvault==1.1.0 # see UPGRADE BLOCKERs boto # replacement candidate https://github.com/ansible/awx/issues/2115 channels==1.1.8 # UPGRADE BLOCKER: Last before backwards-incompatible channels 2 upgrade daphne==1.4.2 # UPGRADE BLOCKER: last before channels 2 but not pinned by other deps -django==2.2.8 # see UPGRADE BLOCKERs +django==2.2.10 # see UPGRADE BLOCKERs django-auth-ldap django-cors-headers django-crum diff --git a/requirements/requirements.txt b/requirements/requirements.txt index 2e951e853b..a636429641 100644 --- a/requirements/requirements.txt +++ b/requirements/requirements.txt @@ -34,7 +34,7 @@ django-radius==1.3.3 django-solo==1.1.3 django-split-settings==1.0.0 django-taggit==1.2.0 -django==2.2.8 +django==2.2.10 djangorestframework-yaml==1.0.3 djangorestframework==3.11.0 docutils==0.15.2 # via python-daemon