layerindex-web/requirements.txt
Paul Eggleton 8e3cbb7038 requirements.txt: bump Django version to fix CVE-2019-19844
Fixes a vulnerability in the password reset process due to
insufficiently stringent validation of unicode email addresses.

https://www.djangoproject.com/weblog/2019/dec/18/security-releases/
https://nvd.nist.gov/vuln/detail/CVE-2019-19844

(The existing version specification would have selected the fixed
version of Django already for new installs, but bumping the minimum
ensures that it will be installed for upgrades with
./dockersetup.py -u as well.)

Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
2019-12-20 10:29:11 +13:00

28 lines
558 B
Plaintext

amqp==2.5.2
beautifulsoup4==4.8.1
billiard==3.6.1.0
celery==4.3.0
confusable-homoglyphs==3.2.0
Django>=1.11.27,<1.12
django-appconf==1.0.3
django-axes==4.5.4
django-bootstrap-pagination==1.7.1
django-cors-headers==3.0.2
django-ipware==2.1.0
django-ranged-response==0.2.0
django-registration==3.0.1
django-reversion==2.0.13
django-reversion-compare==0.8.6
django-simple-captcha==0.5.12
djangorestframework==3.9.4
gitdb2==2.0.6
GitPython==2.1.13
kombu==4.6.3
mysqlclient==1.4.4
Pillow==6.2.1
pytz==2019.3
six==1.12.0
smmap2==2.0.5
soupsieve==1.9.4
vine==1.3.0