mirror of
git://git.yoctoproject.org/layerindex-web.git
synced 2025-07-19 12:49:01 +02:00

Fixes a vulnerability in the password reset process due to insufficiently stringent validation of unicode email addresses. https://www.djangoproject.com/weblog/2019/dec/18/security-releases/ https://nvd.nist.gov/vuln/detail/CVE-2019-19844 (The existing version specification would have selected the fixed version of Django already for new installs, but bumping the minimum ensures that it will be installed for upgrades with ./dockersetup.py -u as well.) Signed-off-by: Paul Eggleton <paul.eggleton@linux.intel.com>
28 lines
558 B
Plaintext
28 lines
558 B
Plaintext
amqp==2.5.2
|
|
beautifulsoup4==4.8.1
|
|
billiard==3.6.1.0
|
|
celery==4.3.0
|
|
confusable-homoglyphs==3.2.0
|
|
Django>=1.11.27,<1.12
|
|
django-appconf==1.0.3
|
|
django-axes==4.5.4
|
|
django-bootstrap-pagination==1.7.1
|
|
django-cors-headers==3.0.2
|
|
django-ipware==2.1.0
|
|
django-ranged-response==0.2.0
|
|
django-registration==3.0.1
|
|
django-reversion==2.0.13
|
|
django-reversion-compare==0.8.6
|
|
django-simple-captcha==0.5.12
|
|
djangorestframework==3.9.4
|
|
gitdb2==2.0.6
|
|
GitPython==2.1.13
|
|
kombu==4.6.3
|
|
mysqlclient==1.4.4
|
|
Pillow==6.2.1
|
|
pytz==2019.3
|
|
six==1.12.0
|
|
smmap2==2.0.5
|
|
soupsieve==1.9.4
|
|
vine==1.3.0
|