From 5e1d7ed4bd023c9ecb5ec3c2ca337f1d6681dd78 Mon Sep 17 00:00:00 2001 From: Zedifus Date: Wed, 16 Oct 2024 21:15:45 +0100 Subject: [PATCH 1/2] Bump requests to 2.32.0 -> 2.32.3 Resolves yanked ver: 2.32.0 Conflics w/ CVE-2024-35195 mitigation --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 99415099..7bc5ae87 100644 --- a/requirements.txt +++ b/requirements.txt @@ -13,7 +13,7 @@ psutil==5.9.5 pyOpenSSL==24.2.1 pyjwt==2.8.0 PyYAML==6.0.1 -requests==2.32.0 +requests==2.32.3 termcolor==1.1 tornado==6.4.1 tzlocal==5.1 From 8d91cd7ec5d8bcc449c3bff132a119f0c2802bcf Mon Sep 17 00:00:00 2001 From: Zedifus Date: Wed, 16 Oct 2024 21:20:11 +0100 Subject: [PATCH 2/2] Update changelog !808 --- CHANGELOG.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 35b6066d..251cf6c0 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -3,7 +3,7 @@ ### New features TBD ### Bug fixes -TBD +- Bump requests to resolve yank for CVE-2024-35195 ([Merge Request](https://gitlab.com/crafty-controller/crafty-4/-/merge_requests/808)) ### Tweaks TBD ### Lang