Update twisted to fix 2 CVES

CVE-2024-41671 CVE-2024-41810
ctrliq · Sep 5, 2024 · fc130dc · fc130dc
1 parent 744cee0
commit fc130dc
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 4 deletions.
diff --git a/requirements/requirements.in b/requirements/requirements.in
@@ -55,7 +55,7 @@ requests>=2.32.0 # CVE-2024-35195
 slack-sdk
 tacacs_plus==1.0  # UPGRADE BLOCKER: auth does not work with later versions
 twilio
-twisted[tls]>=23.10.0  # CVE-2023-46137
+twisted[tls]>=24.7.0   # CVE-2024-41671
 uWSGI
 uwsgitop
 wheel>=0.38.1  # CVE-2022-40898

diff --git a/requirements/requirements.txt b/requirements/requirements.txt
@@ -183,7 +183,7 @@ importlib-metadata==4.6.4
     # via
     #   ansible-runner
     #   markdown
-incremental==22.10.0
+incremental==24.7.2
     # via twisted
 inflect==6.0.2
     # via jaraco-text
@@ -434,10 +434,12 @@ tempora==5.1.0
     #   irc
     #   jaraco-logging
 tomli==2.0.1
-    # via setuptools-scm
+    # via
+    #   incremental
+    #   setuptools-scm
 twilio==7.15.3
     # via -r /awx_devel/requirements/requirements.in
-twisted[tls]==23.10.0
+twisted[tls]==24.7.0
     # via
     #   -r /awx_devel/requirements/requirements.in
     #   daphne
@@ -482,6 +484,7 @@ setuptools==65.6.3
     #   -r /awx_devel/requirements/requirements.in
     #   asciichartpy
     #   autobahn
+    #   incremental
     #   kubernetes
     #   python-daemon
     #   setuptools-rust