From 58ec39c31cb97938564411fd07907315eba3ce70 Mon Sep 17 00:00:00 2001 From: Tom Rini Date: Thu, 5 Oct 2023 12:27:38 -0400 Subject: [PATCH] sphinx: Bump urllib3 version While not a direct issue for us, urllib3 before 1.26.17 is vulnerable to CVE-2023-43804 to bump our version up. Reported-by: GitHub dependabot Signed-off-by: Tom Rini Reviewed-by: Simon Glass Use urllib3 2.0.6 Signed-off-by: Heinrich Schuchardt --- doc/sphinx/requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/doc/sphinx/requirements.txt b/doc/sphinx/requirements.txt index 6ccbe527ee..6d45a3feff 100644 --- a/doc/sphinx/requirements.txt +++ b/doc/sphinx/requirements.txt @@ -23,4 +23,4 @@ sphinxcontrib-htmlhelp==2.0.0 sphinxcontrib-jsmath==1.0.1 sphinxcontrib-qthelp==1.0.3 sphinxcontrib-serializinghtml==1.1.5 -urllib3==1.26.9 +urllib3==2.0.6 -- 2.39.5