From f1908283c214d9459948b48a226a3fb92821dbae Mon Sep 17 00:00:00 2001
From: brandon s allbery kf8nh <allbery.b@gmail.com>
Date: Tue, 16 Jan 2024 12:11:46 -0500
Subject: [PATCH] update jinja2 per CVE-2024-22195
---
doc/requirements.in | 2 ++
doc/requirements.txt | 6 ++++--
2 files changed, 6 insertions(+), 2 deletions(-)
diff --git a/doc/requirements.in b/doc/requirements.in
index d8de16ca60..c8a3a7692a 100644
--- a/doc/requirements.in
+++ b/doc/requirements.in
@@ -8,3 +8,5 @@ Pygments >= 2.7.4
certifi >= 2023.07.22
# CVE-2023-45803
urllib3 >= 2.0.7
+# CVE-2024-22195
+jinja2 == 3.1.3
diff --git a/doc/requirements.txt b/doc/requirements.txt
index 55019a68dc..8ec8934d93 100644
--- a/doc/requirements.txt
+++ b/doc/requirements.txt
@@ -23,8 +23,10 @@ idna==3.4
# via requests
imagesize==1.4.1
# via sphinx
-jinja2==3.1.2
- # via sphinx
+jinja2==3.1.3
+ # via
+ # -r requirements.in
+ # sphinx
jsonpointer==2.3
# via sphinx-jsonschema
markupsafe==2.1.2
--
GitLab