This is an archive of the discontinued LLVM Phabricator instance.

[LLVM Utils] Update GitPython for CVE-2022-24439
ClosedPublic

Authored by jdd on Feb 2 2023, 6:33 PM.

Summary

GitPython 3.1.28 has a security vulnerability which was fixed in 3.1.30:
https://nvd.nist.gov/vuln/detail/CVE-2022-24439

jdd created this revision.Feb 2 2023, 6:33 PM

jdd requested review of this revision.Feb 2 2023, 6:33 PM

jdd retitled this revision from [LLVM Utils] Update GitPython to [LLVM Utils] Update GitPython for CVE-2022-24439.Feb 2 2023, 6:34 PM

This revision was not accepted when it landed; it landed in state Needs Review.Feb 3 2023, 3:30 PM

This revision was automatically updated to reflect the committed changes.

Path

Size

llvm/

utils/

git/

6 lines

	#			#
	# This file is autogenerated by pip-compile with python 3.9			# This file is autogenerated by pip-compile with Python 3.8
	# To update, run:			# by the following command:
	#			#
	# pip-compile --output-file=requirements.txt requirements.txt.in			# pip-compile --output-file=requirements.txt requirements.txt.in
	#			#
	certifi==2022.9.24			certifi==2022.9.24
	# via requests			# via requests
	cffi==1.15.1			cffi==1.15.1
	# via pynacl			# via pynacl
	charset-normalizer==2.1.1			charset-normalizer==2.1.1
	# via requests			# via requests
	deprecated==1.2.13			deprecated==1.2.13
	# via pygithub			# via pygithub
	gitdb==4.0.9			gitdb==4.0.9
	# via gitpython			# via gitpython
	gitpython==3.1.28			gitpython==3.1.30
	# via -r requirements.txt.in			# via -r requirements.txt.in
	idna==3.4			idna==3.4
	# via requests			# via requests
	pycparser==2.21			pycparser==2.21
	# via cffi			# via cffi
	pygithub==1.55			pygithub==1.55
	# via -r requirements.txt.in			# via -r requirements.txt.in
	pyjwt==2.5.0			pyjwt==2.5.0
	Show All 11 Lines