From d07a093bab4b7644350154e9934f4bae021798a2 Mon Sep 17 00:00:00 2001 From: Florent Xicluna Date: Tue, 31 Mar 2026 15:53:02 +0200 Subject: [PATCH] fix: CVE-2026-26209 --- 18.0/base_requirements.txt | 2 +- 19.0/base_requirements.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/18.0/base_requirements.txt b/18.0/base_requirements.txt index 9fce9410..3c071166 100644 --- a/18.0/base_requirements.txt +++ b/18.0/base_requirements.txt @@ -2,7 +2,7 @@ # python3-* equivalent distributed in Ubuntu 24.04 and Debian 12 asn1crypto==1.5.1 ; python_version >= '3.11' Babel==2.10.3 ; python_version >= '3.11' -cbor2==5.6.2 ; python_version >= '3.12' +cbor2==5.9.0 ; python_version >= '3.12' # Pin 5.9.0 for security fixes chardet==5.2.0 ; python_version >= '3.11' cryptography==46.0.5 ; python_version >= '3.12' # (Noble) min 41.0.7, pinning 46.0.5 for security fixes decorator==5.1.1 ; python_version >= '3.11' diff --git a/19.0/base_requirements.txt b/19.0/base_requirements.txt index 47c864c6..b8601c06 100644 --- a/19.0/base_requirements.txt +++ b/19.0/base_requirements.txt @@ -3,7 +3,7 @@ asn1crypto==1.5.1 ; python_version >= '3.11' Babel==2.10.3 ; python_version >= '3.11' and python_version < '3.13' Babel==2.17.0 ; python_version >= '3.13' -cbor2==5.6.2 ; python_version >= '3.12' +cbor2==5.9.0 ; python_version >= '3.12' # Pin 5.9.0 for security fixes chardet==5.2.0 ; python_version >= '3.11' cryptography==46.0.5 ; python_version >= '3.12' # (Noble) min 41.0.7, pinning 46.0.5 for security fixes docutils==0.20.1 ; python_version >= '3.11'