Bump gitpython from 3.1.35 to 3.1.41 in /ofrak_core (#400)

* Bump gitpython from 3.1.35 to 3.1.41 in /ofrak_core Bumps [gitpython](https://github.com/gitpython-developers/GitPython) from 3.1.35 to 3.1.41. - [Release notes](https://github.com/gitpython-developers/GitPython/releases) - [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES) - [Commits](gitpython-developers/GitPython@3.1.35...3.1.41) --- updated-dependencies: - dependency-name: gitpython dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]> * Update CHANGELOG --------- Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Jacob Strieb <[email protected]>
redballoonsecurity · Jan 12, 2024 · 622586f · 622586f
1 parent a32f787
commit 622586f
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/ofrak_core/CHANGELOG.md b/ofrak_core/CHANGELOG.md
@@ -7,6 +7,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/)
 ### Fixed
 - Improved flushing of filesystem entries (including symbolic links and other types) to disk. ([#373](https://github.com/redballoonsecurity/ofrak/pull/373))
 - Fix `java` and `apktool` CLI arguments for checking components. ([#390](https://github.com/redballoonsecurity/ofrak/pull/390))
+- Bump GitPython version from 3.1.35 to 3.1.41 to mitigate CVEs. ([#400](https://github.com/redballoonsecurity/ofrak/pull/400))
 
 ### Changed
 - `Resource.flush_to_disk` method renamed to `Resource.flush_data_to_disk`. ([#373](https://github.com/redballoonsecurity/ofrak/pull/373))

diff --git a/ofrak_core/requirements.txt b/ofrak_core/requirements.txt
@@ -3,7 +3,7 @@ aiohttp-cors~=0.7.0
 beartype~=0.12.0
 black==23.3.0
 fdt==0.3.3
-GitPython==3.1.35
+GitPython==3.1.41
 importlib-metadata>=4.13
 intervaltree==3.1.0
 keystone-engine==0.9.2