#30833: Update BrideDB's requirements.txt
----------------------------------------+----------------------
Reporter: phw | Owner: phw
Type: defect | Status: assigned
Priority: High | Milestone:
Component: Circumvention/BridgeDB | Version:
Severity: Normal | Keywords:
Actual Points: | Parent ID:
Points: 2 | Reviewer:
Sponsor: Sponsor30-can |
----------------------------------------+----------------------
BridgeDB's
[https://gitweb.torproject.org/bridgedb.git/tree/requirements.txt?id=2d86ae0c232a0390bbd891d42e9722a10589fd0e
requirements.txt] is outdated and currently depends on packages that have
security vulnerabilities. At the very least, we should find out if we're
affected by any of these vulnerabilities. Ideally, we should pin all
dependencies to their latest versions and take care of any issues that we
encounter in the process.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30833>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online