[Fixes #4038] Remove Django deps known vulnerabilities #4038

requirements.txt

@@ -8,7 +8,7 @@
 Pillow>3.3.1,<=3.3.2 # python-imaging (3.1.2) - python-pillow (3.3.1 in our ppa)
 lxml==3.6.2 # python-lxml (3.6.2 in our ppa) FIXME # <=3.8.0 throws pkg_resources.ContextualVersionConflict: (lxml 3.8.0 (/usr/local/lib/python2.7/site-packages), Requirement.parse('lxml==3.6.2'), set(['pycsw']))
 psycopg2<=2.7.3.1 # python-psycopg2 (2.7.3.1 in our ppa)
-Django==1.11.15 # python-django (1.8.19 in our ppa) FIXME
+Django==1.11.16 # python-django (1.8.19 in our ppa) FIXME
 
 # Other
 amqp==2.2.2 # (python-amqp 2.2.2 in our ppa)
@@ -166,14 +166,14 @@ python-gnupg<=0.4.1 # (0.4.1 in our ppa)
 python-mimeparse<=1.6.0 # (1.6.0 in our ppa)
 pytz<=2018.3 # python-pytz (2018.3 in our ppa)
 regex<=2016.7.21 # (0.1.20160110 in ppa)
-requests==2.18.4 # (2.18.4 in our ppa) FIXME
+requests>=2.20.0 # (2.18.4 in our ppa) FIXME
 simplejson<=3.13.2 # (3.13.2 in our ppa)
 tablib<=0.12.1 # (0.12.1 in our ppa)
 timeout-decorator==0.4.0 # TODO
 typing<=3.6.4 # python-typing (3.6.4 in our ppa)
 
 # required by monitoring
-psutil # (3.4.2 in ppa)
+psutil==5.4.8 # (3.4.2 in ppa)
 django-cors-headers<=2.2.0 # python-django-cors-headers (2.2.0 in our ppa)
 django-cuser==2017.3.16 # python-django-cuser (2017.3.16 in our ppa)
 django-multi-email-field<=0.5.1 # python-django-multi-email-field (0.5.1 in our ppa)

requirements_docs.txt

@@ -1,4 +1,4 @@
-Django==1.11.15
+Django==1.11.16
 six==1.10.0
 amqp==2.2.2
 anyjson==0.3.3
@@ -121,7 +121,7 @@ pinax-theme-bootstrap==8.0.1
 poster==0.8.1
 pluggy==0.6.0
 proj==0.1.0
-psutil==5.4.3
+psutil==5.4.8
 psycopg2==2.7.3.1
 py==1.5.3
 # pycsw==2.2.0
@@ -144,7 +144,7 @@ pytz==2018.3
 PyYAML==3.12
 redis==2.10.5
 regex==2016.7.21
-requests==2.18.4
+requests>=2.20.0
 requests-oauthlib==0.8.0
 selenium==3.9.0
 simplejson==3.13.2