Update python dependencies for CVEs

Fryguy commented 2 years ago

cc @agrare

miq-bot commented 2 years ago

Checked commits https://github.com/Fryguy/manageiq-appliance-build/compare/12189d74aa9a459f9e585c73a0ab0e8fe456edcf~...8cd45ff7b274ef9c4546a32a3ba4c67063a11c44 with ruby 2.6.10, rubocop 1.28.2, haml-lint 0.35.0, and yamllint 0 files checked, 0 offenses detected Everything looks fine. :cake:

Fryguy commented 2 years ago

@agrare This is ready to go. I was originally going to make multiple changes, but I'd like to get this in and make small iterations. I have your vsphere.yml in a form that I can "automate" testing it, and also verified this works along with another hello world playbook.

Fryguy commented 2 years ago

For my information, these are some candidates for future PRs where we can use the preinstalled version that comes from RPMs:

  Attempting uninstall: wheel
    Found existing installation: wheel 0.37.1
    Uninstalling wheel-0.37.1:
      Successfully uninstalled wheel-0.37.1
  Attempting uninstall: six
    Found existing installation: six 1.12.0
    Not uninstalling six at /usr/lib/python3.8/site-packages, outside environment /var/lib/manageiq/venv
    Can't uninstall 'six'. No files were found to uninstall.
  Attempting uninstall: pycparser
    Found existing installation: pycparser 2.19
    Not uninstalling pycparser at /usr/lib/python3.8/site-packages, outside environment /var/lib/manageiq/venv
    Can't uninstall 'pycparser'. No files were found to uninstall.
  Attempting uninstall: idna
    Found existing installation: idna 2.8
    Not uninstalling idna at /usr/lib/python3.8/site-packages, outside environment /var/lib/manageiq/venv
    Can't uninstall 'idna'. No files were found to uninstall.
  Attempting uninstall: asn1crypto
    Found existing installation: asn1crypto 1.2.0
    Not uninstalling asn1crypto at /usr/lib/python3.8/site-packages, outside environment /var/lib/manageiq/venv
    Can't uninstall 'asn1crypto'. No files were found to uninstall.
  Attempting uninstall: PyYAML
    Found existing installation: PyYAML 5.4.1
    Not uninstalling pyyaml at /usr/lib64/python3.8/site-packages, outside environment /var/lib/manageiq/venv
    Can't uninstall 'PyYAML'. No files were found to uninstall.
  Attempting uninstall: Jinja2
    Found existing installation: Jinja2 2.11.3
    Not uninstalling jinja2 at /usr/lib/python3.8/site-packages, outside environment /var/lib/manageiq/venv
    Can't uninstall 'Jinja2'. No files were found to uninstall.
  Attempting uninstall: cffi
    Found existing installation: cffi 1.13.2
    Not uninstalling cffi at /usr/lib64/python3.8/site-packages, outside environment /var/lib/manageiq/venv
    Can't uninstall 'cffi'. No files were found to uninstall.

Fryguy commented 2 years ago

Backported to oparin in commit 065ec509d5e95c9766a69e9056c3c960c4984e76.

commit 065ec509d5e95c9766a69e9056c3c960c4984e76
Author: Adam Grare <adam@grare.com>
Date:   Fri Sep 2 15:23:44 2022 -0400

    Merge pull request #519 from Fryguy/update_python_security

    Update python dependencies for CVEs

    (cherry picked from commit ac28f2d9f0635fb736d0e54e5b871925c495456d)

Fryguy commented 2 years ago

Backported to morphy in commit 1eccbe04bf7c4fa25864da6fffc4527b3ef5eeb6.

commit 1eccbe04bf7c4fa25864da6fffc4527b3ef5eeb6
Author: Adam Grare <adam@grare.com>
Date:   Fri Sep 2 15:23:44 2022 -0400

    Merge pull request #519 from Fryguy/update_python_security

    Update python dependencies for CVEs

    (cherry picked from commit ac28f2d9f0635fb736d0e54e5b871925c495456d)

Fryguy commented 2 years ago

Backported to najdorf in commit 5b41e77b7e2a01a38aec1a0a2ad5ea8dc0c288ea.

commit 5b41e77b7e2a01a38aec1a0a2ad5ea8dc0c288ea
Author: Adam Grare <adam@grare.com>
Date:   Fri Sep 2 15:23:44 2022 -0400

    Merge pull request #519 from Fryguy/update_python_security

    Update python dependencies for CVEs

    (cherry picked from commit ac28f2d9f0635fb736d0e54e5b871925c495456d)

ManageIQ / manageiq-appliance-build

Update python dependencies for CVEs #519