Update certain python dependencies for CVEs

ManageIQ / manageiq-appliance-build

Scripts to build ManageIQ appliances

Apache License 2.0

10 stars 55 forks source link

Update certain python dependencies for CVEs #522

Closed Fryguy closed 2 years ago

Fryguy commented 2 years ago

oauthlib to 3.2.0 for PRISMA-2021-0041
pyjwt to 2.4.0 for CVE-2022-29217
requests-kerberos for PRISMA-2021-0161

@agrare Please review. I've tested with the hello world and the vsphere.yml, and they work.

Fryguy commented 2 years ago

Backported to oparin in commit a865d66c7f661e09f02a0b4e7aaaf8b2245d943d.

commit a865d66c7f661e09f02a0b4e7aaaf8b2245d943d
Author: Adam Grare <adam@grare.com>
Date:   Tue Sep 6 18:10:49 2022 -0400

    Merge pull request #522 from Fryguy/update_python_security3

    Update certain python dependencies for CVEs

    (cherry picked from commit 17a132ad0f1ad72138d4ad1a1c96a7201e9e33cd)

Fryguy commented 2 years ago

Backported to morphy in commit 397afe9bf057e6041153d39ab6f9cbe9f79c8fdd.

commit 397afe9bf057e6041153d39ab6f9cbe9f79c8fdd
Author: Adam Grare <adam@grare.com>
Date:   Tue Sep 6 18:10:49 2022 -0400

    Merge pull request #522 from Fryguy/update_python_security3

    Update certain python dependencies for CVEs

    (cherry picked from commit 17a132ad0f1ad72138d4ad1a1c96a7201e9e33cd)

Fryguy commented 2 years ago

Backported to najdorf in commit fe02ae1669babd01bf659ff633caf8b83f49efdb.

commit fe02ae1669babd01bf659ff633caf8b83f49efdb
Author: Adam Grare <adam@grare.com>
Date:   Tue Sep 6 18:10:49 2022 -0400

    Merge pull request #522 from Fryguy/update_python_security3

    Update certain python dependencies for CVEs

    (cherry picked from commit 17a132ad0f1ad72138d4ad1a1c96a7201e9e33cd)