search

abrt / faf

Platform for collection and analysis of packages and package crashes
GNU General Public License v3.0
46 stars 47 forks source link

Require Celery >= 5.2.2 #999

Closed mgrabovsky closed 2 years ago

mgrabovsky commented 2 years ago

Bump Celery dependency due to the CVE-2021-23727 vulnerability which affects Celery versions prior to 5.2.2.

mgrabovsky commented 2 years ago

Both Celery 5.2.3 and WTForms-SQLAlchemy are now built in our Copr, so I suppose we can proceed with the upgrade.

WTForms-SQLAlchemy is needed separately because it was split out from WTForms in 3.x and it's the reason why Packit Fedora 36+ builds keep failing. Down the road, the builds will keep failing anyway because WTForms-SQLAlchemy is not packaged in Fedora. (I filed a review request, but I'm now thinking that it's unnecessary and we might keep it in the Copr only.) That leads me to considering dropping the Packit integration since it will become essentially useless.

I'm merging this for now and will create a separate PR for the WTForms-SQLAlchemy migration.