airship/drydock
Code Issues Proposed changes

Uplift pyyaml and requests

Browse Source 
Automatic security alerts were created for pyyaml==3.12 and
requests==2.19.1 suggesting these packages be upgraded to 2.20.0 and
5.1 respectively.

Vulnerabilities addressed:
CVE-2018-18074 on requests package
CVE-2017-18342 on PyYAML package

Change-Id: Iff5bc11d60c2724fef0bb8b2552e17573c79dc9f
Signed-off-by: Alexander Hughes <Alexander.Hughes@pm.me>
This commit is contained in:
Alexander Hughes 2020-03-03 09:15:13 -05:00
parent 586bcf8ebe
commit 80c82d8957
2 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
python/requirements-direct.txt
View File

@ -1,4 +1,4 @@
PyYAML==3.12 PyYAML==5.1
pyghmi==1.0.18 pyghmi==1.0.18
netaddr netaddr
falcon falcon

4
python/requirements-lock.txt
View File

@ -60,10 +60,10 @@ python-editor==1.0.3
python-keystoneclient==3.17.0 python-keystoneclient==3.17.0
python-mimeparse==1.6.0 python-mimeparse==1.6.0
pytz==2018.5 pytz==2018.5
PyYAML==3.12 PyYAML==5.1
redfish==2.0.1 redfish==2.0.1
repoze.lru==0.7 repoze.lru==0.7
requests==2.19.1 requests==2.20.0
rfc3986==1.1.0 rfc3986==1.1.0
Routes==2.4.1 Routes==2.4.1
setuptools==40.4.3 setuptools==40.4.3