Files
keystone/lower-constraints.txt
Raildo Mascena c0d63cecd8 Bump pysaml2 requeriment to avoid CVE-2020-5390
Although, Keystone doesn't use the pysaml2 signature on [0]
Would be nice to bump the pysaml2 version for, at least, 5.0.0[1] in
order to have the the CVE fix included[2].

[0]https://opendev.org/openstack/keystone/src/branch/master/keystone/federation/idp.py#L440-L521
[1] https://github.com/IdentityPython/pysaml2/releases/tag/v5.0.0
[2] https://github.com/advisories/GHSA-qf7v-8hj3-4xw7

Change-Id: I1d3776f7f1feb6485feecb140703f23027ca3a6f
2020-08-24 15:31:55 -03:00

68 lines
1.1 KiB
Plaintext

amqp==2.2.2
Babel==2.3.4
bashate==0.5.1
bcrypt==3.1.3
coverage==4.0
cryptography==2.1
docutils==0.14
dogpile.cache==0.6.2
fixtures==3.0.0
flake8-docstrings==0.2.1.post1
flake8==2.6.0
Flask===1.0.2
Flask-RESTful===0.3.5
freezegun==0.3.6
hacking==1.1.0
iso8601==0.1.12
jsonschema==3.2.0
keystoneauth1==3.4.0
keystonemiddleware==7.0.0
ldappool===2.3.1
lxml==3.4.1
mock==2.0.0
msgpack==0.5.0
oauthlib==0.6.2
os-api-ref==1.4.0
oslo.cache==1.26.0
oslo.concurrency==3.26.0
oslo.config==5.2.0
oslo.context==2.22.0
oslo.db==4.27.0
oslo.i18n==3.15.3
oslo.log==3.44.0
oslo.messaging==5.29.0
oslo.middleware==3.31.0
oslo.policy==3.0.2
oslo.serialization==2.18.0
oslo.upgradecheck==0.1.0
oslo.utils==3.33.0
oslotest==3.2.0
osprofiler==1.4.0
passlib==1.7.0
pbr==2.0.0
pep257==0.7.0
pika==0.10.0
pycadf==1.1.0
pycodestyle==2.0.0
python-ldap===3.0.0
pymongo===3.0.2
pysaml2==5.0.0
PyJWT==1.6.1
PyMySQL==0.7.6
python-keystoneclient==3.8.0
python-memcached===1.56
pytz==2013.6
requests==2.14.2
scrypt==0.8.0
six==1.10.0
sqlalchemy-migrate==0.11.0
SQLAlchemy==1.1.0
stestr==1.0.0
stevedore==1.20.0
tempest==17.1.0
testtools==2.2.0
urllib3==1.22
WebOb==1.7.1
WebTest==2.0.27
Werkzeug==0.14.1