b45f7c1bb1
There are extra CVEs found on notificationservice-base-v2 image compared to other ptp images. Recently [1], image building framework for notificationservice-base-v2 has been switched from Docker to Loci, which inherited CVEs coming from fixed Python and OS versions from loci script/stable-wheels.cfg [2]/ upper-constraints.txt [3]. This commit fixes CVEs by overriding affected Python and OS packages locally in the image. [1] https://review.opendev.org/c/starlingx/ptp-notification-armada-app/+/940259 [2] https://opendev.org/starlingx/root/src/branch/master/build-tools/build-wheels/debian/stable-wheels.cfg [3] https://opendev.org/starlingx/root/src/branch/master/build-tools/build-wheels/debian/openstack-requirements/caracal/upper-constraints.txt TEST PLAN: PASS: successful build and deployment PASS: No high severity vulnerabilities found PASS: Sync status verified Story: 2011332 Task: 52773 Change-Id: I89f09bb994cf6e55eaa1e5fc9926689dd41a20f5 Signed-off-by: Tara Nath Subedi <tara.subedi@windriver.com> Signed-off-by: Eduardo Alberti <eduardo.alberti@windriver.com>