starlingx/tools
Code Issues Proposed changes

python: fix CVE-2019-9636 CVE-2019-10160 CVE-2019-9948 CVE-2019-16056 in rpm list

Browse Source 
Python is upgraded to version 2.7.5-89 in srpm build to fix above CVEs.
Update below packages for the updated depencies of python upgrading:
python2-rpm-macros-3-34.el7.noarch.rpm
python-rpm-macros-3-34.el7.noarch.rpm
python-srpm-macros-3-34.el7.noarch.rpm

Update below packages to below versions too in rpm list:
python-2.7.5-89.el7.x86_64.rpm
python-devel-2.7.5-89.el7.x86_64.rpm
python-libs-2.7.5-89.el7.x86_64.rpm

This commit need work together with the commit
<python: fix CVE-2019-9636 CVE-2019-10160 CVE-2019-9948 CVE-2019-16056
in srpm build> for repository starlingx/compile.

Story: 2008532
Task: 41665
Signed-off-by: Li Zhou <li.zhou@windriver.com>
Change-Id: I280cbc0408b41008ec2e07f2453d20fd6226c54a
This commit is contained in:
Li Zhou
2021-01-26 19:35:23 -08:00
parent 07b8d07a36
commit 4665c2250d
3 changed files with 12 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
centos-mirror-tools/config/centos/compiler/rpms_centos.lst
View File

@@ -246,9 +246,9 @@ python3-pip-9.0.3-5.el7.noarch.rpm
python3-rpm-generators-6-2.el7.noarch.rpm
python3-rpm-macros-3-32.el7.noarch.rpm
python3-setuptools-39.2.0-10.el7.noarch.rpm
python-2.7.5-76.el7.x86_64.rpm
python-devel-2.7.5-76.el7.x86_64.rpm
python-libs-2.7.5-76.el7.x86_64.rpm
python-2.7.5-89.el7.x86_64.rpm
python-devel-2.7.5-89.el7.x86_64.rpm
python-libs-2.7.5-89.el7.x86_64.rpm
# qrencode-libs-3.4.1-3.el7.x86_64.rpm provided by mock
# readline-6.2-10.el7.x86_64.rpm provided by mock
readline-devel-6.2-10.el7.x86_64.rpm

6
centos-mirror-tools/config/centos/flock/rpms_centos.lst
View File

@@ -904,7 +904,7 @@ python2-requests-oauthlib-0.8.0-5.el7.noarch.rpm
python2-retryz-0.1.8-1.el7.noarch.rpm
python2-rfc3986-1.2.0-1.el7.noarch.rpm
python2-rjsmin-1.0.12-2.el7.x86_64.rpm
# python2-rpm-macros-3-25.el7.noarch.rpm provided by mock
# python2-rpm-macros-3-34.el7.noarch.rpm provided by mock
python2-rsa-3.4.1-1.el7.noarch.rpm
python2-ruamel-ordereddict-0.4.9-3.el7.x86_64.rpm
python2-ruamel-yaml-0.13.14-2.el7.x86_64.rpm
@@ -1095,7 +1095,7 @@ python-repoze-lru-0.4-3.el7.noarch.rpm
python-repoze-who-2.1-1.el7.noarch.rpm
python-retrying-1.2.3-4.el7.noarch.rpm
python-routes-2.4.1-1.el7.noarch.rpm
# python-rpm-macros-3-25.el7.noarch.rpm provided by mock
# python-rpm-macros-3-34.el7.noarch.rpm provided by mock
python-rtslib-2.1.fb63-13.el7.noarch.rpm
python-s3transfer-0.1.13-1.el7.noarch.rpm
python-schedutils-0.4-6.el7.x86_64.rpm
@@ -1108,7 +1108,7 @@ python-slip-dbus-0.4.0-4.el7.noarch.rpm
python-sphinx-locale-1.6.2-3.el7.noarch.rpm
python-sqlalchemy-utils-0.31.3-2.el7.noarch.rpm
python-sqlparse-0.1.18-5.el7.noarch.rpm
# python-srpm-macros-3-25.el7.noarch.rpm provided by mock
# python-srpm-macros-3-34.el7.noarch.rpm provided by mock
python-subprocess32-3.2.6-4.el7.x86_64.rpm
python-subunit-1.0.0-1.el7.noarch.rpm
python-swift-2.15.1-1.el7.noarch.rpm

12
centos-mirror-tools/config/centos/mock/rpms_centos.lst
View File

@@ -145,14 +145,14 @@ procps-ng-3.3.10-28.el7.x86_64.rpm
pth-2.0.7-23.el7.x86_64.rpm
pygpgme-0.3-9.el7.x86_64.rpm
pyliblzma-0.5.3-11.el7.x86_64.rpm
# python-2.7.5-76.el7.x86_64.rpm
# python-devel-2.7.5-76.el7.x86_64.rpm
python2-rpm-macros-3-25.el7.noarch.rpm
# python-2.7.5-89.el7.x86_64.rpm
# python-devel-2.7.5-89.el7.x86_64.rpm
python2-rpm-macros-3-34.el7.noarch.rpm
python-iniparse-0.4-9.el7.noarch.rpm
# python-libs-2.7.5-76.el7.x86_64.rpm
# python-libs-2.7.5-89.el7.x86_64.rpm
python-pycurl-7.19.0-19.el7.x86_64.rpm
python-rpm-macros-3-25.el7.noarch.rpm
python-srpm-macros-3-25.el7.noarch.rpm
python-rpm-macros-3-34.el7.noarch.rpm
python-srpm-macros-3-34.el7.noarch.rpm
python-urlgrabber-3.10-9.el7.noarch.rpm
pyxattr-0.5.1-5.el7.x86_64.rpm
qrencode-libs-3.4.1-3.el7.x86_64.rpm