[4.6][dependency] update aiohttp to address vuln CVE-2024-52304 (#6740)

* update aiohttp to address vuln CVE-2024-52304

* add licenses for new deps
This commit is contained in:
Jake Jackson
2024-11-21 16:21:34 -05:00
committed by GitHub
parent 943964e14f
commit 2c3b4ff5d7
4 changed files with 490 additions and 5 deletions

View File

@@ -1,4 +1,4 @@
aiohttp>=3.9.4 # CVE-2024-30251
aiohttp>=3.11.6 # CVE-2024-52304
ansiconv==1.0.0 # UPGRADE BLOCKER: from 2013, consider replacing instead of upgrading
ansible-runner==2.4.0
asciichartpy

View File

@@ -1,6 +1,8 @@
adal==1.2.7
# via msrestazure
aiohttp==3.9.5
aiohappyeyeballs==2.4.3
# via aiohttp
aiohttp==3.11.6
# via
# -r /awx_devel/requirements/requirements.in
# aiohttp-retry
@@ -358,6 +360,10 @@ portalocker==2.8.2
# via msal-extensions
prometheus-client==0.20.0
# via -r /awx_devel/requirements/requirements.in
propcache==0.2.0
# via
# aiohttp
# yarl
protobuf==4.25.3
# via
# googleapis-common-protos
@@ -390,7 +396,6 @@ pygerduty==0.38.3
pyjwt[crypto]==2.8.0
# via
# adal
# django-ansible-base
# msal
# social-auth-core
# twilio
@@ -453,7 +458,6 @@ requests==2.31.0
# -r /awx_devel/requirements/requirements.in
# adal
# azure-core
# django-ansible-base
# django-oauth-toolkit
# kubernetes
# msal
@@ -567,7 +571,7 @@ wrapt==1.16.0
# opentelemetry-instrumentation
xmlsec==1.3.13
# via python3-saml
yarl==1.9.4
yarl==1.17.2
# via aiohttp
zipp==3.17.0
# via importlib-metadata