mirror of
https://github.com/ansible/awx.git
synced 2026-03-11 14:39:30 -02:30
[4.6][dependency] update aiohttp to address vuln CVE-2024-52304 (#6740)
* update aiohttp to address vuln CVE-2024-52304 * add licenses for new deps
This commit is contained in:
@@ -1,4 +1,4 @@
|
||||
aiohttp>=3.9.4 # CVE-2024-30251
|
||||
aiohttp>=3.11.6 # CVE-2024-52304
|
||||
ansiconv==1.0.0 # UPGRADE BLOCKER: from 2013, consider replacing instead of upgrading
|
||||
ansible-runner==2.4.0
|
||||
asciichartpy
|
||||
|
||||
@@ -1,6 +1,8 @@
|
||||
adal==1.2.7
|
||||
# via msrestazure
|
||||
aiohttp==3.9.5
|
||||
aiohappyeyeballs==2.4.3
|
||||
# via aiohttp
|
||||
aiohttp==3.11.6
|
||||
# via
|
||||
# -r /awx_devel/requirements/requirements.in
|
||||
# aiohttp-retry
|
||||
@@ -358,6 +360,10 @@ portalocker==2.8.2
|
||||
# via msal-extensions
|
||||
prometheus-client==0.20.0
|
||||
# via -r /awx_devel/requirements/requirements.in
|
||||
propcache==0.2.0
|
||||
# via
|
||||
# aiohttp
|
||||
# yarl
|
||||
protobuf==4.25.3
|
||||
# via
|
||||
# googleapis-common-protos
|
||||
@@ -390,7 +396,6 @@ pygerduty==0.38.3
|
||||
pyjwt[crypto]==2.8.0
|
||||
# via
|
||||
# adal
|
||||
# django-ansible-base
|
||||
# msal
|
||||
# social-auth-core
|
||||
# twilio
|
||||
@@ -453,7 +458,6 @@ requests==2.31.0
|
||||
# -r /awx_devel/requirements/requirements.in
|
||||
# adal
|
||||
# azure-core
|
||||
# django-ansible-base
|
||||
# django-oauth-toolkit
|
||||
# kubernetes
|
||||
# msal
|
||||
@@ -567,7 +571,7 @@ wrapt==1.16.0
|
||||
# opentelemetry-instrumentation
|
||||
xmlsec==1.3.13
|
||||
# via python3-saml
|
||||
yarl==1.9.4
|
||||
yarl==1.17.2
|
||||
# via aiohttp
|
||||
zipp==3.17.0
|
||||
# via importlib-metadata
|
||||
|
||||
Reference in New Issue
Block a user