Update cryptography for CVE-2023-38325 (#14358)

Signed-off-by: Rick Elrod <rick@elrod.me>
This commit is contained in:
Rick Elrod
2023-08-23 10:54:20 -05:00
committed by GitHub
parent ec4f10d868
commit 4dd823121a
2 changed files with 8 additions and 7 deletions

View File

@@ -8,7 +8,7 @@ boto3
botocore botocore
channels channels
channels-redis==3.4.1 # see UPGRADE BLOCKERs channels-redis==3.4.1 # see UPGRADE BLOCKERs
cryptography>=39.0.1 ## https://github.com/ansible/awx/security/dependabot/90 cryptography>=41.0.2 # CVE-2023-38325
Cython<3 # Since the bump to PyYAML 5.4.1 this is now a mandatory dep Cython<3 # Since the bump to PyYAML 5.4.1 this is now a mandatory dep
daphne daphne
distro distro
@@ -39,6 +39,7 @@ prometheus_client
psycopg psycopg
psutil psutil
pygerduty pygerduty
pyopenssl>=23.2.0 # resolve dep conflict from cryptography pin above
pyparsing==2.4.6 # Upgrading to v3 of pyparsing introduce errors on smart host filtering: Expected 'or' term, found 'or' (at char 15), (line:1, col:16) pyparsing==2.4.6 # Upgrading to v3 of pyparsing introduce errors on smart host filtering: Expected 'or' term, found 'or' (at char 15), (line:1, col:16)
python-daemon>3.0.0 python-daemon>3.0.0
python-dsv-sdk python-dsv-sdk

View File

@@ -77,7 +77,7 @@ click==8.1.3
# via receptorctl # via receptorctl
constantly==15.1.0 constantly==15.1.0
# via twisted # via twisted
cryptography==40.0.2 cryptography==41.0.3
# via # via
# -r /awx_devel/requirements/requirements.in # -r /awx_devel/requirements/requirements.in
# adal # adal
@@ -94,9 +94,7 @@ daphne==3.0.2
# -r /awx_devel/requirements/requirements.in # -r /awx_devel/requirements/requirements.in
# channels # channels
dataclasses==0.6 dataclasses==0.6
# via # via python-dsv-sdk
# python-dsv-sdk
# python-tss-sdk
defusedxml==0.7.1 defusedxml==0.7.1
# via # via
# python3-openid # python3-openid
@@ -303,8 +301,10 @@ pyjwt==2.6.0
# adal # adal
# social-auth-core # social-auth-core
# twilio # twilio
pyopenssl==23.1.1 pyopenssl==23.2.0
# via twisted # via
# -r /awx_devel/requirements/requirements.in
# twisted
pyparsing==2.4.6 pyparsing==2.4.6
# via # via
# -r /awx_devel/requirements/requirements.in # -r /awx_devel/requirements/requirements.in