External-Mirrors/awx
2
0
Fork 0
mirror of https://github.com/ansible/awx.git synced 2026-03-14 23:47:28 -02:30
Code Issues Packages Projects Releases Wiki Activity

[4.6][dependency] CVE 2025 47273 (#7020)

Browse Source 
* Update requirements for setuptools

* first pass and need to commit

* update makefile and run updater script
This commit is contained in:
Jake Jackson
2025-07-22 15:21:06 -04:00
committed by GitHub
parent 03cd450669
commit e8b2920aec
3 changed files with 6 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
Makefile
View File

@@ -77,7 +77,7 @@ RECEPTOR_IMAGE ?= quay.io/ansible/receptor:devel
SRC_ONLY_PKGS ?= cffi,pycparser,psycopg,twilio SRC_ONLY_PKGS ?= cffi,pycparser,psycopg,twilio
# These should be upgraded in the AWX and Ansible venv before attempting # These should be upgraded in the AWX and Ansible venv before attempting
# to install the actual requirements # to install the actual requirements
VENV_BOOTSTRAP ?= pip==21.2.4 setuptools==69.0.2 setuptools_scm[toml]==8.0.4 wheel==0.42.0 cython==0.29.37 VENV_BOOTSTRAP ?= pip==21.2.4 setuptools==78.1.1 setuptools_scm[toml]==8.0.4 wheel==0.42.0 cython==0.29.37
NAME ?= awx NAME ?= awx

2
requirements/requirements.in
View File

@@ -73,7 +73,7 @@ uWSGI>=2.0.28
uwsgitop uwsgitop
wheel>=0.38.1 # CVE-2022-40898 wheel>=0.38.1 # CVE-2022-40898
pip==21.2.4 # see UPGRADE BLOCKERs pip==21.2.4 # see UPGRADE BLOCKERs
setuptools # see UPGRADE BLOCKERs setuptools==78.1.1 # see UPGRADE BLOCKERs
setuptools_scm[toml] # see UPGRADE BLOCKERs, xmlsec build dep setuptools_scm[toml] # see UPGRADE BLOCKERs, xmlsec build dep
setuptools-rust>=0.11.4 # cryptography build dep setuptools-rust>=0.11.4 # cryptography build dep
pkgconfig>=1.5.1 # xmlsec build dep - needed for offline build pkgconfig>=1.5.1 # xmlsec build dep - needed for offline build

6
requirements/requirements.txt
View File

@@ -190,7 +190,9 @@ djangorestframework-yaml==2.0.0
docutils==0.20.1 docutils==0.20.1
# via python-daemon # via python-daemon
dynaconf==3.2.10 dynaconf==3.2.10
# via django-ansible-base # via
# -r /awx_devel/requirements/requirements.in
# django-ansible-base
enum-compat==0.0.3 enum-compat==0.0.3
# via asn1 # via asn1
filelock==3.13.1 filelock==3.13.1
@@ -610,7 +612,7 @@ zope-interface==6.2
# The following packages are considered to be unsafe in a requirements file: # The following packages are considered to be unsafe in a requirements file:
pip==21.2.4 pip==21.2.4
# via -r /awx_devel/requirements/requirements.in # via -r /awx_devel/requirements/requirements.in
setuptools==69.0.2 setuptools==78.1.1
# via # via
# -r /awx_devel/requirements/requirements.in # -r /awx_devel/requirements/requirements.in
# asciichartpy # asciichartpy