Address static requirements security vulnerabilities

This commit is contained in:
Pedro Algarvio 2019-10-09 12:29:13 +01:00
parent 5df806955b
commit 0d13fbc2ed
No known key found for this signature in database
GPG Key ID: BB36BF6584A298FF
20 changed files with 55 additions and 58 deletions

View File

@ -24,7 +24,7 @@ pyobjc==5.1.2
pyopenssl
python-dateutil==2.8.0
python-gnupg==0.4.4
pyyaml==3.13
pyyaml==5.1.2
pyzmq==18.0.1
requests==2.21.0
setproctitle

View File

@ -28,7 +28,7 @@ pyopenssl==19.0.0
python-dateutil==2.8.0
python-gnupg==0.4.4
pythonnet==2.3.0
pyyaml==3.13
pyyaml==5.1.2
pyzmq==18.0.1
requests==2.21.0
setproctitle

View File

@ -2,7 +2,7 @@ Jinja2
# This should be changed to msgpack-python for Packages
# msgpack-python>0.3,!=0.5.5
msgpack>=0.5,!=0.5.5
PyYAML<5.1
PyYAML
MarkupSafe
requests>=1.0.0
tornado>=4.2.1,<6.0; python_version < '3'

View File

@ -10,16 +10,16 @@ docker
futures>=2.0; python_version < '3.0'
GitPython
hgtools
jsonschema<=2.6.0
jsonschema
junos-eznc
jxmlease
kazoo
keyring==5.7.1
kubernetes<4.0
mock>=2.0.0; python_version < '3.6'
mock>=3.0.5; python_version < '3.6'
more-itertools==5.0.0
moto
paramiko
paramiko>=2.1.6
psutil
# Let's install pycryptodome instead of pycrypto because of pycrypto's outstanding security issues
# PyCrypto, if pulled, will be removed from the generated static requirements

View File

@ -6,12 +6,12 @@ croniter>=0.3.0,!=0.3.22
dnspython
docker
futures>=2.0; python_version < '3.0'
jsonschema<=2.6.0
jsonschema
junos-eznc
jxmlease
keyring==5.7.1
kubernetes<4.0
mock>=2.0.0; python_version < '3.6'
mock>=3.0.5; python_version < '3.6'
more-itertools==5.0.0
moto
pylxd>=2.2.5

View File

@ -131,5 +131,5 @@ six==1.12.0 # via cryptography, impacket, isodate, pathlib2, profi
smbprotocol==0.1.1 # via pypsexec
typing==3.6.6 # via msrest
urllib3==1.24.2 # via requests
werkzeug==0.15.2 # via flask
werkzeug==0.15.6 # via flask
xmltodict==0.12.0 # via pywinrm

View File

@ -34,7 +34,7 @@ dnspython==1.16.0
docker-pycreds==0.4.0 # via docker
docker==3.7.2
docutils==0.14 # via botocore
ecdsa==0.13.2 # via python-jose
ecdsa==0.13.3 # via python-jose
enum34==1.1.6 # via cryptography
funcsigs==1.0.2 # via mock, pytest
functools32==3.2.3.post2 # via jsonschema
@ -98,7 +98,7 @@ python-gnupg==0.4.4
python-jose==2.0.2 # via moto
pytz==2019.1 # via moto, tempora
pyvmomi==6.7.1.2018.12
pyyaml==3.13
pyyaml==5.1.2
pyzmq==18.0.1 ; python_version != "3.4"
requests==2.21.0
responses==0.10.6 # via moto
@ -123,7 +123,7 @@ urllib3==1.24.2 # via botocore, kubernetes, python-etcd, requests
virtualenv==16.4.3
watchdog==0.9.0
websocket-client==0.40.0 # via docker, kubernetes
werkzeug==0.15.2 # via moto
werkzeug==0.15.6 # via moto
wrapt==1.11.1 # via aws-xray-sdk
xmltodict==0.12.0 # via moto
zc.lockfile==1.4 # via cherrypy

View File

@ -36,7 +36,7 @@ dnspython==1.16.0
docker-pycreds==0.4.0 # via docker
docker==3.7.2
docutils==0.14 # via botocore
ecdsa==0.13.2 # via python-jose
ecdsa==0.13.3 # via python-jose
enum34==1.1.6
funcsigs==1.0.2 # via mock, pytest
functools32==3.2.3.post2 # via jsonschema
@ -102,7 +102,7 @@ python-gnupg==0.4.4
python-jose==2.0.2 # via moto
pytz==2019.1 # via moto, tempora
pyvmomi==6.7.1.2018.12
pyyaml==3.13
pyyaml==5.1.2
pyzmq==18.0.1 ; python_version != "3.4"
requests-toolbelt==0.9.1 # via pylxd
requests-unixsocket==0.1.5 # via pylxd
@ -130,7 +130,7 @@ virtualenv==16.4.3
vultr==1.0.1
watchdog==0.9.0
websocket-client==0.40.0 # via docker, kubernetes
werkzeug==0.15.2 # via moto
werkzeug==0.15.6 # via moto
wrapt==1.11.1 # via aws-xray-sdk
ws4py==0.5.1 # via pylxd
xmltodict==0.12.0 # via moto

View File

@ -33,7 +33,7 @@ dnspython==1.16.0
docker-pycreds==0.4.0 # via docker
docker==2.7.0
docutils==0.14 # via botocore
ecdsa==0.13.2 # via python-jose
ecdsa==0.13.3 # via python-jose
enum34==1.1.6
funcsigs==1.0.2 # via mock, pytest
functools32==3.2.3.post2 # via jsonschema
@ -96,7 +96,7 @@ pythonnet==2.3.0
pytz==2019.1 # via moto, tempora
pyvmomi==6.7.1.2018.12
pywin32==224
pyyaml==3.13
pyyaml==5.1.2
pyzmq==18.0.1 ; python_version != "3.4"
requests==2.21.0
responses==0.10.6 # via moto
@ -120,7 +120,7 @@ urllib3==1.24.2 # via botocore, kubernetes, python-etcd, requests
virtualenv==16.4.3
watchdog==0.9.0
websocket-client==0.40.0 # via docker, kubernetes
werkzeug==0.15.2 # via moto
werkzeug==0.15.6 # via moto
wheel==0.33.4
wmi==1.4.9
wrapt==1.11.1 # via aws-xray-sdk

View File

@ -31,7 +31,7 @@ dnspython==1.16.0
docker-pycreds==0.4.0 # via docker
docker==3.7.2
docutils==0.14 # via botocore
ecdsa==0.13.2 # via python-jose
ecdsa==0.13.3 # via python-jose
future==0.17.1 # via python-jose
gitdb2==2.0.5 # via gitpython
gitpython==2.1.11
@ -52,7 +52,7 @@ keyring==5.7.1
kubernetes==3.0.0
lxml==4.3.3 # via junos-eznc, ncclient
markupsafe==1.1.1
mock==2.0.0 ; python_version < "3.6"
mock==3.0.5 ; python_version < "3.6"
more-itertools==5.0.0
moto==1.3.7
msgpack==0.5.6
@ -61,7 +61,6 @@ netaddr==0.7.19 # via junos-eznc
paramiko==2.4.2
pathlib2==2.3.3 # via pytest
pathtools==0.1.2 # via watchdog
pbr==5.1.3 # via mock
pluggy==0.9.0 # via pytest
portend==2.4 # via cherrypy
psutil==5.6.1
@ -91,7 +90,7 @@ python-gnupg==0.4.4
python-jose==2.0.2 # via moto
pytz==2019.1 # via moto, tempora
pyvmomi==6.7.1.2018.12
pyyaml==3.13
pyyaml==5.1.2
pyzmq==17.0.0 ; python_version == "3.4"
requests==2.21.0
responses==0.10.6 # via moto
@ -115,7 +114,7 @@ urllib3==1.24.2 # via botocore, kubernetes, python-etcd, requests
virtualenv==16.4.3
watchdog==0.9.0
websocket-client==0.40.0 # via docker, kubernetes
werkzeug==0.15.2 # via moto
werkzeug==0.15.6 # via moto
wrapt==1.11.1 # via aws-xray-sdk
xmltodict==0.12.0 # via moto
zc.lockfile==1.4 # via cherrypy

View File

@ -31,7 +31,7 @@ dnspython==1.16.0
docker-pycreds==0.4.0 # via docker
docker==3.7.2
docutils==0.14 # via botocore
ecdsa==0.13.2 # via python-jose
ecdsa==0.13.3 # via python-jose
future==0.17.1 # via python-jose
gitdb2==2.0.5 # via gitpython
gitpython==2.1.11
@ -52,7 +52,7 @@ keyring==5.7.1
kubernetes==3.0.0
lxml==4.3.3 # via junos-eznc, ncclient
markupsafe==1.1.1
mock==2.0.0 ; python_version < "3.6"
mock==3.0.5 ; python_version < "3.6"
more-itertools==5.0.0
moto==1.3.7
msgpack==0.5.6
@ -61,7 +61,6 @@ netaddr==0.7.19 # via junos-eznc
paramiko==2.4.2
pathlib2==2.3.3 # via pytest
pathtools==0.1.2 # via watchdog
pbr==5.1.3 # via mock
pluggy==0.9.0 # via pytest
portend==2.4 # via cherrypy
psutil==5.6.1
@ -91,7 +90,7 @@ python-gnupg==0.4.4
python-jose==2.0.2 # via moto
pytz==2019.1 # via moto, tempora
pyvmomi==6.7.1.2018.12
pyyaml==3.13
pyyaml==5.1.2
pyzmq==18.0.1 ; python_version != "3.4"
requests==2.21.0
responses==0.10.6 # via moto
@ -113,7 +112,7 @@ urllib3==1.24.2 # via botocore, kubernetes, python-etcd, requests
virtualenv==16.4.3
watchdog==0.9.0
websocket-client==0.40.0 # via docker, kubernetes
werkzeug==0.15.2 # via moto
werkzeug==0.15.6 # via moto
wrapt==1.11.1 # via aws-xray-sdk
xmltodict==0.12.0 # via moto
zc.lockfile==1.4 # via cherrypy

View File

@ -33,7 +33,7 @@ dnspython==1.16.0
docker-pycreds==0.4.0 # via docker
docker==3.7.2
docutils==0.14 # via botocore
ecdsa==0.13.2 # via python-jose
ecdsa==0.13.3 # via python-jose
enum34==1.1.6
future==0.17.1 # via python-jose
gitdb2==2.0.5 # via gitpython
@ -56,7 +56,7 @@ linode-python==1.1.1
lxml==4.3.3 # via junos-eznc, ncclient
mako==1.0.7
markupsafe==1.1.1
mock==2.0.0 ; python_version < "3.6"
mock==3.0.5 ; python_version < "3.6"
more-itertools==5.0.0
moto==1.3.7
msgpack-python==0.5.6
@ -66,7 +66,7 @@ netaddr==0.7.19 # via junos-eznc
paramiko==2.4.2 # via junos-eznc, ncclient, scp
pathlib2==2.3.3 # via pytest
pathtools==0.1.2 # via watchdog
pbr==5.1.3 # via mock, pylxd
pbr==5.1.3 # via pylxd
pluggy==0.9.0 # via pytest
portend==2.4 # via cherrypy
psutil==5.6.1
@ -95,7 +95,7 @@ python-gnupg==0.4.4
python-jose==2.0.2 # via moto
pytz==2019.1 # via moto, tempora
pyvmomi==6.7.1.2018.12
pyyaml==3.13
pyyaml==5.1.2
pyzmq==18.0.1 ; python_version != "3.4"
requests-toolbelt==0.9.1 # via pylxd
requests-unixsocket==0.1.5 # via pylxd
@ -120,7 +120,7 @@ virtualenv==16.4.3
vultr==1.0.1
watchdog==0.9.0
websocket-client==0.40.0 # via docker, kubernetes
werkzeug==0.15.2 # via moto
werkzeug==0.15.6 # via moto
wrapt==1.11.1 # via aws-xray-sdk
ws4py==0.5.1 # via pylxd
xmltodict==0.12.0 # via moto

View File

@ -30,7 +30,7 @@ dnspython==1.16.0
docker-pycreds==0.4.0 # via docker
docker==2.7.0
docutils==0.14 # via botocore
ecdsa==0.13.2 # via python-jose
ecdsa==0.13.3 # via python-jose
enum34==1.1.6
future==0.17.1 # via python-jose
gitdb2==2.0.5 # via gitpython
@ -52,7 +52,7 @@ libnacl==1.6.1
lxml==4.3.0
mako==1.0.7
markupsafe==1.1.1
mock==2.0.0 ; python_version < "3.6"
mock==3.0.5 ; python_version < "3.6"
more-itertools==5.0.0
moto==1.3.7
msgpack-python==0.5.6
@ -60,7 +60,6 @@ msgpack==0.5.6
patch==1.16
pathlib2==2.3.3 # via pytest
pathtools==0.1.2 # via watchdog
pbr==5.1.3 # via mock
pluggy==0.9.0 # via pytest
portend==2.4 # via cherrypy
psutil==5.6.1
@ -90,7 +89,7 @@ pythonnet==2.3.0
pytz==2019.1 # via moto, tempora
pyvmomi==6.7.1.2018.12
pywin32==224
pyyaml==3.13
pyyaml==5.1.2
pyzmq==18.0.1 ; python_version != "3.4"
requests==2.21.0
responses==0.10.6 # via moto
@ -112,7 +111,7 @@ urllib3==1.24.2 # via botocore, kubernetes, python-etcd, requests
virtualenv==16.4.3
watchdog==0.9.0
websocket-client==0.40.0 # via docker, kubernetes
werkzeug==0.15.2 # via moto
werkzeug==0.15.6 # via moto
wheel==0.33.4
wmi==1.4.9
wrapt==1.11.1 # via aws-xray-sdk

View File

@ -31,7 +31,7 @@ dnspython==1.16.0
docker-pycreds==0.4.0 # via docker
docker==3.7.2
docutils==0.14 # via botocore
ecdsa==0.13.2 # via python-jose
ecdsa==0.13.3 # via python-jose
future==0.17.1 # via python-jose
gitdb2==2.0.5 # via gitpython
gitpython==2.1.11
@ -90,7 +90,7 @@ python-gnupg==0.4.4
python-jose==2.0.2 # via moto
pytz==2019.1 # via moto, tempora
pyvmomi==6.7.1.2018.12
pyyaml==3.13
pyyaml==5.1.2
pyzmq==18.0.1 ; python_version != "3.4"
requests==2.21.0
responses==0.10.6 # via moto
@ -112,7 +112,7 @@ urllib3==1.24.2 # via botocore, kubernetes, python-etcd, requests
virtualenv==16.4.3
watchdog==0.9.0
websocket-client==0.40.0 # via docker, kubernetes
werkzeug==0.15.2 # via moto
werkzeug==0.15.6 # via moto
wrapt==1.11.1 # via aws-xray-sdk
xmltodict==0.12.0 # via moto
zc.lockfile==1.4 # via cherrypy

View File

@ -33,7 +33,7 @@ dnspython==1.16.0
docker-pycreds==0.4.0 # via docker
docker==3.7.2
docutils==0.14 # via botocore
ecdsa==0.13.2 # via python-jose
ecdsa==0.13.3 # via python-jose
enum34==1.1.6
future==0.17.1 # via python-jose
gitdb2==2.0.5 # via gitpython
@ -94,7 +94,7 @@ python-gnupg==0.4.4
python-jose==2.0.2 # via moto
pytz==2019.1 # via moto, tempora
pyvmomi==6.7.1.2018.12
pyyaml==3.13
pyyaml==5.1.2
pyzmq==18.0.1 ; python_version != "3.4"
requests-toolbelt==0.9.1 # via pylxd
requests-unixsocket==0.1.5 # via pylxd
@ -119,7 +119,7 @@ virtualenv==16.4.3
vultr==1.0.1
watchdog==0.9.0
websocket-client==0.40.0 # via docker, kubernetes
werkzeug==0.15.2 # via moto
werkzeug==0.15.6 # via moto
wrapt==1.11.1 # via aws-xray-sdk
ws4py==0.5.1 # via pylxd
xmltodict==0.12.0 # via moto

View File

@ -30,7 +30,7 @@ dnspython==1.16.0
docker-pycreds==0.4.0 # via docker
docker==2.7.0
docutils==0.14 # via botocore
ecdsa==0.13.2 # via python-jose
ecdsa==0.13.3 # via python-jose
enum34==1.1.6
future==0.17.1 # via python-jose
gitdb2==2.0.5 # via gitpython
@ -89,7 +89,7 @@ pythonnet==2.3.0
pytz==2019.1 # via moto, tempora
pyvmomi==6.7.1.2018.12
pywin32==224
pyyaml==3.13
pyyaml==5.1.2
pyzmq==18.0.1 ; python_version != "3.4"
requests==2.21.0
responses==0.10.6 # via moto
@ -111,7 +111,7 @@ urllib3==1.24.2 # via botocore, kubernetes, python-etcd, requests
virtualenv==16.4.3
watchdog==0.9.0
websocket-client==0.40.0 # via docker, kubernetes
werkzeug==0.15.2 # via moto
werkzeug==0.15.6 # via moto
wheel==0.33.4
wmi==1.4.9
wrapt==1.11.1 # via aws-xray-sdk

View File

@ -31,7 +31,7 @@ dnspython==1.16.0
docker-pycreds==0.4.0 # via docker
docker==3.7.2
docutils==0.14 # via botocore
ecdsa==0.13.2 # via python-jose
ecdsa==0.13.3 # via python-jose
future==0.17.1 # via python-jose
gitdb2==2.0.5 # via gitpython
gitpython==2.1.11
@ -90,7 +90,7 @@ python-gnupg==0.4.4
python-jose==2.0.2 # via moto
pytz==2019.1 # via moto, tempora
pyvmomi==6.7.1.2018.12
pyyaml==3.13
pyyaml==5.1.2
pyzmq==18.0.1 ; python_version != "3.4"
requests==2.21.0
responses==0.10.6 # via moto
@ -112,7 +112,7 @@ urllib3==1.24.2 # via botocore, kubernetes, python-etcd, requests
virtualenv==16.4.3
watchdog==0.9.0
websocket-client==0.40.0 # via docker, kubernetes
werkzeug==0.15.2 # via moto
werkzeug==0.15.6 # via moto
wrapt==1.11.1 # via aws-xray-sdk
xmltodict==0.12.0 # via moto
zc.lockfile==1.4 # via cherrypy

View File

@ -33,7 +33,7 @@ dnspython==1.16.0
docker-pycreds==0.4.0 # via docker
docker==3.7.2
docutils==0.14 # via botocore
ecdsa==0.13.2 # via python-jose
ecdsa==0.13.3 # via python-jose
enum34==1.1.6
future==0.17.1 # via python-jose
gitdb2==2.0.5 # via gitpython
@ -94,7 +94,7 @@ python-gnupg==0.4.4
python-jose==2.0.2 # via moto
pytz==2019.1 # via moto, tempora
pyvmomi==6.7.1.2018.12
pyyaml==3.13
pyyaml==5.1.2
pyzmq==18.0.1 ; python_version != "3.4"
requests-toolbelt==0.9.1 # via pylxd
requests-unixsocket==0.1.5 # via pylxd
@ -119,7 +119,7 @@ virtualenv==16.4.3
vultr==1.0.1
watchdog==0.9.0
websocket-client==0.40.0 # via docker, kubernetes
werkzeug==0.15.2 # via moto
werkzeug==0.15.6 # via moto
wrapt==1.11.1 # via aws-xray-sdk
ws4py==0.5.1 # via pylxd
xmltodict==0.12.0 # via moto

View File

@ -30,7 +30,7 @@ dnspython==1.16.0
docker-pycreds==0.4.0 # via docker
docker==2.7.0
docutils==0.14 # via botocore
ecdsa==0.13.2 # via python-jose
ecdsa==0.13.3 # via python-jose
enum34==1.1.6
future==0.17.1 # via python-jose
gitdb2==2.0.5 # via gitpython
@ -89,7 +89,7 @@ pythonnet==2.3.0
pytz==2019.1 # via moto, tempora
pyvmomi==6.7.1.2018.12
pywin32==224
pyyaml==3.13
pyyaml==5.1.2
pyzmq==18.0.1 ; python_version != "3.4"
requests==2.21.0
responses==0.10.6 # via moto
@ -111,7 +111,7 @@ urllib3==1.24.2 # via botocore, kubernetes, python-etcd, requests
virtualenv==16.4.3
watchdog==0.9.0
websocket-client==0.40.0 # via docker, kubernetes
werkzeug==0.15.2 # via moto
werkzeug==0.15.6 # via moto
wheel==0.33.4
wmi==1.4.9
wrapt==1.11.1 # via aws-xray-sdk

View File

@ -7,10 +7,10 @@ dnspython
# We require docker < 3.0.0 because after that they also start locking their pywin32 requirement, actually
# pypiwin32, which after version 223 it just makes pywin32 a dep and installs nothing else
docker<3.0.0
jsonschema<=2.6.0
jsonschema
keyring==5.7.1
kubernetes<4.0
mock>=2.0.0; python_version < '3.6'
mock>=3.0.5; python_version < '3.6'
more-itertools==5.0.0
moto<=1.3.7
patch