From 3e27638b287af1eb9593298fa73ad8a78d899f44 Mon Sep 17 00:00:00 2001 From: Tomaz Muraus Date: Sun, 27 Jan 2019 21:55:48 +0100 Subject: [PATCH 1/3] Upgrade python-gnupg dependency because of a security vulnerability (https://blog.hackeriet.no/cve-2019-6690-python-gnupg-vulnerability/). NOTE: This security vulnerability doesn't affect us because we only this library in an isolated scenario (encrypting debug tarball without using a passphrase). --- fixed-requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/fixed-requirements.txt b/fixed-requirements.txt index 81aeafa176..99c6a7b165 100644 --- a/fixed-requirements.txt +++ b/fixed-requirements.txt @@ -22,7 +22,7 @@ pymongo==3.7.2 mongoengine==0.16.3 passlib==1.7.1 lockfile==0.12.2 -python-gnupg==0.4.3 +python-gnupg==0.4.4 jsonpath-rw==1.4.0 pyinotify==0.9.6 semver==2.8.1 From e1d35285ebe756010f40c425531dc4a65049217a Mon Sep 17 00:00:00 2001 From: Tomaz Muraus Date: Sun, 27 Jan 2019 22:00:16 +0100 Subject: [PATCH 2/3] Re-generate requirements files. --- requirements.txt | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/requirements.txt b/requirements.txt index 4bbb77c15f..6f81467c5f 100644 --- a/requirements.txt +++ b/requirements.txt @@ -39,7 +39,7 @@ pymongo==3.7.2 pyrabbit python-dateutil==2.7.5 python-editor==1.0.3 -python-gnupg==0.4.3 +python-gnupg==0.4.4 python-json-logger python-statsd==2.1.0 pytz==2018.7 From 4d62a8074e7cda27fda512ba062bc4dce5754ced Mon Sep 17 00:00:00 2001 From: blag Date: Mon, 28 Jan 2019 16:01:42 -0800 Subject: [PATCH 3/3] Empty commit to rerun CI