Merge pull request #1182 from ansible/ttakamiy/CVE-2024-39689

Fix for CVE-2024-39689
ansible · Jul 8, 2024 · dfdf6b4 · dfdf6b4
2 parents 0253f30 + 22ca3a4
commit dfdf6b4
Show file tree

Hide file tree

Showing 6 changed files with 16 additions and 6 deletions.
diff --git a/requirements-aarch64.txt b/requirements-aarch64.txt
@@ -51,8 +51,9 @@ botocore==1.29.165
     #   s3transfer
 bracex==2.4
     # via wcmatch
-certifi==2024.2.2
+certifi==2024.7.4
     # via
+    #   -r requirements.in
     #   launchdarkly-server-sdk
     #   requests
 cffi==1.16.0

diff --git a/requirements-dev-aarch64.txt b/requirements-dev-aarch64.txt
@@ -8,8 +8,10 @@ black==24.3.0
     # via -r requirements-dev.in
 build==1.2.1
     # via pip-tools
-certifi==2024.2.2
-    # via requests
+certifi==2024.7.4
+    # via
+    #   -r requirements-dev.in
+    #   requests
 cfgv==3.4.0
     # via pre-commit
 charset-normalizer==3.3.2

diff --git a/requirements-dev-x86_64.txt b/requirements-dev-x86_64.txt
@@ -8,8 +8,10 @@ black==24.3.0
     # via -r requirements-dev.in
 build==1.2.1
     # via pip-tools
-certifi==2024.2.2
-    # via requests
+certifi==2024.7.4
+    # via
+    #   -r requirements-dev.in
+    #   requests
 cfgv==3.4.0
     # via pre-commit
 charset-normalizer==3.3.2

diff --git a/requirements-dev.in b/requirements-dev.in
@@ -1,5 +1,7 @@
 black==24.3.0
 coverage==7.2.1
+# pin certifi on 2024.7.4 to address CVE-2024-39689
+certifi==2024.7.4
 flake8==6.0.0
 grpcio-tools==1.62.2
 # pin idna until responses -> requests is updated

diff --git a/requirements-x86_64.txt b/requirements-x86_64.txt
@@ -51,8 +51,9 @@ botocore==1.29.165
     #   s3transfer
 bracex==2.4
     # via wcmatch
-certifi==2024.2.2
+certifi==2024.7.4
     # via
+    #   -r requirements.in
     #   launchdarkly-server-sdk
     #   requests
 cffi==1.16.0

diff --git a/requirements.in b/requirements.in
@@ -4,6 +4,8 @@ ansible-lint==24.2.2
 boto3==1.26.84
 # pin black on 24.3.0 to address PYSEC-2024-48.
 black==24.3.0
+# pin certifi on 2024.7.4 to address CVE-2024-39689
+certifi==2024.7.4
 # UPDATED MANUALLY: waiting for parent package to be updated
 cryptography==42.0.6
 # pin Django on 4.2.11 to address PYSEC-2024-47.