Merge pull request #589 from FORTH-ICS-INSPIRE/pyyaml-sec-fix

updated pyyaml and artemis-utils to address depbot fix PRs
FORTH-ICS-INSPIRE · Mar 26, 2021 · 5b12a9d · 5b12a9d
2 parents 8c69eb8 + 03bb2f7
commit 5b12a9d
Show file tree

Hide file tree

Showing 19 changed files with 33 additions and 32 deletions.
diff --git a/backend-services/autoignore/requirements.txt b/backend-services/autoignore/requirements.txt
@@ -1,4 +1,4 @@
-artemis-utils==1.0.10
+artemis-utils==1.0.11
 cffi==1.13.2
 Cython==0.29.14
 enum34==1.1.6
@@ -8,7 +8,7 @@ kombu==4.6.7
 netaddr==0.7.19
 psycopg2==2.8.4
 pytricia==1.0.0
-PyYAML==5.3
+PyYAML==5.4
 redis==3.4.0
 requests==2.25.1
 ruamel.yaml==0.16.5

diff --git a/backend-services/autostarter/requirements.txt b/backend-services/autostarter/requirements.txt
@@ -1,4 +1,4 @@
-artemis-utils==1.0.10
+artemis-utils==1.0.11
 cffi==1.13.2
 Cython==0.29.14
 enum34==1.1.6

diff --git a/backend-services/configuration/requirements.txt b/backend-services/configuration/requirements.txt
@@ -1,4 +1,4 @@
-artemis-utils==1.0.10
+artemis-utils==1.0.11
 cffi==1.13.2
 Cython==0.29.14
 enum34==1.1.6
@@ -9,7 +9,7 @@ kubernetes==12.0.1
 netaddr==0.7.19
 psycopg2==2.8.4
 pytricia==1.0.0
-PyYAML==5.3
+PyYAML==5.4
 redis==3.4.0
 requests==2.25.1
 ruamel.yaml==0.16.5

diff --git a/backend-services/database/requirements.txt b/backend-services/database/requirements.txt
@@ -1,4 +1,4 @@
-artemis-utils==1.0.10
+artemis-utils==1.0.11
 cffi==1.13.2
 Cython==0.29.14
 enum34==1.1.6
@@ -8,7 +8,7 @@ kombu==4.6.7
 netaddr==0.7.19
 psycopg2==2.8.4
 pytricia==1.0.0
-PyYAML==5.3
+PyYAML==5.4
 redis==3.4.0
 requests==2.25.1
 ruamel.yaml==0.16.5

diff --git a/backend-services/detection/requirements.txt b/backend-services/detection/requirements.txt
@@ -1,4 +1,4 @@
-artemis-utils==1.0.10
+artemis-utils==1.0.11
 cffi==1.13.2
 Cython==0.29.14
 enum34==1.1.6
@@ -8,7 +8,7 @@ kombu==4.6.7
 netaddr==0.7.19
 psycopg2==2.8.4
 pytricia==1.0.0
-PyYAML==5.3
+PyYAML==5.4
 redis==3.4.0
 requests==2.25.1
 ruamel.yaml==0.16.5

diff --git a/backend-services/fileobserver/requirements.txt b/backend-services/fileobserver/requirements.txt
@@ -1,4 +1,4 @@
-artemis-utils==1.0.10
+artemis-utils==1.0.11
 cffi==1.13.2
 Cython==0.29.14
 enum34==1.1.6

diff --git a/backend-services/mitigation/requirements.txt b/backend-services/mitigation/requirements.txt
@@ -1,4 +1,4 @@
-artemis-utils==1.0.10
+artemis-utils==1.0.11
 cffi==1.13.2
 Cython==0.29.14
 enum34==1.1.6
@@ -8,7 +8,7 @@ kombu==4.6.7
 netaddr==0.7.19
 psycopg2==2.8.4
 pytricia==1.0.0
-PyYAML==5.3
+PyYAML==5.4
 redis==3.4.0
 requests==2.25.1
 ruamel.yaml==0.16.5

diff --git a/backend-services/notifier/requirements.txt b/backend-services/notifier/requirements.txt
@@ -1,4 +1,4 @@
-artemis-utils==1.0.10
+artemis-utils==1.0.11
 cffi==1.13.2
 Cython==0.29.14
 enum34==1.1.6
@@ -8,7 +8,7 @@ kombu==4.6.7
 netaddr==0.7.19
 psycopg2==2.8.4
 pytricia==1.0.0
-PyYAML==5.3
+PyYAML==5.4
 redis==3.4.0
 requests==2.25.1
 ruamel.yaml==0.16.5

diff --git a/backend-services/prefixtree/requirements.txt b/backend-services/prefixtree/requirements.txt
@@ -1,4 +1,4 @@
-artemis-utils==1.0.10
+artemis-utils==1.0.11
 cffi==1.13.2
 Cython==0.29.14
 enum34==1.1.6
@@ -8,7 +8,7 @@ kombu==4.6.7
 netaddr==0.7.19
 psycopg2==2.8.4
 pytricia==1.0.0
-PyYAML==5.3
+PyYAML==5.4
 redis==3.4.0
 requests==2.25.1
 ruamel.yaml==0.16.5

diff --git a/docs/changelog.md b/docs/changelog.md
@@ -15,6 +15,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - migrating from travis to GH actions
 - downgraded to six==1.11.0 to achieve compatibility
 - changed tap invalid format logging level to debug (instead of warning)
+- updated artemis-utils to 1.0.11
 
 ### Fixed
 - autoconfiguration subprefix bug in prefixtree plus new autoconf tests
@@ -28,7 +29,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 - TBD (soon-to-be removed feature)
 
 ### Security
-- TBD (addressing vulnerability)
+- updated PyYAML to 5.4 (fixing sec vulnerabilitiy)
 
 ## [2.0.0] (Boreas) - 2021-01-26
 ### Added

diff --git a/frontend/requirements.txt b/frontend/requirements.txt
@@ -20,7 +20,7 @@ gunicorn==20.0.4
 kombu==4.6.7
 ldap3==2.5.2
 pyrad==2.3
-PyYAML==5.3
+PyYAML==5.4
 requests==2.25.1
 SQLAlchemy==1.3.12
 ujson==1.35

diff --git a/monitor-services/bgpstreamhisttap/requirements.txt b/monitor-services/bgpstreamhisttap/requirements.txt
@@ -1,12 +1,12 @@
-artemis-utils==1.0.10
+artemis-utils==1.0.11
 Cython==0.29.14
 gql==0.4.0
 ipaddress==1.0.23
 kombu==4.6.7
 netaddr==0.7.19
 psycopg2==2.8.4
 pytricia==1.0.0
-PyYAML==5.3
+PyYAML==5.4
 redis==3.4.0
 requests==2.25.1
 ruamel.yaml==0.16.5

diff --git a/monitor-services/bgpstreamkafkatap/requirements.txt b/monitor-services/bgpstreamkafkatap/requirements.txt
@@ -1,12 +1,12 @@
-artemis-utils==1.0.10
+artemis-utils==1.0.11
 Cython==0.29.14
 gql==0.4.0
 ipaddress==1.0.23
 kombu==4.6.7
 netaddr==0.7.19
 psycopg2==2.8.4
 pytricia==1.0.0
-PyYAML==5.3
+PyYAML==5.4
 redis==3.4.0
 requests==2.25.1
 ruamel.yaml==0.16.5

diff --git a/monitor-services/bgpstreamlivetap/requirements.txt b/monitor-services/bgpstreamlivetap/requirements.txt
@@ -1,12 +1,12 @@
-artemis-utils==1.0.10
+artemis-utils==1.0.11
 Cython==0.29.14
 gql==0.4.0
 ipaddress==1.0.23
 kombu==4.6.7
 netaddr==0.7.19
 psycopg2==2.8.4
 pytricia==1.0.0
-PyYAML==5.3
+PyYAML==5.4
 redis==3.4.0
 requests==2.25.1
 ruamel.yaml==0.16.5

diff --git a/monitor-services/exabgptap/requirements.txt b/monitor-services/exabgptap/requirements.txt
@@ -1,12 +1,12 @@
-artemis-utils==1.0.10
+artemis-utils==1.0.11
 Cython==0.29.14
 gql==0.4.0
 ipaddress==1.0.23
 kombu==4.6.7
 netaddr==0.7.19
 psycopg2==2.8.4
 pytricia==1.0.0
-PyYAML==5.3
+PyYAML==5.4
 redis==3.4.0
 requests==2.25.1
 ruamel.yaml==0.16.5

diff --git a/monitor-services/riperistap/requirements.txt b/monitor-services/riperistap/requirements.txt
@@ -1,12 +1,12 @@
-artemis-utils==1.0.10
+artemis-utils==1.0.11
 Cython==0.29.14
 gql==0.4.0
 ipaddress==1.0.23
 kombu==4.6.7
 netaddr==0.7.19
 psycopg2==2.8.4
 pytricia==1.0.0
-PyYAML==5.3
+PyYAML==5.4
 redis==3.4.0
 requests==2.25.1
 ruamel.yaml==0.16.5

diff --git a/testing/detection/requirements.txt b/testing/detection/requirements.txt
@@ -1,6 +1,6 @@
 kombu==4.6.7
 psycopg2==2.8.4
-PyYAML==5.3
+PyYAML==5.4
 redis==3.4.0
 requests==2.25.1
 ujson==1.35
diff --git a/testing/rpki/requirements.txt b/testing/rpki/requirements.txt
@@ -2,7 +2,7 @@ cffi>=1.4.0
 enum34==1.1.6
 kombu==4.6.7
 psycopg2-binary==2.8.4
-PyYAML==5.3
+PyYAML==5.4
 redis==3.4.0
 requests==2.25.1
 six==1.11.0

diff --git a/utils/setup.py b/utils/setup.py
@@ -8,7 +8,7 @@
 
 setuptools.setup(
     name="artemis_utils",
-    version="1.0.10",
+    version="1.0.11",
     author="Dimitrios Mavrommatis, Vassileios Kotronis",
     author_email="[email protected], [email protected]",
     description="ARTEMIS utility modules",
@@ -26,7 +26,7 @@
         "kombu==4.6.7",
         "ruamel.yaml==0.16.5",
         "ujson==1.35",
-        "PyYAML==5.3",
+        "PyYAML==5.4",
         "gql==0.4.0",
         "ipaddress==1.0.23",
         "psycopg2==2.8.4",