From c38441e8e7138d632f22efd38f41272e8b0fe866 Mon Sep 17 00:00:00 2001 From: Janarthanan Selvaraj Date: Thu, 26 Jul 2018 06:45:27 +0530 Subject: [PATCH] PNDA-4800 Fix for known vulnerabilities for python notebook and paramiko package --- mirror/dependencies/pnda_requirements_py2.txt | 36 +++++++++++++++++-- mirror/dependencies/pnda_requirements_py3.txt | 23 ++++++++++-- 2 files changed, 54 insertions(+), 5 deletions(-) diff --git a/mirror/dependencies/pnda_requirements_py2.txt b/mirror/dependencies/pnda_requirements_py2.txt index 19c18c5c..c569c73e 100644 --- a/mirror/dependencies/pnda_requirements_py2.txt +++ b/mirror/dependencies/pnda_requirements_py2.txt @@ -9,6 +9,8 @@ Werkzeug==0.11.13 appdirs==1.4.3 argparse==1.2.1 asn1crypto==0.22.0 +atomicwrites==1.1.5 +attrs==18.1.0 autovizwidget==0.12.4 avro==1.8.1 backports-abc==0.5 @@ -16,6 +18,7 @@ backports.shutil_get_terminal_size==1.0.0 backports.ssl-match-hostname==3.5.0.1 beautifulsoup4==4.5.3 bitarray==0.8.1 +bleach==1.5.0 boto==2.48.0 cairocffi==0.7.2 certifi==2017.4.17 @@ -25,6 +28,7 @@ cm-api==14.0.0 configparser==3.5.0 cryptography==1.7.1 debtcollector==1.10.0 +decorator==4.0.10 elasticsearch-curator==5.4.1 elasticsearch==6.1.1 enum-compat==0.0.2 @@ -44,21 +48,33 @@ html5lib==0.9999999 idna==2.1 impyla==0.14.0 ipaddress==1.0.17 +ipykernel==4.5.2 ipython==5.1.0 +ipython-genutils==0.1.0 ipython-sql==0.3.8 +ipywidgets==6.0.0 iso8601==0.1.11 itsdangerous==0.24 jsonschema==2.5.1 +jupyter==1.0.0 +jupyter-client==5.2.0 +jupyter-console==5.0.0 +jupyter-core==4.4.0 kafka-python==1.3.5 kazoo==2.2.1 keystoneauth1==2.16.0 lxml==3.6.4 +mistune==0.7.3 mock==2.0.0 monotonic==1.2 +more-itertools==4.3.0 msgpack-python==0.4.8 +nbconvert==5.0.0 +nbformat==4.2.0 netaddr==0.7.18 netifaces==0.10.5 nose==1.3.7 +notebook==5.4.1 numpy==1.13.1 ordereddict==1.1 oslo.config==3.21.0 @@ -67,35 +83,47 @@ oslo.serialization==2.15.0 oslo.utils==3.21.0 packaging==16.8 pandas==0.20.3 -paramiko==2.1.1 -pathlib2==2.1.0 +paramiko==2.1.5 +pathlib2==2.2.0 pbr==1.10.0 pexpect==4.2.1 +pickleshare==0.7.4 pip==9.0.1 plotly==1.10.0 +pluggy==0.7.1 ply==3.9 positional==1.1.1 prettytable==0.7.2 prompt_toolkit==1.0.15 +prompt-toolkit==1.0.9 psycopg2==2.7.3.2 ptyprocess==0.5.1 +py==1.5.4 pyasn1==0.1.9 pycparser==2.17 +Pygments==2.1.3 pyhs2==0.6.0 pykerberos==1.1.14 pyparsing==2.1.10 pymysql==0.7.11 +pytest==3.7.1 +python-dateutil==2.6.0 python-keystoneclient==3.8.0 python-swiftclient==3.2.0 pytz==2016.10 pywebhdfs==0.4.1 pyzmq==16.0.0 +pyzmq==16.0.2 pykafka==2.7.0 requests==2.12.4 +qtconsole==4.2.1 requests_kerberos==0.11.0 rfc3986==0.4.1 sasl==0.2.1 +scandir==1.9.0 +Send2Trash==1.5.0 setuptools==39.1.0 +simplegeneric==0.8.1 simplejson==3.10.0 singledispatch==3.4.0.3 six==1.10.0 @@ -108,16 +136,20 @@ structlog==16.1.0 tabulate==0.8.2 thrift==0.9.3 thrift==0.10.0 +terminado==0.6 thrift_sasl==0.2.1 thriftpy==0.3.9 tornado-cors==0.6.0 tornado==4.4.2 +traitlets==4.3.1 tzlocal==1.3 urllib3==1.19.1 wheel==0.29.0 widgetsnbextension==2.0.0 virtualenv==15.1.0 voluptuous==0.11.1 +wcwidth==0.1.7 +webencodings==0.5 wrapt==1.10.8 wsgiref==0.1.2 xmltodict==0.11.0 diff --git a/mirror/dependencies/pnda_requirements_py3.txt b/mirror/dependencies/pnda_requirements_py3.txt index e41773f4..ccbaed08 100644 --- a/mirror/dependencies/pnda_requirements_py3.txt +++ b/mirror/dependencies/pnda_requirements_py3.txt @@ -1,10 +1,14 @@ alembic==0.8.9 +atomicwrites==1.1.5 +attrs==18.1.0 autovizwidget==0.12.4 beautifulsoup4==4.5.3 backports-abc==0.5 +bitarray==0.8.3 bleach==1.5.0 decorator==4.0.10 entrypoints==0.2.2 +findspark==1.3.0 hdijupyterutils==0.12.4 html5lib==0.9999999 https://github.com/klyr/jupyter-spark/releases/download/0.3.0-patch/jupyter-spark-0.3.0-patch.tar.gz @@ -16,9 +20,9 @@ ipython-sql==0.3.8 ipywidgets==6.0.0 Jinja2==2.8 jsonschema==2.5.1 -jupyter-client==4.4.0 +jupyter-client==5.2.0 jupyter-console==5.0.0 -jupyter-core==4.2.1 +jupyter-core==4.4.0 jupyter==1.0.0 jupyterhub==0.7.0 lxml==3.6.4 @@ -26,36 +30,49 @@ Mako==1.0.6 MarkupSafe==0.23 mistune==0.7.3 mock==2.0.0 +more-itertools==4.3.0 nbconvert==5.0.0 nbformat==4.2.0 nose==1.3.7 -notebook==4.3.1 +notebook==5.4.1 numpy==1.13.1 pamela==0.3.0 pandas==0.20.3 pandocfilters==1.4.1 +pathlib2==2.2.0 +pbr==4.2.0 pexpect==4.2.1 pickleshare==0.7.4 plotly==1.10.0 +pluggy==0.7.1 +ply==3.11 +prettytable==0.7.2 prompt-toolkit==1.0.9 psycopg2==2.7.3.2 ptyprocess==0.5.1 +py==1.5.4 Pygments==2.1.3 pykerberos==1.1.14 pymysql==0.7.11 python_dateutil==2.6.0 +pytest==3.7.1 python-editor==1.0.3 +pytz==2018.5 pyzmq==16.0.2 qtconsole==4.2.1 requests==2.12.4 requests_kerberos==0.11.0 +scandir==1.9.0 +Send2Trash==1.5.0 simplegeneric==0.8.1 six==1.10.0 SQLAlchemy==1.1.4 sql-magic==0.0.3 +sqlparse==0.2.4 terminado==0.6 testpath==0.3 thrift==0.9.3 +thriftpy==0.3.9 tornado==4.4.2 traitlets==4.3.1 wcwidth==0.1.7