Skip to content

Commit f6eea79

Browse files
authored
address urllib3 cve's CVE-2025-50182 CVE-2025-50181 (#159)
Signed-off-by: Adam D. Cornett <adc@redhat.com>
1 parent 4abb297 commit f6eea79

4 files changed

Lines changed: 132 additions & 145 deletions

File tree

images/ansible-operator/Dockerfile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ RUN set -e && dnf clean all && rm -rf /var/cache/dnf/* \
3030
# NOTE: This ignored vulnerability (71064) was detected in requests, \
3131
# but the upgraded version doesn't support the use case (protocol we are using).\
3232
# Ref: https://github.com/operator-framework/ansible-operator-plugins/pull/67#issuecomment-2189164688 \
33-
&& pipenv check --ignore 71064 --ignore 77680 --ignore 77744 --ignore 77745 \
33+
&& pipenv check --ignore 71064 --ignore 77680 \
3434
&& dnf remove -y gcc libffi-devel openssl-devel python3.12-devel \
3535
&& dnf clean all \
3636
&& rm -rf /var/cache/dnf

images/ansible-operator/Pipfile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,7 @@ name = "pypi"
77
ansible-runner = "~=2.4.0"
88
ansible-runner-http = "~=1.0.0"
99
ansible-core = "~=2.18.3"
10-
urllib3 = "~=1.26.2"
10+
urllib3 = "~=2.5.0"
1111
kubernetes = "==33.1.0"
1212
requests = "~=2.31.0"
1313

0 commit comments

Comments
 (0)