Rutabaga

Merge ~pelpsi/rutabaga/+git/dependencies:gunicorn-upgrade-HTTP-request-smuggling-vulnerability into rutabaga:master

Git
lp:~pelpsi/rutabaga/+git/dependencies
gunicorn-upgrade-HTTP-request-smuggling-vulnerability
Merge into master

Proposed by Simone Pelosi on 2023-03-31

Status:	Superseded
Proposed branch:	~pelpsi/rutabaga/+git/dependencies:gunicorn-upgrade-HTTP-request-smuggling-vulnerability
Merge into:	rutabaga:master
Diff against target:	228 lines (+0/-0) 0 files modified
Related bugs:	Link a bug report

Reviewer	Review Type	Date Requested	Status
Launchpad code reviewers		2023-03-31	Pending
Review via email: mp+440150@code.launchpad.net

This proposal has been superseded by a proposal from 2023-03-31.

Commit message

Upgraded gunicorn to fix HTTP request smuggling vulnerability

A penetration test found that our gunicorn version is vulnerable, version 20.1.0 should be safe.

Unmerged commits

e8f5f51... by Simone Pelosi on 2023-03-31

Upgraded gunicorn to fix HTTP request smuggling vulnerability

A penetration test found that our gunicorn version is vulnerable, version 20.1.0 should be safe.

3d89742... by Colin Watson on 2021-09-13

Add charm dependencies

Merged from https://code.launchpad.net/~cjwatson/rutabaga/+git/dependencies/+merge/408428

1c1b664... by Colin Watson on 2021-09-10

Add charm dependencies

3522fe1... by Colin Watson on 2021-09-09

Add pip 19.0.2, setuptools 42.0.2, and wheel 0.33.1

Merged from https://code.launchpad.net/~cjwatson/rutabaga/+git/dependencies/+merge/408089

c4063c0... by Colin Watson on 2021-09-03

Add pip 19.0.2, setuptools 42.0.2, and wheel 0.33.1

Upgrading these is enough to let us bootstrap test runs in Jenkins.

17e64bf... by Colin Watson on 2021-08-23

Add PyYAML 5.2, envdir 1.0.1, and pip 18.1

These are all needed to build on focal.

4336773... by Colin Watson on 2019-01-21

Add a unittest2 wheel

This works around https://github.com/pypa/setuptools/issues/409 with
current versions of the package installation toolchain.

61f1603... by Colin Watson on 2019-01-21

We don't need to have .bzr in .gitignore

9780692... by Kit Randel on 2016-07-25

Add .gitignore.

9dd790c... by Kit Randel on 2015-11-25

Upgrade to zope.interface 4.1.3

Preview Diff

[H/L] Next/Prev Comment, [J/K] Next/Prev File, [N/P] Next/Prev Hunk

Subscribers

People subscribed via source and target branches

to all changes:

Canonical Launchpad Engineering

Simone Pelosi

1	diff --git a/Jinja2-2.10.1.tar.gz b/Jinja2-2.10.1.tar.gz
2	new file mode 100644
3	index 0000000..ffd1054
4	Binary files /dev/null and b/Jinja2-2.10.1.tar.gz differ
5	diff --git a/MarkupSafe-1.1.1.tar.gz b/MarkupSafe-1.1.1.tar.gz
6	new file mode 100644
7	index 0000000..a6dad8e
8	Binary files /dev/null and b/MarkupSafe-1.1.1.tar.gz differ
9	diff --git a/Paste-2.0.2.tar.gz b/Paste-2.0.2.tar.gz
10	new file mode 100644
11	index 0000000..1ebbce7
12	Binary files /dev/null and b/Paste-2.0.2.tar.gz differ
13	diff --git a/PasteDeploy-1.5.2.tar.gz b/PasteDeploy-1.5.2.tar.gz
14	new file mode 100644
15	index 0000000..fd4f9e1
16	Binary files /dev/null and b/PasteDeploy-1.5.2.tar.gz differ
17	diff --git a/PyYAML-3.11.tar.gz b/PyYAML-3.11.tar.gz
18	new file mode 100644
19	index 0000000..2a5d431
20	Binary files /dev/null and b/PyYAML-3.11.tar.gz differ
21	diff --git a/PyYAML-5.2.tar.gz b/PyYAML-5.2.tar.gz
22	new file mode 100644
23	index 0000000..666d12a
24	Binary files /dev/null and b/PyYAML-5.2.tar.gz differ
25	diff --git a/Tempita-0.5.2.tar.gz b/Tempita-0.5.2.tar.gz
26	new file mode 100644
27	index 0000000..755befc
28	Binary files /dev/null and b/Tempita-0.5.2.tar.gz differ
29	diff --git a/WebOb-1.5.1.tar.gz b/WebOb-1.5.1.tar.gz
30	new file mode 100644
31	index 0000000..689a47c
32	Binary files /dev/null and b/WebOb-1.5.1.tar.gz differ
33	diff --git a/WebTest-2.0.18.zip b/WebTest-2.0.18.zip
34	new file mode 100644
35	index 0000000..a4a22de
36	Binary files /dev/null and b/WebTest-2.0.18.zip differ
37	diff --git a/argparse-1.4.0.tar.gz b/argparse-1.4.0.tar.gz
38	new file mode 100644
39	index 0000000..937eea6
40	Binary files /dev/null and b/argparse-1.4.0.tar.gz differ
41	diff --git a/beautifulsoup4-4.4.1.tar.gz b/beautifulsoup4-4.4.1.tar.gz
42	new file mode 100644
43	index 0000000..5080765
44	Binary files /dev/null and b/beautifulsoup4-4.4.1.tar.gz differ
45	diff --git a/charmhelpers-0.20.22.tar.gz b/charmhelpers-0.20.22.tar.gz
46	new file mode 100644
47	index 0000000..bd5d222
48	Binary files /dev/null and b/charmhelpers-0.20.22.tar.gz differ
49	diff --git a/charms.reactive-1.4.1.tar.gz b/charms.reactive-1.4.1.tar.gz
50	new file mode 100644
51	index 0000000..03bc1fe
52	Binary files /dev/null and b/charms.reactive-1.4.1.tar.gz differ
53	diff --git a/colander-1.0.tar.gz b/colander-1.0.tar.gz
54	new file mode 100644
55	index 0000000..e60c8b4
56	Binary files /dev/null and b/colander-1.0.tar.gz differ
57	diff --git a/cornice-1.0.0.tar.gz b/cornice-1.0.0.tar.gz
58	new file mode 100644
59	index 0000000..624e4eb
60	Binary files /dev/null and b/cornice-1.0.0.tar.gz differ
61	diff --git a/envdir-0.7.tar.gz b/envdir-0.7.tar.gz
62	new file mode 100644
63	index 0000000..e5cff3d
64	Binary files /dev/null and b/envdir-0.7.tar.gz differ
65	diff --git a/envdir-1.0.1.tar.gz b/envdir-1.0.1.tar.gz
66	new file mode 100644
67	index 0000000..7b290d1
68	Binary files /dev/null and b/envdir-1.0.1.tar.gz differ
69	diff --git a/extras-0.0.3.tar.gz b/extras-0.0.3.tar.gz
70	new file mode 100644
71	index 0000000..46133fd
72	Binary files /dev/null and b/extras-0.0.3.tar.gz differ
73	diff --git a/fixtures-1.3.1.tar.gz b/fixtures-1.3.1.tar.gz
74	new file mode 100644
75	index 0000000..1d55ac2
76	Binary files /dev/null and b/fixtures-1.3.1.tar.gz differ
77	diff --git a/flake8-2.5.0.tar.gz b/flake8-2.5.0.tar.gz
78	new file mode 100644
79	index 0000000..890e6b8
80	Binary files /dev/null and b/flake8-2.5.0.tar.gz differ
81	diff --git a/gunicorn-19.3.0.tar.gz b/gunicorn-19.3.0.tar.gz
82	new file mode 100644
83	index 0000000..1d38258
84	Binary files /dev/null and b/gunicorn-19.3.0.tar.gz differ
85	diff --git a/gunicorn-20.1.0.tar.gz b/gunicorn-20.1.0.tar.gz
86	new file mode 100644
87	index 0000000..b5da493
88	Binary files /dev/null and b/gunicorn-20.1.0.tar.gz differ
89	diff --git a/iso8601-0.1.10.tar.gz b/iso8601-0.1.10.tar.gz
90	new file mode 100644
91	index 0000000..741df00
92	Binary files /dev/null and b/iso8601-0.1.10.tar.gz differ
93	diff --git a/linecache2-1.0.0.tar.gz b/linecache2-1.0.0.tar.gz
94	new file mode 100644
95	index 0000000..4604f93
96	Binary files /dev/null and b/linecache2-1.0.0.tar.gz differ
97	diff --git a/mccabe-0.3.1.tar.gz b/mccabe-0.3.1.tar.gz
98	new file mode 100644
99	index 0000000..c613d37
100	Binary files /dev/null and b/mccabe-0.3.1.tar.gz differ
101	diff --git a/netaddr-0.7.19.tar.gz b/netaddr-0.7.19.tar.gz
102	new file mode 100644
103	index 0000000..cc31d9d
104	Binary files /dev/null and b/netaddr-0.7.19.tar.gz differ
105	diff --git a/pbr-1.8.1.tar.gz b/pbr-1.8.1.tar.gz
106	new file mode 100644
107	index 0000000..245c14e
108	Binary files /dev/null and b/pbr-1.8.1.tar.gz differ
109	diff --git a/pbr-5.6.0.tar.gz b/pbr-5.6.0.tar.gz
110	new file mode 100644
111	index 0000000..0d5c965
112	Binary files /dev/null and b/pbr-5.6.0.tar.gz differ
113	diff --git a/pep8-1.5.7.tar.gz b/pep8-1.5.7.tar.gz
114	new file mode 100644
115	index 0000000..cdfd693
116	Binary files /dev/null and b/pep8-1.5.7.tar.gz differ
117	diff --git a/pip-18.1.tar.gz b/pip-18.1.tar.gz
118	new file mode 100644
119	index 0000000..a18192d
120	Binary files /dev/null and b/pip-18.1.tar.gz differ
121	diff --git a/pip-19.0.2.tar.gz b/pip-19.0.2.tar.gz
122	new file mode 100644
123	index 0000000..307a175
124	Binary files /dev/null and b/pip-19.0.2.tar.gz differ
125	diff --git a/pip-7.1.2.tar.gz b/pip-7.1.2.tar.gz
126	new file mode 100644
127	index 0000000..56ead41
128	Binary files /dev/null and b/pip-7.1.2.tar.gz differ
129	diff --git a/pyaml-21.8.3.tar.gz b/pyaml-21.8.3.tar.gz
130	new file mode 100644
131	index 0000000..6b6c197
132	Binary files /dev/null and b/pyaml-21.8.3.tar.gz differ
133	diff --git a/pyflakes-1.0.0.tar.gz b/pyflakes-1.0.0.tar.gz
134	new file mode 100644
135	index 0000000..ac9dc8b
136	Binary files /dev/null and b/pyflakes-1.0.0.tar.gz differ
137	diff --git a/pyramid-1.5.7.tar.gz b/pyramid-1.5.7.tar.gz
138	new file mode 100644
139	index 0000000..f1ced3b
140	Binary files /dev/null and b/pyramid-1.5.7.tar.gz differ
141	diff --git a/python-mimeparse-0.1.4.tar.gz b/python-mimeparse-0.1.4.tar.gz
142	new file mode 100644
143	index 0000000..f117f57
144	Binary files /dev/null and b/python-mimeparse-0.1.4.tar.gz differ
145	diff --git a/repoze.lru-0.6.tar.gz b/repoze.lru-0.6.tar.gz
146	new file mode 100644
147	index 0000000..81e8ee5
148	Binary files /dev/null and b/repoze.lru-0.6.tar.gz differ
149	diff --git a/requests-2.7.0.tar.gz b/requests-2.7.0.tar.gz
150	new file mode 100644
151	index 0000000..0a67c73
152	Binary files /dev/null and b/requests-2.7.0.tar.gz differ
153	diff --git a/setuptools-18.5.tar.gz b/setuptools-18.5.tar.gz
154	new file mode 100644
155	index 0000000..cd2ab62
156	Binary files /dev/null and b/setuptools-18.5.tar.gz differ
157	diff --git a/setuptools-41.6.0.zip b/setuptools-41.6.0.zip
158	new file mode 100644
159	index 0000000..3345759
160	Binary files /dev/null and b/setuptools-41.6.0.zip differ
161	diff --git a/setuptools-42.0.2.zip b/setuptools-42.0.2.zip
162	new file mode 100644
163	index 0000000..ab08097
164	Binary files /dev/null and b/setuptools-42.0.2.zip differ
165	diff --git a/setuptools_scm-1.17.0.tar.gz b/setuptools_scm-1.17.0.tar.gz
166	new file mode 100644
167	index 0000000..43b16c7
168	Binary files /dev/null and b/setuptools_scm-1.17.0.tar.gz differ
169	diff --git a/simplejson-3.8.1.tar.gz b/simplejson-3.8.1.tar.gz
170	new file mode 100644
171	index 0000000..417ade6
172	Binary files /dev/null and b/simplejson-3.8.1.tar.gz differ
173	diff --git a/six-1.10.0.tar.gz b/six-1.10.0.tar.gz
174	new file mode 100644
175	index 0000000..ac8eec5
176	Binary files /dev/null and b/six-1.10.0.tar.gz differ
177	diff --git a/six-1.16.0.tar.gz b/six-1.16.0.tar.gz
178	new file mode 100644
179	index 0000000..5bf3a27
180	Binary files /dev/null and b/six-1.16.0.tar.gz differ
181	diff --git a/testtools-1.8.0.tar.gz b/testtools-1.8.0.tar.gz
182	new file mode 100644
183	index 0000000..dd5f9ed
184	Binary files /dev/null and b/testtools-1.8.0.tar.gz differ
185	diff --git a/traceback2-1.4.0.tar.gz b/traceback2-1.4.0.tar.gz
186	new file mode 100644
187	index 0000000..7043739
188	Binary files /dev/null and b/traceback2-1.4.0.tar.gz differ
189	diff --git a/translationstring-1.3.tar.gz b/translationstring-1.3.tar.gz
190	new file mode 100644
191	index 0000000..52c8c1e
192	Binary files /dev/null and b/translationstring-1.3.tar.gz differ
193	diff --git a/unittest2-1.1.0-py2.py3-none-any.whl b/unittest2-1.1.0-py2.py3-none-any.whl
194	new file mode 100644
195	index 0000000..00bca37
196	Binary files /dev/null and b/unittest2-1.1.0-py2.py3-none-any.whl differ
197	diff --git a/unittest2-1.1.0.tar.gz b/unittest2-1.1.0.tar.gz
198	new file mode 100644
199	index 0000000..ec686eb
200	Binary files /dev/null and b/unittest2-1.1.0.tar.gz differ
201	diff --git a/venusian-1.0.tar.gz b/venusian-1.0.tar.gz
202	new file mode 100644
203	index 0000000..c8fc8cc
204	Binary files /dev/null and b/venusian-1.0.tar.gz differ
205	diff --git a/waitress-0.8.10.tar.gz b/waitress-0.8.10.tar.gz
206	new file mode 100644
207	index 0000000..b54e000
208	Binary files /dev/null and b/waitress-0.8.10.tar.gz differ
209	diff --git a/waitress-0.8.9.tar.gz b/waitress-0.8.9.tar.gz
210	new file mode 100644
211	index 0000000..73fb6e6
212	Binary files /dev/null and b/waitress-0.8.9.tar.gz differ
213	diff --git a/wheel-0.33.1.tar.gz b/wheel-0.33.1.tar.gz
214	new file mode 100644
215	index 0000000..bab94be
216	Binary files /dev/null and b/wheel-0.33.1.tar.gz differ
217	diff --git a/wheel-0.33.6.tar.gz b/wheel-0.33.6.tar.gz
218	new file mode 100644
219	index 0000000..c922c4e
220	Binary files /dev/null and b/wheel-0.33.6.tar.gz differ
221	diff --git a/zope.deprecation-4.1.2.tar.gz b/zope.deprecation-4.1.2.tar.gz
222	new file mode 100644
223	index 0000000..5522180
224	Binary files /dev/null and b/zope.deprecation-4.1.2.tar.gz differ
225	diff --git a/zope.interface-4.1.3.tar.gz b/zope.interface-4.1.3.tar.gz
226	new file mode 100644
227	index 0000000..c9e652f
228	Binary files /dev/null and b/zope.interface-4.1.3.tar.gz differ