Skip to content

Conversation

@mkertai
Copy link
Collaborator

@mkertai mkertai commented Jan 15, 2026

Regenerate requirements with Python 3.10 to fix urllib3 vulnerabilies (CVE-2025-66471, CVE-2025-66418).

Checks needed to see if the Python version or the dependencies' upgrade does not mess up anything.

Tests/checks:
make check: success
make release-test: success

Reference: azure #496574
Reference: azure #649042

@mkertai mkertai force-pushed the WIP/update-packages-for-vulnerability-fix branch from 53d89bd to 0fc6402 Compare January 15, 2026 14:36
Copy link
Collaborator

@cemiarni cemiarni left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please create a similar commit like this: 7e9c5ce

If you want the whole modification can be one commit, but change the commit message especially the first line to indicate the new python version requirement.

- ubuntu:noble
- debian:bullseye
- debian:bookworm
- debian:trixie
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

At this point we should omit trixie.

Regenerate requirements with Python 3.10 to fix urllib3 vulnerabilies (CVE-2025-66471, CVE-2025-66418).

Checks needed to see if the Python version or the dependencies' upgrade does not mess up anything.



Reference: azure #496574
Reference: azure #649042
@mkertai mkertai force-pushed the WIP/update-packages-for-vulnerability-fix branch from 0fc6402 to 34ef6de Compare January 15, 2026 16:06
@cemiarni cemiarni merged commit 4e5aff0 into master Jan 16, 2026
4 checks passed
@cemiarni cemiarni deleted the WIP/update-packages-for-vulnerability-fix branch January 16, 2026 12:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants