import OL fence-agents-4.10.0-55.el9_3.3

.fence-agents.metadata

@@ -1,4 +1,4 @@
-3297473a9d57e93ff378eab173990c1b64673c01 SOURCES/Jinja2-3.0.2.tar.gz
+a9db54d91b53f76f546afa1414dd015c0574ebeb SOURCES/Jinja2-3.1.3.tar.gz
 e1b766b2b1601fde67b3b19ed2f13b9746bb1cca SOURCES/MarkupSafe-2.0.1.tar.gz
 e1fb5dc6f95a85e7d1f93c6701b331201e8b5479 SOURCES/PyJWT-2.1.0-py3-none-any.whl
 53fc16036940089ceadd4127381e40fd6106a7ed SOURCES/PyYAML-5.1.tar.gz
@@ -19,8 +19,7 @@ e20df6c9635f1db9a3c891b9239b4319d88b1747 SOURCES/azure_mgmt_core-1.2.2-py2.py3-n
 6ef53a76455b377b02b4774c32a04e241cdb24eb SOURCES/botocore-2.0.0dev123.zip
 c953dcd6e69587e5b182d77255ed836172fea70a SOURCES/cachetools-4.2.2-py3-none-any.whl
 0d12f48faa727f0979e9ad5c4c80dfa32b73caff SOURCES/cachetools-4.2.4.tar.gz
-b13e22d55867e2ca5f92e5289cfdc21ba6e343aa SOURCES/certifi-2021.10.8.tar.gz
+ec7e8dd8ef95edfdb83a1ea040b8b88507b47615 SOURCES/certifi-2023.7.22.tar.gz
-2fcaa39108a9c99700c6f3f4198fcaa47b8ed707 SOURCES/certifi-2021.5.30-py2.py3-none-any.whl
 17953cc85717e0f4501dbc7b5fb8e75d67dcdcd3 SOURCES/cffi-1.14.5-cp39-cp39-manylinux1_x86_64.whl
 96faab7de7e9a71b37f22adb64daf2898e967e3e SOURCES/chardet-3.0.4-py2.py3-none-any.whl
 e9eb83c71c09b3c8249bd7d6d2619b65fff03874 SOURCES/chardet-4.0.0-py2.py3-none-any.whl
@@ -62,7 +61,7 @@ e0fa19f8fda46a1fa2253477499b116b33f67175 SOURCES/pyasn1-0.4.8.tar.gz
 43b89feb6864fe359aae89120627165219de313b SOURCES/pyasn1-modules-0.2.8.tar.gz
 d77aa46abbcaccc4054a0777a191e427c785c65a SOURCES/pyasn1_modules-0.2.8-py2.py3-none-any.whl
 a0df3ebc552b551f8e99a05cf0a29ce30bef62ee SOURCES/pycparser-2.20-py2.py3-none-any.whl
-df33feb2a14904c0461b5dcc3ca31f910206e7bd SOURCES/pycryptodome-3.10.1-cp35-abi3-manylinux2010_x86_64.whl
+c55d177e9484d974c95078d4ae945f89ba2c7251 SOURCES/pycryptodome-3.20.0.tar.gz
 c8307f47e3b75a2d02af72982a2dfefa3f56e407 SOURCES/pyparsing-2.4.7-py2.py3-none-any.whl
 6082312a090f5be5e796e0854294da0738ec0379 SOURCES/pyparsing-3.0.1.tar.gz
 24213006f983ada342ed86ea516028fdbb1ac66f SOURCES/pyroute2-0.6.4.tar.gz
@@ -95,8 +94,7 @@ a4f02fddae697614e356cadfddb6241cc7737f38 SOURCES/setuptools_scm-6.3.2.tar.gz
 47a980b20875d1a1714e921552b5bb0eda190f37 SOURCES/suds_community-0.8.5-py3-none-any.whl
 b42b7960047441db7dc021cc20e14279bd836f8d SOURCES/tomli-1.0.1.tar.gz
 83be56610e5f824bb05ff7a5618d6d4df9b6cc08 SOURCES/uritemplate-3.0.1-py2.py3-none-any.whl
-206b17697417cbf5fc55f1e39c7ceb2197fe3e63 SOURCES/urllib3-1.26.6-py2.py3-none-any.whl
+84e2852d8da1655373f7ce5e7d5d3e256b62b4e4 SOURCES/urllib3-1.26.18.tar.gz
-eb35c3fd8b0867ae988a15917d6b80e8bdf60222 SOURCES/urllib3-1.26.7.tar.gz
 7126323614cada181bc8b06436e80ef372ff8656 SOURCES/wcwidth-0.1.9-py2.py3-none-any.whl
 540f083782c584989c1a0f69ffd69ba7aae07db6 SOURCES/websocket-client-1.2.1.tar.gz
 b6c48d8714e043524be7a869d1db0adcd8441cd4 SOURCES/wheel-0.37.0-py2.py3-none-any.whl

.gitignore

@@ -1,4 +1,4 @@
-SOURCES/Jinja2-3.0.2.tar.gz
+SOURCES/Jinja2-3.1.3.tar.gz
 SOURCES/MarkupSafe-2.0.1.tar.gz
 SOURCES/PyJWT-2.1.0-py3-none-any.whl
 SOURCES/PyYAML-5.1.tar.gz
@@ -19,8 +19,7 @@ SOURCES/botocore-1.20.102-py2.py3-none-any.whl
 SOURCES/botocore-2.0.0dev123.zip
 SOURCES/cachetools-4.2.2-py3-none-any.whl
 SOURCES/cachetools-4.2.4.tar.gz
-SOURCES/certifi-2021.10.8.tar.gz
+SOURCES/certifi-2023.7.22.tar.gz
-SOURCES/certifi-2021.5.30-py2.py3-none-any.whl
 SOURCES/cffi-1.14.5-cp39-cp39-manylinux1_x86_64.whl
 SOURCES/chardet-3.0.4-py2.py3-none-any.whl
 SOURCES/chardet-4.0.0-py2.py3-none-any.whl
@@ -62,7 +61,7 @@ SOURCES/pyasn1-0.4.8.tar.gz
 SOURCES/pyasn1-modules-0.2.8.tar.gz
 SOURCES/pyasn1_modules-0.2.8-py2.py3-none-any.whl
 SOURCES/pycparser-2.20-py2.py3-none-any.whl
-SOURCES/pycryptodome-3.10.1-cp35-abi3-manylinux2010_x86_64.whl
+SOURCES/pycryptodome-3.20.0.tar.gz
 SOURCES/pyparsing-2.4.7-py2.py3-none-any.whl
 SOURCES/pyparsing-3.0.1.tar.gz
 SOURCES/pyroute2-0.6.4.tar.gz
@@ -95,8 +94,7 @@ SOURCES/six-1.16.0.tar.gz
 SOURCES/suds_community-0.8.5-py3-none-any.whl
 SOURCES/tomli-1.0.1.tar.gz
 SOURCES/uritemplate-3.0.1-py2.py3-none-any.whl
-SOURCES/urllib3-1.26.6-py2.py3-none-any.whl
+SOURCES/urllib3-1.26.18.tar.gz
-SOURCES/urllib3-1.26.7.tar.gz
 SOURCES/wcwidth-0.1.9-py2.py3-none-any.whl
 SOURCES/websocket-client-1.2.1.tar.gz
 SOURCES/wheel-0.37.0-py2.py3-none-any.whl

SPECS/fence-agents.spec

@@ -18,7 +18,7 @@
 %global kubernetes		kubernetes
 %global kubernetes_version	12.0.1
 %global certifi			certifi
-%global certifi_version		2021.10.8
+%global certifi_version		2023.7.22
 %global googleauth		google-auth
 %global googleauth_version	2.3.0
 %global cachetools		cachetools
@@ -34,11 +34,11 @@
 %global six			six
 %global six_version		1.16.0
 %global urllib3 		urllib3
-%global urllib3_version		1.26.7
+%global urllib3_version 	1.26.18
 %global websocketclient 	websocket-client
 %global websocketclient_version 1.2.1
 %global jinja2			Jinja2
-%global jinja2_version		3.0.2
+%global jinja2_version		3.1.3
 %global markupsafe		MarkupSafe
 %global markupsafe_version	2.0.1
 %global stringutils		string-utils
@@ -59,7 +59,7 @@
 Name: fence-agents
 Summary: Set of unified programs capable of host isolation ("fencing")
 Version: 4.10.0
-Release: 55%{?alphatag:.%{alphatag}}%{?dist}
+Release: 55%{?alphatag:.%{alphatag}}%{?dist}.3
 License: GPLv2+ and LGPLv2+
 URL: https://github.com/ClusterLabs/fence-agents
 Source0: https://fedorahosted.org/releases/f/e/fence-agents/%{name}-%{version}.tar.gz
@@ -83,7 +83,7 @@ Source1002: aliyuncli-2.1.10-py2.py3-none-any.whl
 Source1003: cffi-1.14.5-cp39-cp39-manylinux1_x86_64.whl
 Source1004: colorama-0.3.3.tar.gz
 Source1005: jmespath-0.7.1-py2.py3-none-any.whl
-Source1006: pycryptodome-3.10.1-cp35-abi3-manylinux2010_x86_64.whl
+Source1006: pycryptodome-3.20.0.tar.gz
 Source1007: pycparser-2.20-py2.py3-none-any.whl
 # awscli
 Source1008: awscrt-0.11.13-cp39-cp39-manylinux2014_x86_64.whl
@@ -100,7 +100,7 @@ Source1017: boto3-1.17.102-py2.py3-none-any.whl
 Source1018: botocore-1.20.102-py2.py3-none-any.whl
 Source1019: python_dateutil-2.8.1-py2.py3-none-any.whl
 Source1020: s3transfer-0.4.2-py2.py3-none-any.whl
-Source1021: urllib3-1.26.6-py2.py3-none-any.whl
+Source1021: urllib3-1.26.18.tar.gz
 # azure
 Source1022: adal-1.2.7-py2.py3-none-any.whl
 Source1023: azure_common-1.1.27-py2.py3-none-any.whl
@@ -109,7 +109,6 @@ Source1025: azure_mgmt_compute-21.0.0-py2.py3-none-any.whl
 Source1026: azure_mgmt_core-1.2.2-py2.py3-none-any.whl
 Source1027: azure_mgmt_network-19.0.0-py2.py3-none-any.whl
 Source1028: azure-identity-1.10.0.zip
-Source1029: certifi-2021.5.30-py2.py3-none-any.whl
 Source1030: chardet-4.0.0-py2.py3-none-any.whl
 Source1031: idna-2.10-py2.py3-none-any.whl
 Source1032: isodate-0.6.0-py2.py3-none-any.whl
@@ -170,24 +169,23 @@ Source1079: %{pyyaml}-%{pyyaml_version}.tar.gz
 ## but gets removed to use cryptography lib instead
 Source1080: rsa-4.7.2.tar.gz
 Source1081: %{six}-%{six_version}.tar.gz
-Source1082: %{urllib3}-%{urllib3_version}.tar.gz
+Source1082: %{websocketclient}-%{websocketclient_version}.tar.gz
-Source1083: %{websocketclient}-%{websocketclient_version}.tar.gz
+Source1083: %{jinja2}-%{jinja2_version}.tar.gz
-Source1084: %{jinja2}-%{jinja2_version}.tar.gz
+Source1084: %{markupsafe}-%{markupsafe_version}.tar.gz
-Source1085: %{markupsafe}-%{markupsafe_version}.tar.gz
+Source1085: python-%{stringutils}-%{stringutils_version}.tar.gz
-Source1086: python-%{stringutils}-%{stringutils_version}.tar.gz
+Source1086: %{requests}-%{requests_version}.tar.gz
-Source1087: %{requests}-%{requests_version}.tar.gz
+Source1087: %{chrstnormalizer}-%{chrstnormalizer_version}.tar.gz
-Source1088: %{chrstnormalizer}-%{chrstnormalizer_version}.tar.gz
+Source1088: %{idna}-%{idna_version}.tar.gz
-Source1089: %{idna}-%{idna_version}.tar.gz
+Source1089: %{reqstsoauthlib}-%{reqstsoauthlib_version}.tar.gz
-Source1090: %{reqstsoauthlib}-%{reqstsoauthlib_version}.tar.gz
+Source1090: %{ruamelyaml}-%{ruamelyaml_version}.tar.gz
-Source1091: %{ruamelyaml}-%{ruamelyaml_version}.tar.gz
+Source1091: %{setuptools}-%{setuptools_version}.tar.gz
-Source1092: %{setuptools}-%{setuptools_version}.tar.gz
 ## required for installation
-Source1093: setuptools_scm-6.3.2.tar.gz
+Source1092: setuptools_scm-6.3.2.tar.gz
-Source1094: packaging-21.2-py3-none-any.whl
+Source1093: packaging-21.2-py3-none-any.whl
-Source1095: poetry-core-1.0.7.tar.gz
+Source1094: poetry-core-1.0.7.tar.gz
-Source1096: pyparsing-3.0.1.tar.gz
+Source1095: pyparsing-3.0.1.tar.gz
-Source1097: tomli-1.0.1.tar.gz
+Source1096: tomli-1.0.1.tar.gz
-Source1098: wheel-0.37.0-py2.py3-none-any.whl
+Source1097: wheel-0.37.0-py2.py3-none-any.whl
 ### END
 
 Patch0: ha-cloud-support-aliyun.patch
@@ -574,7 +572,7 @@ Provides: bundled(aliyuncli) = 2.1.10
 Provides: bundled(python-cffi) = 1.14.5
 Provides: bundled(python-colorama) = 0.3.3
 Provides: bundled(python-jmespath) = 0.7.1
-Provides: bundled(python-pycryptodome) = 3.10.1
+Provides: bundled(python-pycryptodome) = 3.20.0
 Provides: bundled(python-pycparser) = 2.20
 # awscli
 Provides: bundled(awscli) = 2.2.15
@@ -592,7 +590,7 @@ Provides: bundled(python-boto3) = 1.17.102
 Provides: bundled(python-botocore) = 1.20.102
 Provides: bundled(python-dateutil) = 2.8.1
 Provides: bundled(python-s3transfer) = 0.4.2
-Provides: bundled(python-urllib3) = 1.26.6
+Provides: bundled(python-urllib3) = 1.26.18
 # azure
 Provides: bundled(python-adal) = 1.2.7
 Provides: bundled(python-azure-common) = 1.1.27
@@ -1477,6 +1475,18 @@ are located on corosync cluster nodes.
 %endif
 
 %changelog
+* Thu Mar 07 2024 Akshata Konala <akshata.konala@oracle.com> - 4.10.0-55.3
+- bundled urllib3: fix CVE-2023-45803
+  Resolves: RHEL-18139
+- bundled pycryptodome: fix CVE-2023-52323
+  Resolves: RHEL-20917
+- bundled jinja2: fix CVE-2024-22195
+  Resolves: RHEL-21345
+
+* Tue Dec 12 2023 Alan Steinberg <alan.steinberg@oracle.com> - 4.10.0-55.2
+- python-certifi: Removal of e-Tugra root certificate (CVE-2023-37920)
+- python-urllib3: Cookie request header isn't stripped during cross-origin redirects (CVE-2023-43804)
+
 * Thu Aug  3 2023 Oyvind Albrigtsen <oalbrigt@redhat.com> - 4.10.0-55
 - bundled dateutil: fix tarfile CVE-2007-4559
   Resolves: rhbz#2217902