You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@hbase.apache.org by "Duo Zhang (Jira)" <ji...@apache.org> on 2022/12/13 16:27:00 UTC
[jira] [Resolved] (HBASE-27524) Fix python requirements problem
[ https://issues.apache.org/jira/browse/HBASE-27524?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Duo Zhang resolved HBASE-27524.
-------------------------------
Fix Version/s: 2.6.0
3.0.0-alpha-4
2.4.16
2.5.3
Hadoop Flags: Reviewed
Resolution: Fixed
Pushed to branch-2.4+.
Thanks [~niuyulin] for reviewing!
> Fix python requirements problem
> -------------------------------
>
> Key: HBASE-27524
> URL: https://issues.apache.org/jira/browse/HBASE-27524
> Project: HBase
> Issue Type: Bug
> Components: scripts, security
> Reporter: Duo Zhang
> Assignee: Duo Zhang
> Priority: Major
> Fix For: 2.6.0, 3.0.0-alpha-4, 2.4.16, 2.5.3
>
>
> The dependabot report two security problems for python requirements
> gitpython <= 3.1.20
> certifi < 2022.12.07
> And there is also a parse error
> InstallationError("Invalid requirement: 'cryptography=3.3.2' (from line 22 of /home/dependabot/dependabot-updater/dependabot_tmp_dir/requirements.txt)\nHint: = is not a valid operator. Did you mean == ?")
--
This message was sent by Atlassian Jira
(v8.20.10#820010)