Skip to content
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
26 changes: 12 additions & 14 deletions codeserver/ubi9-python-3.12/pylock.toml
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
# This file was autogenerated by uv via the following command:
# uv pip compile pyproject.toml --output-file pylock.toml --format pylock.toml --generate-hashes --emit-index-url --python-version=3.12 --universal --no-annotate --no-emit-package odh-notebooks-meta-llmcompressor-deps --no-emit-package odh-notebooks-meta-runtime-elyra-deps --index-url=https://pypi.org/simple
# uv pip compile pyproject.toml --output-file pylock.toml --format pylock.toml --generate-hashes --emit-index-url --python-version=3.12 --universal --no-annotate --no-emit-package odh-notebooks-meta-llmcompressor-deps --no-emit-package odh-notebooks-meta-runtime-elyra-deps --constraints=../../dependencies/cve-constraints.txt --index-url=https://pypi.org/simple
lock-version = "1.0"
created-by = "uv"
requires-python = ">=3.12"
Expand Down Expand Up @@ -2577,21 +2577,19 @@ wheels = [{ url = "https://files.pythonhosted.org/packages/fb/12/5911ae3eeec4780

[[packages]]
name = "tornado"
version = "6.5.4"
version = "6.5.5"
marker = "implementation_name == 'cpython' and sys_platform == 'linux'"
sdist = { url = "https://files.pythonhosted.org/packages/37/1d/0a336abf618272d53f62ebe274f712e213f5a03c0b2339575430b8362ef2/tornado-6.5.4.tar.gz", upload-time = 2025-12-15T19:21:03Z, size = 513632, hashes = { sha256 = "a22fa9047405d03260b483980635f0b041989d8bcc9a313f8fe18b411d84b1d7" } }
sdist = { url = "https://files.pythonhosted.org/packages/f8/f1/3173dfa4a18db4a9b03e5d55325559dab51ee653763bb8745a75af491286/tornado-6.5.5.tar.gz", upload-time = 2026-03-10T21:31:02Z, size = 516006, hashes = { sha256 = "192b8f3ea91bd7f1f50c06955416ed76c6b72f96779b962f07f911b91e8d30e9" } }
wheels = [
{ url = "https://files.pythonhosted.org/packages/ab/a9/e94a9d5224107d7ce3cc1fab8d5dc97f5ea351ccc6322ee4fb661da94e35/tornado-6.5.4-cp39-abi3-macosx_10_9_universal2.whl", upload-time = 2025-12-15T19:20:48Z, size = 443909, hashes = { sha256 = "d6241c1a16b1c9e4cc28148b1cda97dd1c6cb4fb7068ac1bedc610768dff0ba9" } },
{ url = "https://files.pythonhosted.org/packages/db/7e/f7b8d8c4453f305a51f80dbb49014257bb7d28ccb4bbb8dd328ea995ecad/tornado-6.5.4-cp39-abi3-macosx_10_9_x86_64.whl", upload-time = 2025-12-15T19:20:49Z, size = 442163, hashes = { sha256 = "2d50f63dda1d2cac3ae1fa23d254e16b5e38153758470e9956cbc3d813d40843" } },
{ url = "https://files.pythonhosted.org/packages/ba/b5/206f82d51e1bfa940ba366a8d2f83904b15942c45a78dd978b599870ab44/tornado-6.5.4-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", upload-time = 2025-12-15T19:20:51Z, size = 445746, hashes = { sha256 = "d1cf66105dc6acb5af613c054955b8137e34a03698aa53272dbda4afe252be17" } },
{ url = "https://files.pythonhosted.org/packages/8e/9d/1a3338e0bd30ada6ad4356c13a0a6c35fbc859063fa7eddb309183364ac1/tornado-6.5.4-cp39-abi3-manylinux_2_5_i686.manylinux1_i686.manylinux_2_17_i686.manylinux2014_i686.whl", upload-time = 2025-12-15T19:20:52Z, size = 445083, hashes = { sha256 = "50ff0a58b0dc97939d29da29cd624da010e7f804746621c78d14b80238669335" } },
{ url = "https://files.pythonhosted.org/packages/50/d4/e51d52047e7eb9a582da59f32125d17c0482d065afd5d3bc435ff2120dc5/tornado-6.5.4-cp39-abi3-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_17_x86_64.manylinux2014_x86_64.whl", upload-time = 2025-12-15T19:20:53Z, size = 445315, hashes = { sha256 = "e5fb5e04efa54cf0baabdd10061eb4148e0be137166146fff835745f59ab9f7f" } },
{ url = "https://files.pythonhosted.org/packages/27/07/2273972f69ca63dbc139694a3fc4684edec3ea3f9efabf77ed32483b875c/tornado-6.5.4-cp39-abi3-musllinux_1_2_aarch64.whl", upload-time = 2025-12-15T19:20:56Z, size = 446003, hashes = { sha256 = "9c86b1643b33a4cd415f8d0fe53045f913bf07b4a3ef646b735a6a86047dda84" } },
{ url = "https://files.pythonhosted.org/packages/d1/83/41c52e47502bf7260044413b6770d1a48dda2f0246f95ee1384a3cd9c44a/tornado-6.5.4-cp39-abi3-musllinux_1_2_i686.whl", upload-time = 2025-12-15T19:20:57Z, size = 445412, hashes = { sha256 = "6eb82872335a53dd063a4f10917b3efd28270b56a33db69009606a0312660a6f" } },
{ url = "https://files.pythonhosted.org/packages/10/c7/bc96917f06cbee182d44735d4ecde9c432e25b84f4c2086143013e7b9e52/tornado-6.5.4-cp39-abi3-musllinux_1_2_x86_64.whl", upload-time = 2025-12-15T19:20:58Z, size = 445392, hashes = { sha256 = "6076d5dda368c9328ff41ab5d9dd3608e695e8225d1cd0fd1e006f05da3635a8" } },
{ url = "https://files.pythonhosted.org/packages/0c/1a/d7592328d037d36f2d2462f4bc1fbb383eec9278bc786c1b111cbbd44cfa/tornado-6.5.4-cp39-abi3-win32.whl", upload-time = 2025-12-15T19:21:00Z, size = 446481, hashes = { sha256 = "1768110f2411d5cd281bac0a090f707223ce77fd110424361092859e089b38d1" } },
{ url = "https://files.pythonhosted.org/packages/d6/6d/c69be695a0a64fd37a97db12355a035a6d90f79067a3cf936ec2b1dc38cd/tornado-6.5.4-cp39-abi3-win_amd64.whl", upload-time = 2025-12-15T19:21:01Z, size = 446886, hashes = { sha256 = "fa07d31e0cd85c60713f2b995da613588aa03e1303d75705dca6af8babc18ddc" } },
{ url = "https://files.pythonhosted.org/packages/50/49/8dc3fd90902f70084bd2cd059d576ddb4f8bb44c2c7c0e33a11422acb17e/tornado-6.5.4-cp39-abi3-win_arm64.whl", upload-time = 2025-12-15T19:21:02Z, size = 445910, hashes = { sha256 = "053e6e16701eb6cbe641f308f4c1a9541f91b6261991160391bfc342e8a551a1" } },
{ url = "https://files.pythonhosted.org/packages/59/8c/77f5097695f4dd8255ecbd08b2a1ed8ba8b953d337804dd7080f199e12bf/tornado-6.5.5-cp39-abi3-macosx_10_9_universal2.whl", upload-time = 2026-03-10T21:30:44Z, size = 445983, hashes = { sha256 = "487dc9cc380e29f58c7ab88f9e27cdeef04b2140862e5076a66fb6bb68bb1bfa" } },
{ url = "https://files.pythonhosted.org/packages/ab/5e/7625b76cd10f98f1516c36ce0346de62061156352353ef2da44e5c21523c/tornado-6.5.5-cp39-abi3-macosx_10_9_x86_64.whl", upload-time = 2026-03-10T21:30:46Z, size = 444246, hashes = { sha256 = "65a7f1d46d4bb41df1ac99f5fcb685fb25c7e61613742d5108b010975a9a6521" } },
{ url = "https://files.pythonhosted.org/packages/b2/04/7b5705d5b3c0fab088f434f9c83edac1573830ca49ccf29fb83bf7178eec/tornado-6.5.5-cp39-abi3-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl", upload-time = 2026-03-10T21:30:48Z, size = 447229, hashes = { sha256 = "e74c92e8e65086b338fd56333fb9a68b9f6f2fe7ad532645a290a464bcf46be5" } },
{ url = "https://files.pythonhosted.org/packages/34/01/74e034a30ef59afb4097ef8659515e96a39d910b712a89af76f5e4e1f93c/tornado-6.5.5-cp39-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", upload-time = 2026-03-10T21:30:51Z, size = 448192, hashes = { sha256 = "435319e9e340276428bbdb4e7fa732c2d399386d1de5686cb331ec8eee754f07" } },
{ url = "https://files.pythonhosted.org/packages/be/00/fe9e02c5a96429fce1a1d15a517f5d8444f9c412e0bb9eadfbe3b0fc55bf/tornado-6.5.5-cp39-abi3-musllinux_1_2_aarch64.whl", upload-time = 2026-03-10T21:30:53Z, size = 448039, hashes = { sha256 = "3f54aa540bdbfee7b9eb268ead60e7d199de5021facd276819c193c0fb28ea4e" } },
{ url = "https://files.pythonhosted.org/packages/82/9e/656ee4cec0398b1d18d0f1eb6372c41c6b889722641d84948351ae19556d/tornado-6.5.5-cp39-abi3-musllinux_1_2_x86_64.whl", upload-time = 2026-03-10T21:30:55Z, size = 447445, hashes = { sha256 = "36abed1754faeb80fbd6e64db2758091e1320f6bba74a4cf8c09cd18ccce8aca" } },
{ url = "https://files.pythonhosted.org/packages/5a/76/4921c00511f88af86a33de770d64141170f1cfd9c00311aea689949e274e/tornado-6.5.5-cp39-abi3-win32.whl", upload-time = 2026-03-10T21:30:57Z, size = 448582, hashes = { sha256 = "dd3eafaaeec1c7f2f8fdcd5f964e8907ad788fe8a5a32c4426fbbdda621223b7" } },
{ url = "https://files.pythonhosted.org/packages/2c/23/f6c6112a04d28eed765e374435fb1a9198f73e1ec4b4024184f21faeb1ad/tornado-6.5.5-cp39-abi3-win_amd64.whl", upload-time = 2026-03-10T21:30:58Z, size = 448990, hashes = { sha256 = "6443a794ba961a9f619b1ae926a2e900ac20c34483eea67be4ed8f1e58d3ef7b" } },
{ url = "https://files.pythonhosted.org/packages/b7/c8/876602cbc96469911f0939f703453c1157b0c826ecb05bdd32e023397d4e/tornado-6.5.5-cp39-abi3-win_arm64.whl", upload-time = 2026-03-10T21:31:00Z, size = 448016, hashes = { sha256 = "2c9a876e094109333f888539ddb2de4361743e5d21eece20688e3e351e4990a6" } },
]

[[packages]]
Expand Down
17 changes: 17 additions & 0 deletions dependencies/cve-constraints.txt
Original file line number Diff line number Diff line change
@@ -0,0 +1,17 @@
# CVE-induced minimum version constraints
# This file is used with `uv pip compile --constraints` via pylocks_generator.sh
#
# Format: requirements.txt style (package>=version)
#
# When adding a new CVE fix:
# 1. Add the constraint below with CVE ID and issue reference in a comment
# 2. Regenerate all lock files with: make refresh-lock-files

# RHAIENG-4279/4081: CVE-2026-35536 Tornado cookie attribute injection / CVE-2026-31958 Tornado DoS via large multipart bodies
# Reference: https://access.redhat.com/security/cve/CVE-2026-35536
# Reference: https://access.redhat.com/security/cve/CVE-2026-31958
tornado>=6.5.5

# RHAIENG-4459: CVE-2026-1462 Keras arbitrary code execution bypassing safe mode
# Reference: https://access.redhat.com/security/cve/CVE-2026-1462
keras>=3.13.2
Original file line number Diff line number Diff line change
Expand Up @@ -20,7 +20,7 @@ dependencies = [
"pyzmq~=27.1.0",
"prompt-toolkit~=3.0.52",
"requests~=2.32.5",
"tornado~=6.5.2",
"tornado>=6.5.5",
"traitlets~=5.14.3",
"urllib3~=2.6.0",
]
Expand Down
26 changes: 12 additions & 14 deletions jupyter/datascience/ubi9-python-3.12/pylock.toml
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
# This file was autogenerated by uv via the following command:
# uv pip compile pyproject.toml --output-file pylock.toml --format pylock.toml --generate-hashes --emit-index-url --python-version=3.12 --universal --no-annotate --no-emit-package odh-notebooks-meta-llmcompressor-deps --no-emit-package odh-notebooks-meta-runtime-elyra-deps --index-url=https://pypi.org/simple
# uv pip compile pyproject.toml --output-file pylock.toml --format pylock.toml --generate-hashes --emit-index-url --python-version=3.12 --universal --no-annotate --no-emit-package odh-notebooks-meta-llmcompressor-deps --no-emit-package odh-notebooks-meta-runtime-elyra-deps --constraints=../../../dependencies/cve-constraints.txt --index-url=https://pypi.org/simple
lock-version = "1.0"
created-by = "uv"
requires-python = ">=3.12"
Expand Down Expand Up @@ -4737,21 +4737,19 @@ wheels = [{ url = "https://files.pythonhosted.org/packages/fb/12/5911ae3eeec4780

[[packages]]
name = "tornado"
version = "6.5.4"
version = "6.5.5"
marker = "implementation_name == 'cpython' and sys_platform == 'linux'"
sdist = { url = "https://files.pythonhosted.org/packages/37/1d/0a336abf618272d53f62ebe274f712e213f5a03c0b2339575430b8362ef2/tornado-6.5.4.tar.gz", upload-time = 2025-12-15T19:21:03Z, size = 513632, hashes = { sha256 = "a22fa9047405d03260b483980635f0b041989d8bcc9a313f8fe18b411d84b1d7" } }
sdist = { url = "https://files.pythonhosted.org/packages/f8/f1/3173dfa4a18db4a9b03e5d55325559dab51ee653763bb8745a75af491286/tornado-6.5.5.tar.gz", upload-time = 2026-03-10T21:31:02Z, size = 516006, hashes = { sha256 = "192b8f3ea91bd7f1f50c06955416ed76c6b72f96779b962f07f911b91e8d30e9" } }
wheels = [
{ url = "https://files.pythonhosted.org/packages/ab/a9/e94a9d5224107d7ce3cc1fab8d5dc97f5ea351ccc6322ee4fb661da94e35/tornado-6.5.4-cp39-abi3-macosx_10_9_universal2.whl", upload-time = 2025-12-15T19:20:48Z, size = 443909, hashes = { sha256 = "d6241c1a16b1c9e4cc28148b1cda97dd1c6cb4fb7068ac1bedc610768dff0ba9" } },
{ url = "https://files.pythonhosted.org/packages/db/7e/f7b8d8c4453f305a51f80dbb49014257bb7d28ccb4bbb8dd328ea995ecad/tornado-6.5.4-cp39-abi3-macosx_10_9_x86_64.whl", upload-time = 2025-12-15T19:20:49Z, size = 442163, hashes = { sha256 = "2d50f63dda1d2cac3ae1fa23d254e16b5e38153758470e9956cbc3d813d40843" } },
{ url = "https://files.pythonhosted.org/packages/ba/b5/206f82d51e1bfa940ba366a8d2f83904b15942c45a78dd978b599870ab44/tornado-6.5.4-cp39-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", upload-time = 2025-12-15T19:20:51Z, size = 445746, hashes = { sha256 = "d1cf66105dc6acb5af613c054955b8137e34a03698aa53272dbda4afe252be17" } },
{ url = "https://files.pythonhosted.org/packages/8e/9d/1a3338e0bd30ada6ad4356c13a0a6c35fbc859063fa7eddb309183364ac1/tornado-6.5.4-cp39-abi3-manylinux_2_5_i686.manylinux1_i686.manylinux_2_17_i686.manylinux2014_i686.whl", upload-time = 2025-12-15T19:20:52Z, size = 445083, hashes = { sha256 = "50ff0a58b0dc97939d29da29cd624da010e7f804746621c78d14b80238669335" } },
{ url = "https://files.pythonhosted.org/packages/50/d4/e51d52047e7eb9a582da59f32125d17c0482d065afd5d3bc435ff2120dc5/tornado-6.5.4-cp39-abi3-manylinux_2_5_x86_64.manylinux1_x86_64.manylinux_2_17_x86_64.manylinux2014_x86_64.whl", upload-time = 2025-12-15T19:20:53Z, size = 445315, hashes = { sha256 = "e5fb5e04efa54cf0baabdd10061eb4148e0be137166146fff835745f59ab9f7f" } },
{ url = "https://files.pythonhosted.org/packages/27/07/2273972f69ca63dbc139694a3fc4684edec3ea3f9efabf77ed32483b875c/tornado-6.5.4-cp39-abi3-musllinux_1_2_aarch64.whl", upload-time = 2025-12-15T19:20:56Z, size = 446003, hashes = { sha256 = "9c86b1643b33a4cd415f8d0fe53045f913bf07b4a3ef646b735a6a86047dda84" } },
{ url = "https://files.pythonhosted.org/packages/d1/83/41c52e47502bf7260044413b6770d1a48dda2f0246f95ee1384a3cd9c44a/tornado-6.5.4-cp39-abi3-musllinux_1_2_i686.whl", upload-time = 2025-12-15T19:20:57Z, size = 445412, hashes = { sha256 = "6eb82872335a53dd063a4f10917b3efd28270b56a33db69009606a0312660a6f" } },
{ url = "https://files.pythonhosted.org/packages/10/c7/bc96917f06cbee182d44735d4ecde9c432e25b84f4c2086143013e7b9e52/tornado-6.5.4-cp39-abi3-musllinux_1_2_x86_64.whl", upload-time = 2025-12-15T19:20:58Z, size = 445392, hashes = { sha256 = "6076d5dda368c9328ff41ab5d9dd3608e695e8225d1cd0fd1e006f05da3635a8" } },
{ url = "https://files.pythonhosted.org/packages/0c/1a/d7592328d037d36f2d2462f4bc1fbb383eec9278bc786c1b111cbbd44cfa/tornado-6.5.4-cp39-abi3-win32.whl", upload-time = 2025-12-15T19:21:00Z, size = 446481, hashes = { sha256 = "1768110f2411d5cd281bac0a090f707223ce77fd110424361092859e089b38d1" } },
{ url = "https://files.pythonhosted.org/packages/d6/6d/c69be695a0a64fd37a97db12355a035a6d90f79067a3cf936ec2b1dc38cd/tornado-6.5.4-cp39-abi3-win_amd64.whl", upload-time = 2025-12-15T19:21:01Z, size = 446886, hashes = { sha256 = "fa07d31e0cd85c60713f2b995da613588aa03e1303d75705dca6af8babc18ddc" } },
{ url = "https://files.pythonhosted.org/packages/50/49/8dc3fd90902f70084bd2cd059d576ddb4f8bb44c2c7c0e33a11422acb17e/tornado-6.5.4-cp39-abi3-win_arm64.whl", upload-time = 2025-12-15T19:21:02Z, size = 445910, hashes = { sha256 = "053e6e16701eb6cbe641f308f4c1a9541f91b6261991160391bfc342e8a551a1" } },
{ url = "https://files.pythonhosted.org/packages/59/8c/77f5097695f4dd8255ecbd08b2a1ed8ba8b953d337804dd7080f199e12bf/tornado-6.5.5-cp39-abi3-macosx_10_9_universal2.whl", upload-time = 2026-03-10T21:30:44Z, size = 445983, hashes = { sha256 = "487dc9cc380e29f58c7ab88f9e27cdeef04b2140862e5076a66fb6bb68bb1bfa" } },
{ url = "https://files.pythonhosted.org/packages/ab/5e/7625b76cd10f98f1516c36ce0346de62061156352353ef2da44e5c21523c/tornado-6.5.5-cp39-abi3-macosx_10_9_x86_64.whl", upload-time = 2026-03-10T21:30:46Z, size = 444246, hashes = { sha256 = "65a7f1d46d4bb41df1ac99f5fcb685fb25c7e61613742d5108b010975a9a6521" } },
{ url = "https://files.pythonhosted.org/packages/b2/04/7b5705d5b3c0fab088f434f9c83edac1573830ca49ccf29fb83bf7178eec/tornado-6.5.5-cp39-abi3-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl", upload-time = 2026-03-10T21:30:48Z, size = 447229, hashes = { sha256 = "e74c92e8e65086b338fd56333fb9a68b9f6f2fe7ad532645a290a464bcf46be5" } },
{ url = "https://files.pythonhosted.org/packages/34/01/74e034a30ef59afb4097ef8659515e96a39d910b712a89af76f5e4e1f93c/tornado-6.5.5-cp39-abi3-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", upload-time = 2026-03-10T21:30:51Z, size = 448192, hashes = { sha256 = "435319e9e340276428bbdb4e7fa732c2d399386d1de5686cb331ec8eee754f07" } },
{ url = "https://files.pythonhosted.org/packages/be/00/fe9e02c5a96429fce1a1d15a517f5d8444f9c412e0bb9eadfbe3b0fc55bf/tornado-6.5.5-cp39-abi3-musllinux_1_2_aarch64.whl", upload-time = 2026-03-10T21:30:53Z, size = 448039, hashes = { sha256 = "3f54aa540bdbfee7b9eb268ead60e7d199de5021facd276819c193c0fb28ea4e" } },
{ url = "https://files.pythonhosted.org/packages/82/9e/656ee4cec0398b1d18d0f1eb6372c41c6b889722641d84948351ae19556d/tornado-6.5.5-cp39-abi3-musllinux_1_2_x86_64.whl", upload-time = 2026-03-10T21:30:55Z, size = 447445, hashes = { sha256 = "36abed1754faeb80fbd6e64db2758091e1320f6bba74a4cf8c09cd18ccce8aca" } },
{ url = "https://files.pythonhosted.org/packages/5a/76/4921c00511f88af86a33de770d64141170f1cfd9c00311aea689949e274e/tornado-6.5.5-cp39-abi3-win32.whl", upload-time = 2026-03-10T21:30:57Z, size = 448582, hashes = { sha256 = "dd3eafaaeec1c7f2f8fdcd5f964e8907ad788fe8a5a32c4426fbbdda621223b7" } },
{ url = "https://files.pythonhosted.org/packages/2c/23/f6c6112a04d28eed765e374435fb1a9198f73e1ec4b4024184f21faeb1ad/tornado-6.5.5-cp39-abi3-win_amd64.whl", upload-time = 2026-03-10T21:30:58Z, size = 448990, hashes = { sha256 = "6443a794ba961a9f619b1ae926a2e900ac20c34483eea67be4ed8f1e58d3ef7b" } },
{ url = "https://files.pythonhosted.org/packages/b7/c8/876602cbc96469911f0939f703453c1157b0c826ecb05bdd32e023397d4e/tornado-6.5.5-cp39-abi3-win_arm64.whl", upload-time = 2026-03-10T21:31:00Z, size = 448016, hashes = { sha256 = "2c9a876e094109333f888539ddb2de4361743e5d21eece20688e3e351e4990a6" } },
]

[[packages]]
Expand Down
Loading
Loading