Skip to content

Fix Azure wodle dependencies error#6109

Merged
davidjiglesias merged 5 commits into4.0from
fix/6087-fix-azure-wodle
Oct 8, 2020
Merged

Fix Azure wodle dependencies error#6109
davidjiglesias merged 5 commits into4.0from
fix/6087-fix-azure-wodle

Conversation

@mcarmona99
Copy link
Copy Markdown
Contributor

Related issue
#6087

Hi team,

This PR closes #6087. In this PR I have changed requirements.txt in order to use the appropriate dependencies for our Microsoft Azure wodle. Now it is working as expected.

The Azure dependencies we had were:

azure-common==1.1.25
azure_core==1.5.0
azure-storage-blob==12.3.1
azure-storage-common==2.1.0

The new dependencies are:

azure-common==1.1.25
azure-storage-blob==1.4.0
azure-storage-common==1.4.2

When installing azure-storage-blob >= 12, the component BlockBlobService were not included. The decision has been changing the version of azure-storage-blob to the one used in Wazuh 3.12.x.

Using azure-storage-blob==1.4.0, the dependencies installed are azure-common==1.1.25 and azure-storage-common==1.4.2.
When we were using azure-storage-blob==12.3.1 , the dependencies installed were azure-common==1.1.25, azure-storage-common==2.1.0 and azure_core==1.5.0.

Regards,
Manuel.

@mcarmona99 mcarmona99 self-assigned this Sep 28, 2020
@mcarmona99 mcarmona99 linked an issue Sep 28, 2020 that may be closed by this pull request
@mcarmona99
Copy link
Copy Markdown
Contributor Author

Checking for vulnerabilities for the new package versions ...

It seems that there are vulnerabilities in azure-storage-blob version 1.4.0. Information from: https://snyk.io/test/npm/azure-blob-store/1.0.7
There are no recent news about exploiting Azure: https://www.exploit-db.com/

The new dependecies versions will be:

azure-common==1.1.25
azure-storage-blob==2.1.0
azure-storage-common==2.1.0

After this change, the wodle is working as expected and the error is not raising.

Regards,
Manuel.

@davidjiglesias davidjiglesias merged commit e4277b4 into 4.0 Oct 8, 2020
@davidjiglesias davidjiglesias deleted the fix/6087-fix-azure-wodle branch October 8, 2020 14:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Install compatible version of azure-storage-blob with our wodle.

2 participants