Skip to content

Commit ed5dce6

Browse files
committed
[universal] - Fixing multiple vulnerability issues
1 parent a035cf4 commit ed5dce6

File tree

3 files changed

+16
-7
lines changed

3 files changed

+16
-7
lines changed

src/universal/.devcontainer/devcontainer.json

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -11,8 +11,8 @@
1111
},
1212
"ghcr.io/devcontainers/features/dotnet:2": {
1313
"version": "8.0",
14-
"dotnetRuntimeVersions": "7.0",
15-
"aspNetCoreRuntimeVersions": "7.0"
14+
"dotnetRuntimeVersions": "9.0",
15+
"aspNetCoreRuntimeVersions": "9.0"
1616
},
1717
"ghcr.io/devcontainers/features/hugo:1": {
1818
"version": "latest"

src/universal/.devcontainer/local-features/patch-conda/install.sh

Lines changed: 13 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -51,8 +51,17 @@ sudo_if /opt/conda/bin/python3 -m pip install --upgrade pip
5151
# Temporary: Upgrade python packages due to security vulnerabilities
5252
# They are installed by the conda feature and Conda distribution does not have the patches.
5353

54-
# https://github.com/advisories/GHSA-v8gr-m533-ghj9
55-
update_python_package /opt/conda/bin/python3 cryptography "41.0.4"
54+
# https://github.com/advisories/GHSA-h4gh-qq45-vh27
55+
update_python_package /opt/conda/bin/python3 cryptography "43.0.1"
5656

57-
# https://github.com/advisories/GHSA-v845-jxx5-vc9f
58-
update_conda_package urllib3 "1.26.18"
57+
# https://github.com/advisories/GHSA-34jh-p97f-mpxf
58+
update_conda_package urllib3 "1.26.19"
59+
60+
# https://github.com/advisories/GHSA-9hjg-9r4m-mvj7
61+
update_conda_package requests "2.32.4"
62+
63+
# https://github.com/advisories/GHSA-5rjg-fvgr-3xxf
64+
update_conda_package setuptools "78.1.1"
65+
66+
# https://github.com/advisories/GHSA-g7vv-2v7x-gj9p
67+
update_python_package /opt/conda/bin/python3 tqdm "4.66.3"

src/universal/manifest.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
{
2-
"version": "3.0.3",
2+
"version": "3.0.4",
33
"build": {
44
"latest": true,
55
"rootDistro": "debian",

0 commit comments

Comments
 (0)