Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump requirements versions to fix security vulnerabilities #182

Merged
merged 1 commit into from
Mar 23, 2021

Conversation

aws-patlin
Copy link
Contributor

@aws-patlin aws-patlin commented Mar 22, 2021

Description of changes:
Fix security vulnerabilities found in the current image.
image

Testing:

  • CI check passed
  • Safety check passed (excluding urllib3 - safety installs urllib3<1.25 for some reason)
  • Integration tests (excluding HPO) successful

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

@aws-patlin aws-patlin merged commit 4a77d1d into 1.0-1 Mar 23, 2021
@aws-patlin
Copy link
Contributor Author

aws-patlin commented Mar 23, 2021

Updated safety check:
image

urllib3 is correctly installed as 1.25.9 in the container, but safety installs urllib3<1.25, which then causes the check to fail for the package.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
2 participants