Skip to content

Commit 1e46f1c

Browse files
[anaconda] Update cryptography package due to GHSA-jm77-qphf-c4w8 (#744)
* Bump `cryptography` package version * Update tests
1 parent dce97cb commit 1e46f1c

File tree

2 files changed

+5
-4
lines changed

2 files changed

+5
-4
lines changed

src/anaconda/.devcontainer/Dockerfile

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -6,9 +6,10 @@ RUN . /etc/os-release && if [ "${VERSION_CODENAME}" != "bullseye" ]; then exit 1
66
# Temporary: Upgrade python packages due to mentioned CVEs
77
# They are installed by the base image (continuumio/anaconda3) which does not have the patch.
88
RUN conda install \
9-
# https://github.com/advisories/GHSA-5cpq-8wj7-hf2v
9+
# pyopenssl should be updated to be compatible with latest version of cryptography
1010
pyopenssl=23.2.0 \
11-
cryptography=41.0.2 \
11+
# https://github.com/advisories/GHSA-jm77-qphf-c4w8
12+
cryptography=41.0.3 \
1213
# https://github.com/advisories/GHSA-j8r2-6x86-q33q
1314
requests=2.31.0 \
1415
# https://github.com/advisories/GHSA-f865-m6cq-j9vx

src/anaconda/test-project/test.sh

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -40,7 +40,7 @@ checkPythonPackageVersion "nbconvert" "6.5.1"
4040
checkPythonPackageVersion "werkzeug" "2.2.3"
4141
checkPythonPackageVersion "certifi" "2022.12.07"
4242
checkPythonPackageVersion "requests" "2.31.0"
43-
checkPythonPackageVersion "cryptography" "41.0.2"
43+
checkPythonPackageVersion "cryptography" "41.0.3"
4444
checkPythonPackageVersion "torch" "1.13.1"
4545
checkPythonPackageVersion "transformers" "4.30.0"
4646
checkPythonPackageVersion "mpmath" "1.3.0"
@@ -51,7 +51,7 @@ tornado_version=$(python -c "import tornado; print(tornado.version)")
5151
check-version-ge "tornado-requirement" "${tornado_version}" "6.3.3"
5252

5353
checkCondaPackageVersion "pyopenssl" "23.2.0"
54-
checkCondaPackageVersion "cryptography" "41.0.2"
54+
checkCondaPackageVersion "cryptography" "41.0.3"
5555
checkCondaPackageVersion "requests" "2.31.0"
5656
checkCondaPackageVersion "pygments" "2.15.1"
5757
checkCondaPackageVersion "mpmath" "1.3.0"

0 commit comments

Comments
 (0)