File tree Expand file tree Collapse file tree 2 files changed +5
-4
lines changed Expand file tree Collapse file tree 2 files changed +5
-4
lines changed Original file line number Diff line number Diff line change @@ -6,9 +6,10 @@ RUN . /etc/os-release && if [ "${VERSION_CODENAME}" != "bullseye" ]; then exit 1
66# Temporary: Upgrade python packages due to mentioned CVEs
77# They are installed by the base image (continuumio/anaconda3) which does not have the patch.
88RUN conda install \
9- # https://github.com/advisories/GHSA-5cpq-8wj7-hf2v
9+ # pyopenssl should be updated to be compatible with latest version of cryptography
1010 pyopenssl=23.2.0 \
11- cryptography=41.0.2 \
11+ # https://github.com/advisories/GHSA-jm77-qphf-c4w8
12+ cryptography=41.0.3 \
1213 # https://github.com/advisories/GHSA-j8r2-6x86-q33q
1314 requests=2.31.0 \
1415 # https://github.com/advisories/GHSA-f865-m6cq-j9vx
Original file line number Diff line number Diff line change @@ -40,7 +40,7 @@ checkPythonPackageVersion "nbconvert" "6.5.1"
4040checkPythonPackageVersion " werkzeug" " 2.2.3"
4141checkPythonPackageVersion " certifi" " 2022.12.07"
4242checkPythonPackageVersion " requests" " 2.31.0"
43- checkPythonPackageVersion " cryptography" " 41.0.2 "
43+ checkPythonPackageVersion " cryptography" " 41.0.3 "
4444checkPythonPackageVersion " torch" " 1.13.1"
4545checkPythonPackageVersion " transformers" " 4.30.0"
4646checkPythonPackageVersion " mpmath" " 1.3.0"
@@ -51,7 +51,7 @@ tornado_version=$(python -c "import tornado; print(tornado.version)")
5151check-version-ge " tornado-requirement" " ${tornado_version} " " 6.3.3"
5252
5353checkCondaPackageVersion " pyopenssl" " 23.2.0"
54- checkCondaPackageVersion " cryptography" " 41.0.2 "
54+ checkCondaPackageVersion " cryptography" " 41.0.3 "
5555checkCondaPackageVersion " requests" " 2.31.0"
5656checkCondaPackageVersion " pygments" " 2.15.1"
5757checkCondaPackageVersion " mpmath" " 1.3.0"
You can’t perform that action at this time.
0 commit comments