Skip to content

Commit 39944b6

Browse files
Anaconda: Update 'numpy' due to CVE-2021-34141 (#273)
1 parent 1772ea7 commit 39944b6

File tree

3 files changed

+8
-2
lines changed

3 files changed

+8
-2
lines changed

src/anaconda/.devcontainer/Dockerfile

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -62,7 +62,9 @@ RUN python3 -m pip install \
6262
# https://github.com/advisories/GHSA-39hc-v87j-747x
6363
cryptography \
6464
# https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34749
65-
mistune
65+
mistune \
66+
# https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34141
67+
numpy
6668

6769
# Copy environment.yml (if found) to a temp locaition so we update the environment. Also
6870
# copy "noop.txt" so the COPY instruction does not fail if no environment.yml exists.

src/anaconda/manifest.json

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,8 @@
2727
"joblib",
2828
"cookiecutter",
2929
"cryptography",
30-
"mistune"
30+
"mistune",
31+
"numpy"
3132
],
3233
"other": {
3334
"conda": {

src/anaconda/test-project/test.sh

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -32,5 +32,8 @@ check-version-ge "cryptography-requirement" "${cryptography_version}" "38.0.3"
3232
mistune_version=$(python -c "import mistune; print(mistune.__version__)")
3333
check-version-ge "mistune-requirement" "${mistune_version}" "2.0.3"
3434

35+
numpy_version=$(python -c "import numpy; print(numpy.__version__)")
36+
check-version-ge "numpy-requirement" "${numpy_version}" "1.22"
37+
3538
# Report result
3639
reportResults

0 commit comments

Comments
 (0)