Skip to content

Commit 3b9a282

Browse files
Update Dockerfile
1 parent 3f31d02 commit 3b9a282

File tree

1 file changed

+8
-3
lines changed

1 file changed

+8
-3
lines changed

src/anaconda/.devcontainer/Dockerfile

Lines changed: 8 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -5,9 +5,12 @@ RUN . /etc/os-release && if [ "${VERSION_CODENAME}" != "bullseye" ]; then exit 1
55

66
# Temporary: Upgrade python packages due to mentioned CVEs
77
# They are installed by the base image (continuumio/anaconda3) which does not have the patch.
8-
RUN conda install \
8+
RUN conda install \
9+
# Update "setuptools" and "wheel" to avoid potential issues with installing newer versions of packages
10+
setuptools=68.0.0 \
11+
wheel=0.41.2 \
912
# pyopenssl should be updated to be compatible with latest version of cryptography
10-
pyopenssl=23.2.0 \
13+
pyopenssl=23.2.0 \
1114
# https://github.com/advisories/GHSA-jm77-qphf-c4w8
1215
cryptography=41.0.3 \
1316
# https://github.com/advisories/GHSA-j8r2-6x86-q33q
@@ -39,7 +42,9 @@ RUN python3 -m pip install --upgrade \
3942
# https://github.com/advisories/GHSA-r726-vmfq-j9j3
4043
jupyter_server==2.7.2 \
4144
# https://github.com/advisories/GHSA-v845-jxx5-vc9f
42-
urllib3==1.26.17
45+
urllib3==1.26.17 \
46+
# https://github.com/advisories/GHSA-94vc-p8w7-5p49
47+
imagecodecs==2023.9.18
4348

4449
# Reset and copy updated files with updated privs to keep image size down
4550
FROM mcr.microsoft.com/devcontainers/base:1-bullseye

0 commit comments

Comments
 (0)