Skip to content

Commit 5bef10a

Browse files
[Anaconda] Update cryptography package due to GHSA-jfhm-5ghh-2f97 (#901)
1 parent 967866e commit 5bef10a

File tree

2 files changed

+5
-3
lines changed

2 files changed

+5
-3
lines changed

src/anaconda/.devcontainer/Dockerfile

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,9 @@ RUN conda install \
1111
# https://github.com/advisories/GHSA-j7hp-h8jx-5ppr
1212
pillow=10.0.1 \
1313
# https://github.com/advisories/GHSA-v845-jxx5-vc9f
14-
urllib3==1.26.18
14+
urllib3==1.26.18 \
15+
# https://github.com/advisories/GHSA-jfhm-5ghh-2f97
16+
cryptography==41.0.7
1517

1618
RUN python3 -m pip install --upgrade \
1719
# https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21797

src/anaconda/test-project/test.sh

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -40,7 +40,7 @@ checkPythonPackageVersion "nbconvert" "6.5.1"
4040
checkPythonPackageVersion "werkzeug" "2.2.3"
4141
checkPythonPackageVersion "certifi" "2022.12.07"
4242
checkPythonPackageVersion "requests" "2.31.0"
43-
checkPythonPackageVersion "cryptography" "41.0.3"
43+
checkPythonPackageVersion "cryptography" "41.0.7"
4444
checkPythonPackageVersion "transformers" "4.36.0"
4545
checkPythonPackageVersion "mpmath" "1.3.0"
4646
checkPythonPackageVersion "aiohttp" "3.9.0"
@@ -49,7 +49,7 @@ checkPythonPackageVersion "tornado" "6.3.3"
4949
checkPythonPackageVersion "pyarrow" "14.0.1"
5050

5151
checkCondaPackageVersion "pyopenssl" "23.2.0"
52-
checkCondaPackageVersion "cryptography" "41.0.3"
52+
checkCondaPackageVersion "cryptography" "41.0.7"
5353
checkCondaPackageVersion "requests" "2.31.0"
5454
checkCondaPackageVersion "pygments" "2.15.1"
5555
checkCondaPackageVersion "mpmath" "1.3.0"

0 commit comments

Comments
 (0)