Skip to content

Commit 9574fab

Browse files
[Anaconda]-Pydantic-GHSA-mr82-8j83-vxmv patch security vuln (#1046)
1 parent fe8f30e commit 9574fab

File tree

2 files changed

+4
-1
lines changed

2 files changed

+4
-1
lines changed

src/anaconda/.devcontainer/Dockerfile

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -7,7 +7,9 @@ RUN . /etc/os-release && if [ "${VERSION_CODENAME}" != "bullseye" ]; then exit 1
77
# They are installed by the base image (continuumio/anaconda3) which does not have the patch.
88
RUN conda install \
99
# https://github.com/advisories/GHSA-v845-jxx5-vc9f
10-
urllib3==1.26.18
10+
urllib3==1.26.18 \
11+
# https://github.com/advisories/GHSA-mr82-8j83-vxmv
12+
pydantic==2.5.3
1113

1214
RUN python3 -m pip install --upgrade \
1315
# https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21797

src/anaconda/test-project/test.sh

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -59,6 +59,7 @@ checkCondaPackageVersion "pygments" "2.15.1"
5959
checkCondaPackageVersion "mpmath" "1.3.0"
6060
checkCondaPackageVersion "urllib3" "1.26.17"
6161
checkCondaPackageVersion "pyarrow" "14.0.1"
62+
checkCondaPackageVersion "pydantic" "2.5.3"
6263

6364
check "conda-update-conda" bash -c "conda update -y conda"
6465
check "conda-install-tensorflow" bash -c "conda create --name test-env -c conda-forge --yes tensorflow"

0 commit comments

Comments
 (0)