Skip to content

Commit c5de84f

Browse files
[anaconda] Update imagecodecs package due to GHSA-94vc-p8w7-5p49 (#807)
* Bump `imagecodecs` version * Add test
1 parent 3579120 commit c5de84f

File tree

2 files changed

+4
-1
lines changed

2 files changed

+4
-1
lines changed

src/anaconda/.devcontainer/Dockerfile

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,9 @@ RUN python3 -m pip install --upgrade \
3939
# https://github.com/advisories/GHSA-r726-vmfq-j9j3
4040
jupyter_server==2.7.2 \
4141
# https://github.com/advisories/GHSA-v845-jxx5-vc9f
42-
urllib3==1.26.17
42+
urllib3==1.26.17 \
43+
# https://github.com/advisories/GHSA-94vc-p8w7-5p49
44+
imagecodecs==2023.9.18
4345

4446
# Reset and copy updated files with updated privs to keep image size down
4547
FROM mcr.microsoft.com/devcontainers/base:1-bullseye

src/anaconda/test-project/test.sh

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -46,6 +46,7 @@ checkPythonPackageVersion "mpmath" "1.3.0"
4646
checkPythonPackageVersion "aiohttp" "3.8.5"
4747
checkPythonPackageVersion "jupyter_server" "2.7.2"
4848
checkPythonPackageVersion "urllib3" "1.26.17"
49+
checkPythonPackageVersion "imagecodecs" "2023.9.18"
4950

5051
# The `tornado` package doesn't have the `__version__` attribute so we can use the `version` attribute.
5152
tornado_version=$(python -c "import tornado; print(tornado.version)")

0 commit comments

Comments
 (0)