Skip to content

Commit ffc7f20

Browse files
[Anaconda] - requests - GHSA-9wx4-h78v-vm56 : Apply patch for requests (#1078)
* [Anaconda] - requests - GHSA-9wx4-h78v-vm56 : Apply patch for requests * Update test.sh * pin requests to desired version * Update apply_security_patches.sh
1 parent 018b799 commit ffc7f20

File tree

2 files changed

+4
-4
lines changed

2 files changed

+4
-4
lines changed

src/anaconda/.devcontainer/apply_security_patches.sh

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
#!/bin/bash
22

33
vulnerable_packages=( "pydantic=2.5.3" "joblib=1.3.1" "mistune=3.0.1" "werkzeug=3.0.3" "transformers=4.36.0" "pillow=10.3.0" "aiohttp=3.9.4" \
4-
"cryptography=42.0.4" "gitpython=3.1.41" "jupyter-lsp=2.2.2" "idna=3.7" "jinja2=3.1.4" "scrapy=2.11.2" "black=24.4.2")
4+
"cryptography=42.0.4" "gitpython=3.1.41" "jupyter-lsp=2.2.2" "idna=3.7" "jinja2=3.1.4" "scrapy=2.11.2" "black=24.4.2" "requests=2.32.2")
55

66
# Define the number of rows (based on the length of vulnerable_packages)
77
rows=${#vulnerable_packages[@]}
@@ -52,4 +52,4 @@ for ((i=0; i<rows; i++)); do
5252
python3 -m pip install --upgrade --no-cache-dir "${packages_array[$i,0]}==${REQUIRED_VERSION}"
5353
fi
5454
fi
55-
done
55+
done

src/anaconda/test-project/test.sh

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -39,7 +39,6 @@ checkPythonPackageVersion "wheel" "0.38.1"
3939
checkPythonPackageVersion "nbconvert" "6.5.1"
4040
checkPythonPackageVersion "werkzeug" "3.0.3"
4141
checkPythonPackageVersion "certifi" "2022.12.07"
42-
checkPythonPackageVersion "requests" "2.31.0"
4342
checkPythonPackageVersion "cryptography" "42.0.4"
4443
checkPythonPackageVersion "transformers" "4.36.0"
4544
checkPythonPackageVersion "mpmath" "1.3.0"
@@ -54,9 +53,10 @@ checkPythonPackageVersion "jupyter-lsp" "2.2.2"
5453
checkPythonPackageVersion "idna" "3.7"
5554
checkPythonPackageVersion "jinja2" "3.1.4"
5655
checkPythonPackageVersion "scrapy" "2.11.2"
56+
checkPythonPackageVersion "requests" "2.32.2"
5757

5858
checkCondaPackageVersion "pyopenssl" "23.2.0"
59-
checkCondaPackageVersion "requests" "2.31.0"
59+
checkCondaPackageVersion "requests" "2.32.2"
6060
checkCondaPackageVersion "pygments" "2.15.1"
6161
checkCondaPackageVersion "mpmath" "1.3.0"
6262
checkCondaPackageVersion "urllib3" "1.26.17"

0 commit comments

Comments
 (0)