Skip to content

Conversation

gauravsaini04
Copy link
Contributor

@gauravsaini04 gauravsaini04 commented Jun 26, 2024

Dev container name:

  • Miniconda

Description:

This PR patches the following vulnerabilities:

This vulnerability comes from the continuumio/miniconda3 image used upstream for the miniconda devcontainer.

Changelog:

  • Updated apply_security_patches.sh

    • Upgraded versions for patched python & anaconda packages;
      • urllib3 - minimum package version has been set to 2.2.2;
      • requests - minimum package version has been set to 2.32.0;
  • Updated tests to verify urllib3 minimum version (Minimum package version set to 2.2.2 which fixes GHSA-34jh-p97f-mpxf) and requests minimum version (Minimum package version set to 2.32.0 which fixes GHSA-9wx4-h78v-vm56);

Checklist:

  • Checked that applied changes work as expected

@gauravsaini04 gauravsaini04 requested a review from a team as a code owner June 26, 2024 06:40
@samruddhikhandale samruddhikhandale merged commit 6336210 into devcontainers:main Jun 26, 2024
@gauravsaini04 gauravsaini04 deleted the miniconda_requests_urllib3_patched branch June 27, 2024 09:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants