Skip to content

Conversation

alexander-smolyakov
Copy link
Contributor

Dev container name:

  • anaconda

Description:

This PR patches the following vulnerabilities:

These vulnerabilities come from the continuumio/anaconda3 image used upstream for the anaconda devcontainer.

Changelog:

  • Updated Dockerfile:

    • Steps in Dockerfile were reorganized to avoid conflicts in Conda's base environment;
    • Added patch to install updated versions of aiohttp and mpmath packages;
  • Added tests to verify minimum versions of the following packages:

    • aiohttp - minimum package version set to 3.8.5;
    • mpmath - minimum package version set to 1.3.0;

Checklist:

  • Checked that applied changes work as expected

- Bump version for `aiohttp` and `mpmath` packages;
- Reorg steps in Dockerfile to avoid conflicts in Conda's base environment.
@alexander-smolyakov alexander-smolyakov requested a review from a team as a code owner August 17, 2023 13:22
@samruddhikhandale samruddhikhandale merged commit 4bd0142 into devcontainers:main Aug 17, 2023
@samruddhikhandale samruddhikhandale mentioned this pull request Aug 18, 2023
@alexander-smolyakov alexander-smolyakov deleted the anaconda-patch-GHSA-45c4-8wx5-qw6w_GHSA-f865-m6cq-j9vx branch August 25, 2023 11:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants