Skip to content

Conversation

alexander-smolyakov
Copy link
Contributor

@alexander-smolyakov alexander-smolyakov commented Sep 12, 2023

Dev container name:

  • miniconda

Description:

This PR addresses the GHSA-jm77-qphf-c4w8 vulnerability. The vulnerability comes from the continuumio/miniconda3 image and is related to the cryptography package.

Changelog:

  • Updated Dockerfile to install the latest cryptography package version;

  • Updated test to verify cryptography minimum version (Minimum package version set to 41.0.3 which fixes GHSA-jm77-qphf-c4w8);

  • Updated tests to use different environments when installing packages from the conda-forge channel;

  • Updated README.md to add info about possible conflicts in Conda's environment when channels are mixed;

Checklist:

  • Checked that applied changes work as expected

@alexander-smolyakov alexander-smolyakov requested a review from a team as a code owner September 12, 2023 11:12
@samruddhikhandale samruddhikhandale merged commit dce97cb into devcontainers:main Sep 12, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants