Skip to content

Conversation

alexander-smolyakov
Copy link
Contributor

Devcontainer name:

  • anaconda

Description:

This PR addresses the GHSA-jm77-qphf-c4w8 vulnerability. The vulnerability comes from the continuumio/anaconda3 image and is related to the cryptography package.

Changelog:

  • Updated Dockerfile to install the latest cryptography package version;

  • Updated test to verify cryptography minimum version (Minimum package version set to 41.0.3 which fixes GHSA-jm77-qphf-c4w8);

Checklist:

  • Checked that applied changes work as expected

@alexander-smolyakov alexander-smolyakov requested a review from a team as a code owner September 12, 2023 12:25
@alexander-smolyakov alexander-smolyakov changed the title [anaconda] Update cryptography package due to GHSA-jm77-qphf-c4w8 [anaconda] Update cryptography package due to GHSA-jm77-qphf-c4w8 Sep 12, 2023
@samruddhikhandale samruddhikhandale merged commit 1e46f1c into devcontainers:main Sep 12, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants