Skip to content

Conversation

alexander-smolyakov
Copy link
Contributor

Devcontainer name:

  • universal

Description:

This PR addresses the GHSA-v845-jxx5-vc9f vulnerability. The vulnerability comes from the conda distribution and is related to the urllib3 package.

Changelog:

  • Updated patch-conda feature to install the patched urllib3 package version;

  • Added test to verify urllib3 minimum version (Minimum package version set to 1.26.17 which fixes GHSA-v845-jxx5-vc9f);

Checklist:

  • Checked that applied changes work as expected

@alexander-smolyakov alexander-smolyakov requested a review from a team as a code owner October 10, 2023 09:15
@samruddhikhandale samruddhikhandale merged commit 3579120 into devcontainers:main Oct 10, 2023
@alexander-smolyakov alexander-smolyakov deleted the universal_address_GHSA-v8gr-m533-ghj9 branch October 11, 2023 07:02
@samruddhikhandale samruddhikhandale mentioned this pull request Oct 17, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants