Skip to content

[Anaconda] - Jupyterlab - Patch security vulnerability GHSA-44cc-43rp-5947 #939

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 10 commits into from
Feb 1, 2024
Merged

[Anaconda] - Jupyterlab - Patch security vulnerability GHSA-44cc-43rp-5947 #939

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
10 commits
Select commit Hold shift + click to select a range
242f573
[Anaconda] - Pillow - Patch security vulnerability GHSA-3f63-hfp8-52jq
gauravsaini04 Jan 29, 2024
e2f86b2
[Anaconda] - Jupyterlab - Patch security vulnerability GHSA-44cc-43rp…
gauravsaini04 Jan 29, 2024
f72d2ae
Merge branch 'main' into anaconda_GHSA-3f63-hfp8-52jq_pillow
samruddhikhandale Jan 29, 2024
c9c5fc0
Merge branch 'main' into anaconda_GHSA-44cc-43rp-5947_jupyterlab
samruddhikhandale Jan 29, 2024
e849d09
[Anaconda] - Jupyterlab - Patch security vulnerability GHSA-44cc-43rp…
gauravsaini04 Jan 29, 2024
8475262
Changes as suggested by Samruddhi
gauravsaini04 Jan 30, 2024
16d8a55
Merge remote-tracking branch 'origin/anaconda_GHSA-3f63-hfp8-52jq_pil…
gauravsaini04 Jan 30, 2024
ed0a3f2
Merge remote-tracking branch 'origin/anaconda_GHSA-44cc-43rp-5947_jup…
gauravsaini04 Jan 30, 2024
1a6fc54
Changes according to comments
gauravsaini04 Jan 30, 2024
0657ebe
Merge branch 'devcontainers:main' into anaconda_GHSA-44cc-43rp-5947_j…
bhupendra-vaishnav Feb 1, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Prev Previous commit
Next Next commit
Changes as suggested by Samruddhi
  • Loading branch information
@gauravsaini04
gauravsaini04 committed Jan 30, 2024
commit 8475262a10bec32fdc038dccd11b95decf37181f
8 changes: 4 additions & 4 deletions src/anaconda/.devcontainer/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,9 +11,7 @@ RUN conda install \
# https://github.com/advisories/GHSA-v845-jxx5-vc9f
urllib3==1.26.18 \
# https://github.com/advisories/GHSA-jfhm-5ghh-2f97
cryptography==41.0.7 \
# https://github.com/advisories/GHSA-44cc-43rp-5947
jupyterlab==4.0.8
cryptography==41.0.7

RUN python3 -m pip install --upgrade \
# https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21797
Expand All @@ -37,7 +35,9 @@ RUN python3 -m pip install --upgrade \
# https://github.com/advisories/GHSA-v68g-wm8c-6x7j
transformers==4.36.0 \
# https://github.com/advisories/GHSA-3f63-hfp8-52jq
pillow==10.2.0
pillow==10.2.0 \
# https://github.com/advisories/GHSA-44cc-43rp-5947
jupyterlab==4.0.11

# Reset and copy updated files with updated privs to keep image size down
FROM mcr.microsoft.com/devcontainers/base:1-bullseye
Expand Down
2 changes: 1 addition & 1 deletion src/anaconda/test-project/test.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -48,6 +48,7 @@ checkPythonPackageVersion "jupyter_server" "2.7.2"
checkPythonPackageVersion "tornado" "6.3.3"
checkPythonPackageVersion "pyarrow" "14.0.1"
checkPythonPackageVersion "pillow" "10.2.0"
checkPythonPackageVersion "jupyterlab" "4.0.11"

checkCondaPackageVersion "pyopenssl" "23.2.0"
checkCondaPackageVersion "cryptography" "41.0.7"
Expand All @@ -57,7 +58,6 @@ checkCondaPackageVersion "mpmath" "1.3.0"
checkCondaPackageVersion "aiohttp" "3.9.0"
checkCondaPackageVersion "urllib3" "1.26.17"
checkCondaPackageVersion "pyarrow" "14.0.1"
checkCondaPackageVersion "jupyterlab" "4.0.8"

check "conda-update-conda" bash -c "conda update -y conda"
check "conda-install-tensorflow" bash -c "conda create --name test-env -c conda-forge --yes tensorflow"
Expand Down