miniconda-cryptography-update_for_security_patch_GHSA-6vqw-3v5j-54x4

[gauravsaini04]

Dev container name:

• Miniconda

Description:

This PR patches the following vulnerability:

• GHSA-6vqw-3v5j-54x4 - related to the cryptography package;

This vulnerability comes from the coninuumio/Miniconda3 image used upstream for the Miniconda devcontainer.

Changelog:

• Updated Dockerfile

  • Upgraded version for patched python package;
    • cryptography - minimum package version has been set to 42.0.4;
  • Removed version for patched conda package;
    • cryptography - minimum package version was previously set to 42.0.2;
  • Removed version for patched pyopenssl package;
    • pyopenssl - minimun package version for sake of compatibility with cryptography v42.02 was previously set to 24.0.0;

• Updated tests to verify cryptography minimum version (Minimum package version set to 42.0.4 which fixes GHSA-6vqw-3v5j-54x4);

Checklist:

• Checked that applied changes work as expected