Skip to content

Commit 9a1ee1a

Browse files
authored
[miniconda] - cryptography - GHSA-79v4-65xg-pq4g (devcontainers#1360)
* Miniconda vulnerability fix for GHSA-79v4-65xg-pq4g * Bump up minor version change for this vulnerability fix. * Correcting the test script to check cryptography package version.
1 parent 3de4f2f commit 9a1ee1a

File tree

3 files changed

+4
-4
lines changed

3 files changed

+4
-4
lines changed

src/miniconda/.devcontainer/apply_security_patches.sh

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -5,7 +5,7 @@
55

66
# define array of packages for pinning to the patched versions
77
# vulnerable_packages=( "package1=version1" "package2=version2" "package3=version3" )
8-
vulnerable_packages=()
8+
vulnerable_packages=( "cryptography=44.0.1" )
99

1010
# Define the number of rows (based on the length of vulnerable_packages)
1111
rows=${#vulnerable_packages[@]}

src/miniconda/manifest.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
{
2-
"version": "1.1.2",
2+
"version": "1.1.3",
33
"build": {
44
"latest": true,
55
"rootDistro": "debian",

src/miniconda/test-project/test.sh

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -18,12 +18,12 @@ check "gitconfig-contains-name" sh -c "cat /etc/gitconfig | grep 'name = devcont
1818

1919
check "usr-local-etc-config-does-not-exist" test ! -f "/usr/local/etc/gitconfig"
2020

21-
checkPythonPackageVersion "cryptography" "43.0.1"
21+
checkPythonPackageVersion "cryptography" "44.0.1"
2222
checkPythonPackageVersion "setuptools" "65.5.1"
2323
checkPythonPackageVersion "wheel" "0.38.1"
2424
checkPythonPackageVersion "urllib3" "2.2.2"
2525

26-
checkCondaPackageVersion "cryptography" "43.0.1"
26+
checkCondaPackageVersion "cryptography" "44.0.1"
2727
checkCondaPackageVersion "setuptools" "65.5.1"
2828
checkCondaPackageVersion "wheel" "0.38.1"
2929
checkCondaPackageVersion "requests" "2.32.0"

0 commit comments

Comments
 (0)