Skip to content

Commit 794860b

Browse files
[Anaconda] Update Dockerfile to install werkzeug package latest version (devcontainers#503)
- Updated Dockerfile to install latest `werkzeug` package version - Added test to verify werkzeug minimum version - Updated manifest to include info about `werkzeug` package
1 parent 4ea2ed9 commit 794860b

File tree

3 files changed

+8
-2
lines changed

3 files changed

+8
-2
lines changed

src/anaconda/.devcontainer/Dockerfile

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -75,7 +75,9 @@ RUN python3 -m pip install \
7575
# https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32862
7676
nbconvert \
7777
# https://github.com/devcontainers/images/issues/486
78-
pyOpenssl
78+
pyOpenssl \
79+
# https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25577
80+
werkzeug
7981

8082
# Copy environment.yml (if found) to a temp location so we can update the environment. Also
8183
# copy "noop.txt" so the COPY instruction does not fail if no environment.yml exists.

src/anaconda/manifest.json

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,8 @@
3535
"wheel",
3636
"nbconvert",
3737
"py",
38-
"pyOpenssl"
38+
"pyOpenssl",
39+
"werkzeug"
3940
],
4041
"other": {
4142
"git": {},

src/anaconda/test-project/test.sh

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -60,5 +60,8 @@ check "conda-update-conda" bash -c "conda update -y conda"
6060
check "conda-install" bash -c "conda install -c conda-forge --yes tensorflow"
6161
check "conda-install" bash -c "conda install -c conda-forge --yes pytorch"
6262

63+
werkzeug_version=$(python -c "import werkzeug; print(werkzeug.__version__)")
64+
check-version-ge "werkzeug-requirement" "${werkzeug_version}" "2.2.3"
65+
6366
# Report result
6467
reportResults

0 commit comments

Comments
 (0)