File tree Expand file tree Collapse file tree 1 file changed +0
-16
lines changed
src/anaconda/.devcontainer Expand file tree Collapse file tree 1 file changed +0
-16
lines changed Original file line number Diff line number Diff line change @@ -6,36 +6,20 @@ RUN . /etc/os-release && if [ "${VERSION_CODENAME}" != "bullseye" ]; then exit 1
66# Temporary: Upgrade python packages due to mentioned CVEs
77# They are installed by the base image (continuumio/anaconda3) which does not have the patch.
88RUN conda install \
9- # https://github.com/advisories/GHSA-v845-jxx5-vc9f
10- urllib3==1.26.18 \
119 # https://github.com/advisories/GHSA-mr82-8j83-vxmv
1210 pydantic==2.5.3
1311
1412RUN python3 -m pip install --upgrade \
1513 # https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21797
1614 joblib==1.3.1 \
17- # https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24065
18- cookiecutter==2.2.3 \
1915 # https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34749
2016 mistune==3.0.1 \
21- # https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34141
22- numpy==1.25.2 \
2317 # https://github.com/advisories/GHSA-2g68-c3qc-8985
2418 werkzeug==3.0.3 \
25- # https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32862
26- nbconvert==7.7.3 \
27- # https://github.com/advisories/GHSA-qppv-j76h-2rpx
28- tornado==6.3.3 \
29- # https://github.com/advisories/GHSA-r726-vmfq-j9j3
30- jupyter_server==2.7.2 \
31- # https://github.com/advisories/GHSA-5wvp-7f3h-6wmm
32- pyarrow==14.0.1 \
3319 # https://github.com/advisories/GHSA-v68g-wm8c-6x7j
3420 transformers==4.36.0 \
3521 # https://github.com/advisories/GHSA-44wm-f244-xhp3
3622 pillow==10.3.0 \
37- # https://github.com/advisories/GHSA-44cc-43rp-5947
38- jupyterlab==4.0.11 \
3923 # https://github.com/advisories/GHSA-5h86-8mv2-jq9f
4024 aiohttp==3.9.4 \
4125 # https://github.com/advisories/GHSA-6vqw-3v5j-54x4
You can’t perform that action at this time.
0 commit comments