Skip to content

Commit 7d17d47

Browse files
[Anaconda] - remove pinned packages as availabe versions from upstream greater than pinned (devcontainers#1073)
* [Anaconda] - remove useless pinned packages - availabe versions from upstream greater than pinned * reverting test file changes - review comment
1 parent fb70f76 commit 7d17d47

File tree

1 file changed

+0
-16
lines changed

1 file changed

+0
-16
lines changed

src/anaconda/.devcontainer/Dockerfile

Lines changed: 0 additions & 16 deletions
Original file line numberDiff line numberDiff line change
@@ -6,36 +6,20 @@ RUN . /etc/os-release && if [ "${VERSION_CODENAME}" != "bullseye" ]; then exit 1
66
# Temporary: Upgrade python packages due to mentioned CVEs
77
# They are installed by the base image (continuumio/anaconda3) which does not have the patch.
88
RUN conda install \
9-
# https://github.com/advisories/GHSA-v845-jxx5-vc9f
10-
urllib3==1.26.18 \
119
# https://github.com/advisories/GHSA-mr82-8j83-vxmv
1210
pydantic==2.5.3
1311

1412
RUN python3 -m pip install --upgrade \
1513
# https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21797
1614
joblib==1.3.1 \
17-
# https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24065
18-
cookiecutter==2.2.3 \
1915
# https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34749
2016
mistune==3.0.1 \
21-
# https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34141
22-
numpy==1.25.2 \
2317
# https://github.com/advisories/GHSA-2g68-c3qc-8985
2418
werkzeug==3.0.3 \
25-
# https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32862
26-
nbconvert==7.7.3 \
27-
# https://github.com/advisories/GHSA-qppv-j76h-2rpx
28-
tornado==6.3.3 \
29-
# https://github.com/advisories/GHSA-r726-vmfq-j9j3
30-
jupyter_server==2.7.2 \
31-
# https://github.com/advisories/GHSA-5wvp-7f3h-6wmm
32-
pyarrow==14.0.1 \
3319
# https://github.com/advisories/GHSA-v68g-wm8c-6x7j
3420
transformers==4.36.0 \
3521
# https://github.com/advisories/GHSA-44wm-f244-xhp3
3622
pillow==10.3.0 \
37-
# https://github.com/advisories/GHSA-44cc-43rp-5947
38-
jupyterlab==4.0.11 \
3923
# https://github.com/advisories/GHSA-5h86-8mv2-jq9f
4024
aiohttp==3.9.4 \
4125
# https://github.com/advisories/GHSA-6vqw-3v5j-54x4

0 commit comments

Comments
 (0)