Skip to content

Commit bbe9fd4

Browse files
Anaconda: Bump "nbconvert" due to CVE-2021-32862 (devcontainers#464)
1 parent 5831bde commit bbe9fd4

File tree

3 files changed

+9
-2
lines changed

3 files changed

+9
-2
lines changed

src/anaconda/.devcontainer/Dockerfile

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -71,7 +71,9 @@ RUN python3 -m pip install \
7171
# https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40899
7272
future \
7373
# https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-40898
74-
wheel
74+
wheel \
75+
# https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32862
76+
nbconvert
7577

7678
# Copy environment.yml (if found) to a temp location so we can update the environment. Also
7779
# copy "noop.txt" so the COPY instruction does not fail if no environment.yml exists.

src/anaconda/manifest.json

Lines changed: 3 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -32,7 +32,9 @@
3232
"certifi",
3333
"setuptools",
3434
"future",
35-
"wheel"
35+
"wheel",
36+
"nbconvert",
37+
"py"
3638
],
3739
"other": {
3840
"git": {},

src/anaconda/test-project/test.sh

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -53,5 +53,8 @@ check-version-ge "future-requirement" "${future_version}" "0.18.3"
5353
wheel_version=$(python -c "import wheel; print(wheel.__version__)")
5454
check-version-ge "wheel-requirement" "${wheel_version}" "0.38.1"
5555

56+
nbconvert_version=$(python -c "import nbconvert; print(nbconvert.__version__)")
57+
check-version-ge "nbconvert-requirement" "${nbconvert_version}" "6.5.1"
58+
5659
# Report result
5760
reportResults

0 commit comments

Comments
 (0)