Skip to content

Commit c4baad4

Browse files
[universal] Update cryptography package due to GHSA-v8gr-m533-ghj9 (devcontainers#795)
* Bump `cryptography` package version * Update tests
1 parent 2eff964 commit c4baad4

File tree

2 files changed

+4
-4
lines changed

2 files changed

+4
-4
lines changed

src/universal/.devcontainer/local-features/patch-conda/install.sh

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -52,8 +52,9 @@ sudo_if /opt/conda/bin/python3 -m pip install --upgrade pip
5252

5353
# pyopenssl should be updated to be compatible with latest version of cryptography
5454
update_conda_package pyopenssl "23.2.0"
55-
# https://github.com/advisories/GHSA-jm77-qphf-c4w8
56-
update_conda_package cryptography "41.0.3"
55+
56+
# https://github.com/advisories/GHSA-v8gr-m533-ghj9
57+
update_python_package /opt/conda/bin/python3 cryptography "41.0.4"
5758

5859
# https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32681
5960
update_conda_package requests "2.31.0"

src/universal/test-project/test.sh

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -187,7 +187,6 @@ check "java-version-on-path-is-12.0.2" java --version | grep 12.0.2
187187
ls -la /home/codespace
188188

189189
## Python - current
190-
checkPythonPackageVersion "python" "wheel" "0.38.1"
191190
checkPythonPackageVersion "python" "setuptools" "65.5.1"
192191
checkPythonPackageVersion "python" "requests" "2.31.0"
193192

@@ -196,7 +195,7 @@ checkPythonPackageVersion "/usr/local/python/3.9.*/bin/python" "setuptools" "65.
196195

197196
## Conda Python
198197
checkCondaPackageVersion "requests" "2.31.0"
199-
checkCondaPackageVersion "cryptography" "41.0.3"
198+
checkCondaPackageVersion "cryptography" "41.0.4"
200199
checkCondaPackageVersion "pyopenssl" "23.2.0"
201200

202201
## Test Conda

0 commit comments

Comments
 (0)