Skip to content

Commit 03c107d

Browse files
[anaconda] - GHSA-cgvx-9447-vcch - nltk package - apply security patch (#1198)
1 parent 0bad939 commit 03c107d

File tree

2 files changed

+3
-1
lines changed

2 files changed

+3
-1
lines changed

src/anaconda/.devcontainer/apply_security_patches.sh

+2-1
Original file line numberDiff line numberDiff line change
@@ -4,10 +4,11 @@
44
# streamlit - [GHSA-rxff-vr5r-8cj5]
55
# notebook, jupyterlab - [GHSA-9q39-rmj3-p4r2]
66
# cryptography, pyopenssl - [GHSA-h4gh-qq45-vh27]
7+
# nltk - [GHSA-cgvx-9447-vcch]
78

89
vulnerable_packages=( "pydantic=2.5.3" "joblib=1.3.1" "mistune=3.0.1" "werkzeug=3.0.3" "transformers=4.36.0" "pillow=10.3.0" "aiohttp=3.10.2" "pyopenssl=24.2.1" \
910
"cryptography=43.0.1" "gitpython=3.1.41" "jupyter-lsp=2.2.2" "idna=3.7" "jinja2=3.1.4" "scrapy=2.11.2" "black=24.4.2" "requests=2.32.2" \
10-
"jupyter_server=2.14.1" "tornado=6.4.1" "tqdm=4.66.4" "urllib3=2.2.2" "scikit-learn=1.5.0" "zipp=3.19.1" "streamlit=1.37.0" "notebook=7.2.2" )
11+
"jupyter_server=2.14.1" "tornado=6.4.1" "tqdm=4.66.4" "urllib3=2.2.2" "scikit-learn=1.5.0" "zipp=3.19.1" "streamlit=1.37.0" "notebook=7.2.2" "nltk=3.9" )
1112

1213
# Define the number of rows (based on the length of vulnerable_packages)
1314
rows=${#vulnerable_packages[@]}

src/anaconda/test-project/test.sh

+1
Original file line numberDiff line numberDiff line change
@@ -67,6 +67,7 @@ checkCondaPackageVersion "pydantic" "2.5.3"
6767
checkCondaPackageVersion "tqdm" "4.66.4"
6868
checkCondaPackageVersion "black" "24.4.2"
6969
checkCondaPackageVersion "streamlit" "1.37.0"
70+
checkCondaPackageVersion "nltk" "3.9"
7071

7172
check "conda-update-conda" bash -c "conda update -y conda"
7273
check "conda-install-tensorflow" bash -c "conda create --name test-env -c conda-forge --yes tensorflow"

0 commit comments

Comments
 (0)