Skip to content

Commit 0432a2f

Browse files
[anaconda] - cryptography, pyopenssl, jupyterlab, notebook - apply security patches (#1182)
1 parent de2ffa5 commit 0432a2f

File tree

2 files changed

+9
-6
lines changed

2 files changed

+9
-6
lines changed

src/anaconda/.devcontainer/apply_security_patches.sh

+5-3
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,12 @@
22

33
# vulnerabilities:
44
# streamlit - [GHSA-rxff-vr5r-8cj5]
5+
# notebook, jupyterlab - [GHSA-9q39-rmj3-p4r2]
6+
# cryptography, pyopenssl - [GHSA-h4gh-qq45-vh27]
57

6-
vulnerable_packages=( "pydantic=2.5.3" "joblib=1.3.1" "mistune=3.0.1" "werkzeug=3.0.3" "transformers=4.36.0" "pillow=10.3.0" "aiohttp=3.10.2" \
7-
"cryptography=42.0.4" "gitpython=3.1.41" "jupyter-lsp=2.2.2" "idna=3.7" "jinja2=3.1.4" "scrapy=2.11.2" "black=24.4.2" "requests=2.32.2" \
8-
"jupyter_server=2.14.1" "tornado=6.4.1" "tqdm=4.66.4" "urllib3=2.2.2" "scikit-learn=1.5.0" "zipp=3.19.1" "streamlit=1.37.0" )
8+
vulnerable_packages=( "pydantic=2.5.3" "joblib=1.3.1" "mistune=3.0.1" "werkzeug=3.0.3" "transformers=4.36.0" "pillow=10.3.0" "aiohttp=3.10.2" "pyopenssl=24.2.1" \
9+
"cryptography=43.0.1" "gitpython=3.1.41" "jupyter-lsp=2.2.2" "idna=3.7" "jinja2=3.1.4" "scrapy=2.11.2" "black=24.4.2" "requests=2.32.2" \
10+
"jupyter_server=2.14.1" "tornado=6.4.1" "tqdm=4.66.4" "urllib3=2.2.2" "scikit-learn=1.5.0" "zipp=3.19.1" "streamlit=1.37.0" "notebook=7.2.2" )
911

1012
# Define the number of rows (based on the length of vulnerable_packages)
1113
rows=${#vulnerable_packages[@]}

src/anaconda/test-project/test.sh

+4-3
Original file line numberDiff line numberDiff line change
@@ -38,15 +38,16 @@ checkPythonPackageVersion "wheel" "0.38.1"
3838
checkPythonPackageVersion "nbconvert" "6.5.1"
3939
checkPythonPackageVersion "werkzeug" "3.0.3"
4040
checkPythonPackageVersion "certifi" "2022.12.07"
41-
checkPythonPackageVersion "cryptography" "42.0.4"
41+
checkPythonPackageVersion "cryptography" "43.0.1"
4242
checkPythonPackageVersion "transformers" "4.36.0"
4343
checkPythonPackageVersion "mpmath" "1.3.0"
4444
checkPythonPackageVersion "aiohttp" "3.10.2"
4545
checkPythonPackageVersion "tornado" "6.4.1"
4646
checkPythonPackageVersion "jupyter_server" "2.14.1"
4747
checkPythonPackageVersion "pyarrow" "14.0.1"
4848
checkPythonPackageVersion "pillow" "10.3.0"
49-
checkPythonPackageVersion "jupyterlab" "4.0.11"
49+
checkPythonPackageVersion "jupyterlab" "4.2.5"
50+
checkPythonPackageVersion "notebook" "7.2.2"
5051
checkPythonPackageVersion "gitpython" "3.1.41"
5152
checkPythonPackageVersion "jupyter-lsp" "2.2.2"
5253
checkPythonPackageVersion "idna" "3.7"
@@ -56,7 +57,7 @@ checkPythonPackageVersion "requests" "2.32.2"
5657
checkPythonPackageVersion "scikit-learn" "1.5.0"
5758
checkPythonPackageVersion "zipp" "3.19.1"
5859

59-
checkCondaPackageVersion "pyopenssl" "23.2.0"
60+
checkCondaPackageVersion "pyopenssl" "24.2.1"
6061
checkCondaPackageVersion "requests" "2.32.2"
6162
checkCondaPackageVersion "pygments" "2.15.1"
6263
checkCondaPackageVersion "mpmath" "1.3.0"

0 commit comments

Comments
 (0)