Skip to content

Commit cd4daf6

Browse files
authored
GHSA-8w49-h785-mj3c - updating tronado package version for anaconda image. (#1270)
1 parent 586c983 commit cd4daf6

File tree

2 files changed

+3
-2
lines changed

2 files changed

+3
-2
lines changed

src/anaconda/.devcontainer/apply_security_patches.sh

+2-1
Original file line numberDiff line numberDiff line change
@@ -3,7 +3,8 @@
33
# vulnerabilities:
44
# werkzeug - [GHSA-f9vj-2wh5-fj8j]
55

6-
vulnerable_packages=( "mistune=3.0.1" "transformers=4.36.0" "cryptography=43.0.1" "jupyter-lsp=2.2.2" "scrapy=2.11.2" "zipp=3.19.1")
6+
vulnerable_packages=( "mistune=3.0.1" "transformers=4.36.0" "cryptography=43.0.1" "jupyter-lsp=2.2.2" "scrapy=2.11.2" \
7+
"zipp=3.19.1" "tornado=6.4.2")
78

89
# Define the number of rows (based on the length of vulnerable_packages)
910
rows=${#vulnerable_packages[@]}

src/anaconda/test-project/test.sh

+1-1
Original file line numberDiff line numberDiff line change
@@ -42,7 +42,7 @@ checkPythonPackageVersion "cryptography" "43.0.1"
4242
checkPythonPackageVersion "transformers" "4.36.0"
4343
checkPythonPackageVersion "mpmath" "1.3.0"
4444
checkPythonPackageVersion "aiohttp" "3.10.2"
45-
checkPythonPackageVersion "tornado" "6.4.1"
45+
checkPythonPackageVersion "tornado" "6.4.2"
4646
checkPythonPackageVersion "jupyter_server" "2.14.1"
4747
checkPythonPackageVersion "pyarrow" "14.0.1"
4848
checkPythonPackageVersion "pillow" "10.3.0"

0 commit comments

Comments
 (0)