Skip to content

Commit

Permalink
[universal] Update cryptography package due to GHSA-v8gr-m533-ghj9 (#…
Browse files Browse the repository at this point in the history
…795)

* Bump `cryptography` package version

* Update tests
  • Loading branch information
alexander-smolyakov authored Oct 6, 2023
1 parent 2eff964 commit c4baad4
Show file tree
Hide file tree
Showing 2 changed files with 4 additions and 4 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -52,8 +52,9 @@ sudo_if /opt/conda/bin/python3 -m pip install --upgrade pip

# pyopenssl should be updated to be compatible with latest version of cryptography
update_conda_package pyopenssl "23.2.0"
# https://github.com/advisories/GHSA-jm77-qphf-c4w8
update_conda_package cryptography "41.0.3"

# https://github.com/advisories/GHSA-v8gr-m533-ghj9
update_python_package /opt/conda/bin/python3 cryptography "41.0.4"

# https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-32681
update_conda_package requests "2.31.0"
3 changes: 1 addition & 2 deletions src/universal/test-project/test.sh
Original file line number Diff line number Diff line change
Expand Up @@ -187,7 +187,6 @@ check "java-version-on-path-is-12.0.2" java --version | grep 12.0.2
ls -la /home/codespace

## Python - current
checkPythonPackageVersion "python" "wheel" "0.38.1"
checkPythonPackageVersion "python" "setuptools" "65.5.1"
checkPythonPackageVersion "python" "requests" "2.31.0"

Expand All @@ -196,7 +195,7 @@ checkPythonPackageVersion "/usr/local/python/3.9.*/bin/python" "setuptools" "65.

## Conda Python
checkCondaPackageVersion "requests" "2.31.0"
checkCondaPackageVersion "cryptography" "41.0.3"
checkCondaPackageVersion "cryptography" "41.0.4"
checkCondaPackageVersion "pyopenssl" "23.2.0"

## Test Conda
Expand Down

0 comments on commit c4baad4

Please sign in to comment.