Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Miniconda] - requests, urllib3 - patched for security vulnerabilities #1107

Conversation

gauravsaini04
Copy link
Contributor

@gauravsaini04 gauravsaini04 commented Jun 26, 2024

Dev container name:

  • Miniconda

Description:

This PR patches the following vulnerabilities:

This vulnerability comes from the continuumio/miniconda3 image used upstream for the miniconda devcontainer.

Changelog:

  • Updated apply_security_patches.sh

    • Upgraded versions for patched python & anaconda packages;
      • urllib3 - minimum package version has been set to 2.2.2;
      • requests - minimum package version has been set to 2.32.0;
  • Updated tests to verify urllib3 minimum version (Minimum package version set to 2.2.2 which fixes GHSA-34jh-p97f-mpxf) and requests minimum version (Minimum package version set to 2.32.0 which fixes GHSA-9wx4-h78v-vm56);

Checklist:

  • Checked that applied changes work as expected

@gauravsaini04 gauravsaini04 requested a review from a team as a code owner June 26, 2024 06:40
@samruddhikhandale samruddhikhandale merged commit 6336210 into devcontainers:main Jun 26, 2024
2 checks passed
@gauravsaini04 gauravsaini04 deleted the miniconda_requests_urllib3_patched branch June 27, 2024 09:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants