From 365f492d040a2b976beb1f383319c91ff2fc403a Mon Sep 17 00:00:00 2001 From: Gaurav Saini <147703805+gauravsaini04@users.noreply.github.com> Date: Wed, 17 Jul 2024 02:54:14 +0530 Subject: [PATCH] [anaconda] - zipp- GHSA-jfmj-5v4g-7637 apply security patch.. (#1130) --- src/anaconda/.devcontainer/apply_security_patches.sh | 2 +- src/anaconda/test-project/test.sh | 1 + 2 files changed, 2 insertions(+), 1 deletion(-) diff --git a/src/anaconda/.devcontainer/apply_security_patches.sh b/src/anaconda/.devcontainer/apply_security_patches.sh index 972462a28..00e232828 100644 --- a/src/anaconda/.devcontainer/apply_security_patches.sh +++ b/src/anaconda/.devcontainer/apply_security_patches.sh @@ -1,7 +1,7 @@ #!/bin/bash vulnerable_packages=( "pydantic=2.5.3" "joblib=1.3.1" "mistune=3.0.1" "werkzeug=3.0.3" "transformers=4.36.0" "pillow=10.3.0" "aiohttp=3.9.4" \ - "cryptography=42.0.4" "gitpython=3.1.41" "jupyter-lsp=2.2.2" "idna=3.7" "jinja2=3.1.4" "scrapy=2.11.2" "black=24.4.2" "requests=2.32.2" "jupyter_server=2.14.1" "tornado=6.4.1" "tqdm=4.66.4" "urllib3=2.2.2" "scikit-learn=1.5.0") + "cryptography=42.0.4" "gitpython=3.1.41" "jupyter-lsp=2.2.2" "idna=3.7" "jinja2=3.1.4" "scrapy=2.11.2" "black=24.4.2" "requests=2.32.2" "jupyter_server=2.14.1" "tornado=6.4.1" "tqdm=4.66.4" "urllib3=2.2.2" "scikit-learn=1.5.0" "zipp=3.19.1" ) # Define the number of rows (based on the length of vulnerable_packages) rows=${#vulnerable_packages[@]} diff --git a/src/anaconda/test-project/test.sh b/src/anaconda/test-project/test.sh index d9211c0f4..de089d41a 100755 --- a/src/anaconda/test-project/test.sh +++ b/src/anaconda/test-project/test.sh @@ -54,6 +54,7 @@ checkPythonPackageVersion "jinja2" "3.1.4" checkPythonPackageVersion "scrapy" "2.11.2" checkPythonPackageVersion "requests" "2.32.2" checkPythonPackageVersion "scikit-learn" "1.5.0" +checkPythonPackageVersion "zipp" "3.19.1" checkCondaPackageVersion "pyopenssl" "23.2.0" checkCondaPackageVersion "requests" "2.32.2"