Skip to content

Commit

Permalink
[Anaconda] - remove pinned packages as availabe versions from upstrea…
Browse files Browse the repository at this point in the history
…m greater than pinned (#1073)

* [Anaconda] - remove useless pinned packages - availabe versions from upstream greater than pinned

* reverting test file changes - review comment
  • Loading branch information
gauravsaini04 authored May 23, 2024
1 parent fb70f76 commit 7d17d47
Showing 1 changed file with 0 additions and 16 deletions.
16 changes: 0 additions & 16 deletions src/anaconda/.devcontainer/Dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -6,36 +6,20 @@ RUN . /etc/os-release && if [ "${VERSION_CODENAME}" != "bullseye" ]; then exit 1
# Temporary: Upgrade python packages due to mentioned CVEs
# They are installed by the base image (continuumio/anaconda3) which does not have the patch.
RUN conda install \
# https://github.com/advisories/GHSA-v845-jxx5-vc9f
urllib3==1.26.18 \
# https://github.com/advisories/GHSA-mr82-8j83-vxmv
pydantic==2.5.3

RUN python3 -m pip install --upgrade \
# https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-21797
joblib==1.3.1 \
# https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24065
cookiecutter==2.2.3 \
# https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-34749
mistune==3.0.1 \
# https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-34141
numpy==1.25.2 \
# https://github.com/advisories/GHSA-2g68-c3qc-8985
werkzeug==3.0.3 \
# https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-32862
nbconvert==7.7.3 \
# https://github.com/advisories/GHSA-qppv-j76h-2rpx
tornado==6.3.3 \
# https://github.com/advisories/GHSA-r726-vmfq-j9j3
jupyter_server==2.7.2 \
# https://github.com/advisories/GHSA-5wvp-7f3h-6wmm
pyarrow==14.0.1 \
# https://github.com/advisories/GHSA-v68g-wm8c-6x7j
transformers==4.36.0 \
# https://github.com/advisories/GHSA-44wm-f244-xhp3
pillow==10.3.0 \
# https://github.com/advisories/GHSA-44cc-43rp-5947
jupyterlab==4.0.11 \
# https://github.com/advisories/GHSA-5h86-8mv2-jq9f
aiohttp==3.9.4 \
# https://github.com/advisories/GHSA-6vqw-3v5j-54x4
Expand Down

0 comments on commit 7d17d47

Please sign in to comment.