Skip to content

Commit

Permalink
[miniconda] Remove outdated patches (#890)
Browse files Browse the repository at this point in the history
- Removed outdated patches to be in sync with upstream image;
  • Loading branch information
alexander-smolyakov authored Dec 13, 2023
1 parent 136221f commit 022e494
Showing 1 changed file with 3 additions and 9 deletions.
12 changes: 3 additions & 9 deletions src/miniconda/.devcontainer/Dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -2,15 +2,9 @@ FROM continuumio/miniconda3 as upstream

# Temporary: Upgrade python packages due to mentioned CVEs
# They are installed by the base image (continuumio/miniconda3) which does not have the patch.
RUN conda install \
# pyopenssl should be updated to be compatible with latest version of cryptography
pyopenssl=23.2.0 \
# https://github.com/advisories/GHSA-jm77-qphf-c4w8
cryptography=41.0.3 \
# https://github.com/advisories/GHSA-j8r2-6x86-q33q
requests=2.31.0 \
# https://github.com/advisories/GHSA-v845-jxx5-vc9f
urllib3==1.26.18
# RUN conda install \
# https://github.com/advisories/<CVE_ID>
# <package_name> = <version>

# Reset and copy updated files with updated privs to keep image size down
FROM mcr.microsoft.com/devcontainers/base:1-bullseye
Expand Down

0 comments on commit 022e494

Please sign in to comment.