diff --git a/src/anaconda/.devcontainer/Dockerfile b/src/anaconda/.devcontainer/Dockerfile index b7fcc8857..8b6853516 100644 --- a/src/anaconda/.devcontainer/Dockerfile +++ b/src/anaconda/.devcontainer/Dockerfile @@ -5,9 +5,9 @@ RUN . /etc/os-release && if [ "${VERSION_CODENAME}" != "bullseye" ]; then exit 1 # Temporary: Upgrade python packages due to mentioned CVEs # They are installed by the base image (continuumio/anaconda3) which does not have the patch. -RUN conda install \ - # https://github.com/advisories/GHSA-gfw2-4jvh-wgfg - aiohttp=3.8.6 \ +RUN conda install \ + # https://github.com/advisories/GHSA-q3qx-c6g2-7pw2 + aiohttp=3.9.0 \ # https://github.com/advisories/GHSA-j7hp-h8jx-5ppr pillow=10.0.1 \ # https://github.com/advisories/GHSA-v845-jxx5-vc9f diff --git a/src/anaconda/test-project/test.sh b/src/anaconda/test-project/test.sh index b197e1121..fb46158d9 100755 --- a/src/anaconda/test-project/test.sh +++ b/src/anaconda/test-project/test.sh @@ -43,7 +43,7 @@ checkPythonPackageVersion "requests" "2.31.0" checkPythonPackageVersion "cryptography" "41.0.3" checkPythonPackageVersion "transformers" "4.30.0" checkPythonPackageVersion "mpmath" "1.3.0" -checkPythonPackageVersion "aiohttp" "3.8.6" +checkPythonPackageVersion "aiohttp" "3.9.0" checkPythonPackageVersion "jupyter_server" "2.7.2" checkPythonPackageVersion "tornado" "6.3.3" @@ -52,7 +52,7 @@ checkCondaPackageVersion "cryptography" "41.0.3" checkCondaPackageVersion "requests" "2.31.0" checkCondaPackageVersion "pygments" "2.15.1" checkCondaPackageVersion "mpmath" "1.3.0" -checkCondaPackageVersion "aiohttp" "3.8.6" +checkCondaPackageVersion "aiohttp" "3.9.0" checkCondaPackageVersion "pillow" "10.0.1" checkCondaPackageVersion "urllib3" "1.26.17"