Skip to content

Commit

Permalink
[Anaconda] - scikit-learn, urllib3 - patched by pinning to reqd. vers…
Browse files Browse the repository at this point in the history
…ions (#1106)
  • Loading branch information
gauravsaini04 authored Jun 26, 2024
1 parent 29cdc89 commit 953fb6f
Show file tree
Hide file tree
Showing 2 changed files with 3 additions and 2 deletions.
2 changes: 1 addition & 1 deletion src/anaconda/.devcontainer/apply_security_patches.sh
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
#!/bin/bash

vulnerable_packages=( "pydantic=2.5.3" "joblib=1.3.1" "mistune=3.0.1" "werkzeug=3.0.3" "transformers=4.36.0" "pillow=10.3.0" "aiohttp=3.9.4" \
"cryptography=42.0.4" "gitpython=3.1.41" "jupyter-lsp=2.2.2" "idna=3.7" "jinja2=3.1.4" "scrapy=2.11.2" "black=24.4.2" "requests=2.32.2" "jupyter_server=2.14.1" "tornado=6.4.1" "tqdm=4.66.4")
"cryptography=42.0.4" "gitpython=3.1.41" "jupyter-lsp=2.2.2" "idna=3.7" "jinja2=3.1.4" "scrapy=2.11.2" "black=24.4.2" "requests=2.32.2" "jupyter_server=2.14.1" "tornado=6.4.1" "tqdm=4.66.4" "urllib3=2.2.2" "scikit-learn=1.5.0")

# Define the number of rows (based on the length of vulnerable_packages)
rows=${#vulnerable_packages[@]}
Expand Down
3 changes: 2 additions & 1 deletion src/anaconda/test-project/test.sh
Original file line number Diff line number Diff line change
Expand Up @@ -54,12 +54,13 @@ checkPythonPackageVersion "idna" "3.7"
checkPythonPackageVersion "jinja2" "3.1.4"
checkPythonPackageVersion "scrapy" "2.11.2"
checkPythonPackageVersion "requests" "2.32.2"
checkPythonPackageVersion "scikit-learn" "1.5.0"

checkCondaPackageVersion "pyopenssl" "23.2.0"
checkCondaPackageVersion "requests" "2.32.2"
checkCondaPackageVersion "pygments" "2.15.1"
checkCondaPackageVersion "mpmath" "1.3.0"
checkCondaPackageVersion "urllib3" "1.26.17"
checkCondaPackageVersion "urllib3" "2.2.2"
checkCondaPackageVersion "pyarrow" "14.0.1"
checkCondaPackageVersion "pydantic" "2.5.3"
checkCondaPackageVersion "tqdm" "4.66.4"
Expand Down

0 comments on commit 953fb6f

Please sign in to comment.