[Anaconda]-Jinja2-GHSA-h75v-3vvj-5mfj patch security vuln (#1063)

Co-authored-by: Samruddhi Khandale <skhandale@microsoft.com>
devcontainers · May 13, 2024 · 97c7bf5 · 97c7bf5
1 parent 4735279
commit 97c7bf5
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/src/anaconda/.devcontainer/Dockerfile b/src/anaconda/.devcontainer/Dockerfile
@@ -45,7 +45,9 @@ RUN python3 -m pip install --upgrade \
     # https://github.com/advisories/GHSA-4qhp-652w-c22x
     jupyter-lsp==2.2.2 \
     # https://github.com/advisories/GHSA-jjg7-2v4v-x38h
-    idna==3.7
+    idna==3.7 \ 
+    # https://github.com/advisories/GHSA-h75v-3vvj-5mfj
+    jinja2==3.1.4
 
 # Reset and copy updated files with updated privs to keep image size down
 FROM mcr.microsoft.com/devcontainers/base:1-bullseye

diff --git a/src/anaconda/test-project/test.sh b/src/anaconda/test-project/test.sh
@@ -52,6 +52,7 @@ checkPythonPackageVersion "jupyterlab" "4.0.11"
 checkPythonPackageVersion "gitpython" "3.1.41"
 checkPythonPackageVersion "jupyter-lsp" "2.2.2"
 checkPythonPackageVersion "idna" "3.7"
+checkPythonPackageVersion "jinja2" "3.1.4"
 
 checkCondaPackageVersion "pyopenssl" "23.2.0"
 checkCondaPackageVersion "requests" "2.31.0"