From d5565b7202cddc61ce055bd42f78f1fea0d38c40 Mon Sep 17 00:00:00 2001 From: Zachary Lentz Date: Tue, 16 Jan 2024 09:31:23 -0800 Subject: [PATCH] SEC: clear old security pins, add new ones CVE-2024-22190 CVE-2024-22195 --- envs/pcds/conda-security.txt | 10 ++-------- 1 file changed, 2 insertions(+), 8 deletions(-) diff --git a/envs/pcds/conda-security.txt b/envs/pcds/conda-security.txt index cddf7c9..28eba21 100644 --- a/envs/pcds/conda-security.txt +++ b/envs/pcds/conda-security.txt @@ -1,11 +1,5 @@ # Extra dependencies that must be updated to handle a CVE # Apply this even in the incr environment # This file can be periodically cleared after an env release -aiohttp>=3.8.6 -cryptography>=41.0.6 -jupyter_server>=2.11.2 -paramiko>=3.4.0 -pip>=23.3 -pyarrow>=14.0.1 -pycryptodome>=3.19.1 -werkzeug>=3.0.1 +gitpython>=3.1.41 +jinja2>=3.1.3