conda / conda-docs

Conda documentation

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Python security vulnerability fix

balkird opened this issue · comments

Checklist

  • I added a descriptive title
  • I searched open reports and couldn't find a duplicate

What happened?

Since there was a security incident in various Python versions, I ask that conda and miniconda be offered with the appropriate currently fixed versions.

The incident can be found here:
https://nvd.nist.gov/vuln/detail/CVE-2022-37454

The information about the fix in Python can be found here:
https://python-security.readthedocs.io/vuln/sha3-buffer-overflow.html

Conda Info

No response

Conda Config

No response

Conda list

No response

Additional Context

No response

Please file this in https://github.com/ContinuumIO/anaconda-issues/issues as this is not related to conda-docs.