Set minimum version of netCDF4 (comes with curl) to mitigate CVE-2023-38545

SEMAFORInformatik / femagtools

Python API for FEMAG

BSD 2-Clause "Simplified" License

19 stars 13 forks source link

Set minimum version of netCDF4 (comes with curl) to mitigate CVE-2023-38545 #84

Closed NiklasWitzel closed 10 months ago

NiklasWitzel commented 10 months ago

netCDF4 comes with its own version of libcurl. Previous versions of netCDF4 contained a vulnerable version of libcurl (CVE-2023-38545). This change makes sure, that users receive a version of libcurl, that is no longer affected.

ronaldtanner commented 10 months ago

Thanks