search

jodyphelan / TBProfiler

Profiling tool for Mycobacterium tuberculosis to detect ressistance and strain type from WGS data
GNU General Public License v3.0
102 stars 42 forks source link

Vulnerabilities for cryptography #275

Closed yujun2017 closed 1 year ago

yujun2017 commented 1 year ago

We just rejected by our security team about the cryptography. tb-profiler and ntm-profiler both are still using cryptography 39.0.0 which has Vulnerability issue inside. the latest version is 39.0.1. can you please update cryptography to latest version?

jodyphelan commented 1 year ago

Hi @yujun2017 ,

I'll have a look at updating the recipe. In the meantime, it should be possible to override any of the default versions by explicitly installing a certain version into your env. For example:

mamba create -n test tb-profiler tb-profiler=4.4.1 cryptography=39.0.1
yujun2017 commented 1 year ago

Jody: I will try and let you know if it works. Thank you so much for your help

John

On Tue, 28 Feb 2023 at 04:51, Jody Phelan @.***> wrote:

Hi @yujun2017 https://github.com/yujun2017 ,

I'll have a look at updating the recipe. In the meantime, it should be possible to override any of the default versions by explicitly installing a certain version into your env. For example:

mamba create -n test tb-profiler tb-profiler=4.4.1 cryptography=39.0.1

— Reply to this email directly, view it on GitHub https://github.com/jodyphelan/TBProfiler/issues/275#issuecomment-1447878876, or unsubscribe https://github.com/notifications/unsubscribe-auth/AGDIGTHDVHWMQZ3S53Z5PA3WZXDB3ANCNFSM6AAAAAAVGACX2Q . You are receiving this because you were mentioned.Message ID: @.***>

--

John Yu

yujun2017 commented 1 year ago

The issue has been solved.

jodyphelan commented 1 year ago

Great!