exasol · tkilias · Jul 25, 2023 · Jul 19, 2023 · Jul 19, 2023 · Jul 19, 2023
diff --git a/.current_gitmodules b/.current_gitmodules
diff --git a/doc/changes/changes_6.1.0.md b/doc/changes/changes_6.1.0.md
@@ -1,11 +1,13 @@
-# script-languages-release 6.1.0, released 2023-06-02
+# script-languages-release 6.1.0, released 2023-07-25
 
 Code name: Pandas 2 support
 
 ## Summary
 
 This releases adds support for Pandas 2 pyarrow dtype columns for emitting dataframes from Python UDFs. Furthermore, it fixes a silent data corruption when emitting dateframes with float16 dtype columns from Python UDFs.
 
+**Note:** We could not update scipy in the standard 7.* flavors such that these still contain CVE-2023-29824, because the fixed scipy version is not available for Python 3.7 which is still used in these flavors. We are going to replace Python 3.7 with Python 3.8 in the next release and than also update scipy. See also following [GitHub issue](https://github.com/exasol/script-languages-release/issues/824).
+
 ## [Package Version Comparison between Release 6.0.0 and 6.1.0](package_diffs/6.1.0/README.md)
 
 ## Script-Language-Container-Tool (Exaslct)
@@ -38,3 +40,4 @@ n/a
  - #800: Updated Ubuntu packages
  - #803: Updated Ubuntu packages
  - #815: Updated Ubuntu packages and poetry.lock
+ - #822: Updated scipy to 1.10.1 in standard 8.0.0 flavor to fix CVE-2023-29824. For this we had to remove scipy-numba. Updated apt packages.
diff --git a/...diffs/6.1.0/python-3.8-minimal-EXASOL-6.2.0/build_deps/apt_get_packages_diff.md b/...diffs/6.1.0/python-3.8-minimal-EXASOL-6.2.0/build_deps/apt_get_packages_diff.md
diff --git a/...6.1.0/python-3.8-minimal-EXASOL-6.2.0/flavor_base_deps/apt_get_packages_diff.md b/...6.1.0/python-3.8-minimal-EXASOL-6.2.0/flavor_base_deps/apt_get_packages_diff.md
diff --git a/...fs/6.1.0/python-3.8-minimal-EXASOL-6.2.0/language_deps/apt_get_packages_diff.md b/...fs/6.1.0/python-3.8-minimal-EXASOL-6.2.0/language_deps/apt_get_packages_diff.md
diff --git a/...s/package_diffs/6.1.0/standard-EXASOL-8.0.0/build_deps/apt_get_packages_diff.md b/...s/package_diffs/6.1.0/standard-EXASOL-8.0.0/build_deps/apt_get_packages_diff.md
diff --git a/...diffs/6.1.0/standard-EXASOL-8.0.0/flavor_base_deps_apt/apt_get_packages_diff.md b/...diffs/6.1.0/standard-EXASOL-8.0.0/flavor_base_deps_apt/apt_get_packages_diff.md
diff --git a/....1.0/standard-EXASOL-8.0.0/flavor_base_deps_python/python3_pip_packages_diff.md b/....1.0/standard-EXASOL-8.0.0/flavor_base_deps_python/python3_pip_packages_diff.md
diff --git a/...ackage_diffs/6.1.0/standard-EXASOL-8.0.0/language_deps/apt_get_packages_diff.md b/...ackage_diffs/6.1.0/standard-EXASOL-8.0.0/language_deps/apt_get_packages_diff.md
diff --git a/.../6.1.0/template-Exasol-all-python-3.8-conda/conda_deps/apt_get_packages_diff.md b/.../6.1.0/template-Exasol-all-python-3.8-conda/conda_deps/apt_get_packages_diff.md
diff --git a/...te-Exasol-all-python-3.8-cuda-conda/nvidia_driver_deps/apt_get_packages_diff.md b/...te-Exasol-all-python-3.8-cuda-conda/nvidia_driver_deps/apt_get_packages_diff.md
diff --git a/flavors/standard-EXASOL-7.0.0/flavor_base/security_scan/.trivyignore b/flavors/standard-EXASOL-7.0.0/flavor_base/security_scan/.trivyignore
@@ -18,3 +18,5 @@ CVE-2022-27191
 CVE-2022-23960
 # No fix yet for CVE-2023-28859
 CVE-2023-28859
+# Fixed Scipy version 1.8.0 not available for Python 3.7, see  https://github.com/exasol/script-languages-release/issues/824
+CVE-2023-29824
diff --git a/flavors/standard-EXASOL-7.1.0/flavor_base/security_scan/.trivyignore b/flavors/standard-EXASOL-7.1.0/flavor_base/security_scan/.trivyignore
@@ -18,3 +18,5 @@ CVE-2022-27191
 CVE-2022-23960
 # No fix yet for CVE-2023-28859
 CVE-2023-28859
+# Fixed Scipy version 1.8.0 not available for Python 3.7, see  https://github.com/exasol/script-languages-release/issues/824
+CVE-2023-29824