CVE-2023-4863

Advisory

Neuroconv 0.6.4 updates its dependency 'opencv-python-headless' to include a security fix.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Bug Fixes
* Fixed a setup bug introduced in `v0.6.2` where installation process created a directory instead of a file for test configuration file [PR 1070](https://github.com/catalystneuro/neuroconv/pull/1070)
* The method `get_extractor` now works for `MockImagingInterface` [PR 1076](https://github.com/catalystneuro/neuroconv/pull/1076)
* Updated opencv version for security [PR 1087](https://github.com/catalystneuro/neuroconv/pull/1087)
* Solved a bug of `PlexonRecordingInterface` where data with multiple streams could not be opened [PR 989](https://github.com/catalystneuro/neuroconv/pull/989)

Deprecations

Features
* Added chunking/compression for string-only compound objects: [PR 1042](https://github.com/catalystneuro/neuroconv/pull/1042)
* Added automated EFS volume creation and mounting to the `submit_aws_job` helper function. [PR 1018](https://github.com/catalystneuro/neuroconv/pull/1018)
* Added a mock for segmentation extractors interfaces in ophys: `MockSegmentationInterface` [PR 1067](https://github.com/catalystneuro/neuroconv/pull/1067)
* Added a `MockSortingInterface` for testing purposes. [PR 1065](https://github.com/catalystneuro/neuroconv/pull/1065)


Improvements
* Testing on mac sillicon [PR 1061](https://github.com/catalystneuro/neuroconv/pull/1061)
* Add writing to zarr test for to the test on data [PR 1056](https://github.com/catalystneuro/neuroconv/pull/1056)
* Modified the CI to avoid running doctests twice [PR 1077](https://github.com/catalystneuro/neuroconv/pull/#1077)
* Consolidated daily workflows into one workflow and added email notifications [PR 1081](https://github.com/catalystneuro/neuroconv/pull/1081)
* Added zarr tests for the test on data with checking equivalent backends [PR 1083](https://github.com/catalystneuro/neuroconv/pull/1083)

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4863