[Snyk] Security upgrade python from 3.11.8-slim-bookworm to 3.12.4-slim-bookworm #4224

rubenfiszel · 2024-08-10T03:46:21Z

Snyk has created this PR to fix 4 vulnerabilities in the dockerfile dependencies of this project.

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Snyk changed the following file(s):

Dockerfile

We recommend upgrading to python:3.12.4-slim-bookworm, as this image has only 47 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Allocation of Resources Without Limits or Throttling SNYK-DEBIAN12-SYSTEMD-6277507	614
	Allocation of Resources Without Limits or Throttling SNYK-DEBIAN12-SYSTEMD-6277507	614
	Improper Check for Unusual or Exceptional Conditions SNYK-DEBIAN12-OPENSSL-6048820	514
	Out-of-bounds Write SNYK-DEBIAN12-OPENSSL-6148845	514
	CVE-2024-0727 SNYK-DEBIAN12-OPENSSL-6190223	514

Important

Check the changes in this PR to ensure they won't cause issues with your project.
Max score is 1000. Note that the real score may have changed since the PR was raised.
This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Allocation of Resources Without Limits or Throttling

🚀	This description was created by Ellipsis for commit `5905c9b`

Summary:

Update Dockerfile to use python:3.12.4-slim-bookworm to address security vulnerabilities.

Key points:

Update Dockerfile to use python:3.12.4-slim-bookworm instead of python:3.11.8-slim-bookworm.
Addresses 4 security vulnerabilities related to system resource allocation and OpenSSL.
Ensures the Docker base image benefits from the latest security fixes.

Generated with ❤️ by ellipsis.dev

* feat(frontend): Rich result by id component * feat(frontend): add waitJob helper * feat(frontend): improve code * feat(frontend): improve code * feat(frontend): fix build

* fix(frontend): wip * fix(frontend): wip * fix(frontend): add missing iter input for while loops * fix(frontend): improve code * fix(frontend): improve code * fix(frontend): failure status for fake modules on hold * fix(frontend): wip * fix(frontend): improve flow step warnings * fix(frontend): add debounce * fix(frontend): improve rpath detection * feat(frontend): improve code * fix(frontend): use the code parser to detect missing dependencies * fix(frontend): improve code * fix(frontend): improve code

* Add standalone mode without indexer * Imporve flag logic

* chore(main): release 1.363.0 * Apply automatic changes --------- Co-authored-by: rubenfiszel <[email protected]>

* feat: rehydrate instance settings/configs/users from CLI * fix: nits * feat: encryption key, saved instances, include all workspaces * preshot client version * Update deps.ts

* chore(main): release 1.364.0 * Apply automatic changes --------- Co-authored-by: rubenfiszel <[email protected]>

* chore(main): release 1.364.1 * Apply automatic changes --------- Co-authored-by: rubenfiszel <[email protected]>

…ess than 1 min (#4084)

* chore(main): release 1.364.2 * Apply automatic changes --------- Co-authored-by: rubenfiszel <[email protected]>

…ry (#4087) * add more logs, change a fetch_one to opt and add back show memory every * Update ee repo ref

* Refactored nested match expressions into inline pattern matching with early returns for improved readability and reduced nesting * Updated fn naming, map_while instead of filter_map fix --------- Co-authored-by: HugoCasa <[email protected]>

* feat: rhl9 img test * fix: action * fix: action * fix: build * don't use rustup * fix: rustfmt * fix: second apt-get * fix * fix: try xmlsec1 no-dev * fix: remove scache * fix: 1.75 rust support * fix: rust 1.75 * fix: xmlsec1 * fix: nit * fix: missing async recursion * fix: missing dep + unregister from RH * fix: add xmlsec1 openssl * fix: check binary is running * add link * feat: clean rhel files * fix: lock

* chore(main): release 1.364.3 * Apply automatic changes --------- Co-authored-by: rubenfiszel <[email protected]>

* chore: publish oneOf parser improvement * fix: indent

* feat(frontend): wip * feat(frontend): wip * feat(frontend): wip * feat(frontend): improve search modal style * feat(frontend): fix content search height * feat(frontend): fix overflow * feat(frontend): revert unrelated changes

* fix(frontend): Fix json editor wip * fix(frontend): Fix 'Use input' in the test flow drawer

…ow inputs (#4097)

…ry is set (#4099)

rubenfiszel and others added 30 commits July 15, 2024 01:05

improve schema form builder

ce73ee7

improve schema form builder

60c229c

feat(frontend): Rich result by id component (#4069)

546c343

* feat(frontend): Rich result by id component * feat(frontend): add waitJob helper * feat(frontend): improve code * feat(frontend): improve code * feat(frontend): fix build

fix: make indexer opt-in when in standalone mode (#4076)

3e31977

* Add standalone mode without indexer * Imporve flag logic

nits

70f3cc4

chore(main): release 1.363.0 (#4075)

969a86a

* chore(main): release 1.363.0 * Apply automatic changes --------- Co-authored-by: rubenfiszel <[email protected]>

add workspace to authed for /api/srch endpoint (#4079)

86c47c3

feat: rehydrate instance settings/configs/users from CLI (#4035)

0f7f7c3

* feat: rehydrate instance settings/configs/users from CLI * fix: nits * feat: encryption key, saved instances, include all workspaces * preshot client version * Update deps.ts

fix: improve generate flow locks

304b90f

Update ee-repo-ref.txt (#4080)

3a57b20

chore(main): release 1.364.0 (#4081)

8dda0df

* chore(main): release 1.364.0 * Apply automatic changes --------- Co-authored-by: rubenfiszel <[email protected]>

fix: fix cli build

1deccc4

chore(main): release 1.364.1 (#4082)

9397800

* chore(main): release 1.364.1 * Apply automatic changes --------- Co-authored-by: rubenfiszel <[email protected]>

fix(frontend): Handle three significant digits for jobs that ran in l…

2859d78

…ess than 1 min (#4084)

chore(main): release 1.364.2 (#4085)

21c44c9

* chore(main): release 1.364.2 * Apply automatic changes --------- Co-authored-by: rubenfiszel <[email protected]>

add more logs, change a fetch_one to opt and add back show memory eve…

ae178cd

…ry (#4087) * add more logs, change a fetch_one to opt and add back show memory every * Update ee repo ref

fix: fix erronous not connected error message

9a5dc97

nit inputs not loaded on flow

525e363

nit scroll

929c2ce

fix: fix missing workspaceId on display result of apps

bfbbeab

nit reload

36277a9

chore(main): release 1.364.3 (#4090)

1ee85fa

* chore(main): release 1.364.3 * Apply automatic changes --------- Co-authored-by: rubenfiszel <[email protected]>

chore: publish oneOf parser improvement (#4091)

030b616

* chore: publish oneOf parser improvement * fix: indent

fix(frontend): improve search modal (#4088)

cdc7190

* feat(frontend): wip * feat(frontend): wip * feat(frontend): wip * feat(frontend): improve search modal style * feat(frontend): fix content search height * feat(frontend): fix overflow * feat(frontend): revert unrelated changes

fix(frontend): fix use inputs flow preview (#4094)

7aa2189

* fix(frontend): Fix json editor wip * fix(frontend): Fix 'Use input' in the test flow drawer

fix(frontend): fix flow graph when anode has multiple steps to the fl…

fc749c6

…ow inputs (#4097)

fix(frontend): Display 'parallel'and 'skip failure' even when a summa…

319454e

…ry is set (#4099)

rubenfiszel force-pushed the main branch 3 times, most recently from 413dad5 to ad69876 Compare August 14, 2024 12:46

rubenfiszel force-pushed the main branch 3 times, most recently from 9a08368 to 779a788 Compare September 10, 2024 18:31

rubenfiszel force-pushed the main branch 7 times, most recently from e80f43d to 9c506a8 Compare September 21, 2024 20:54

rubenfiszel force-pushed the main branch 3 times, most recently from ec6b974 to 8e0eb3d Compare September 26, 2024 12:31

rubenfiszel force-pushed the main branch 7 times, most recently from c858c24 to 3cd30d2 Compare October 19, 2024 10:30

rubenfiszel force-pushed the main branch 4 times, most recently from 8756adb to 41acd56 Compare November 2, 2024 17:41

rubenfiszel requested a review from fatonramadani as a code owner November 2, 2024 17:41

rubenfiszel closed this Nov 2, 2024

github-actions bot locked and limited conversation to collaborators Nov 2, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Security upgrade python from 3.11.8-slim-bookworm to 3.12.4-slim-bookworm #4224

[Snyk] Security upgrade python from 3.11.8-slim-bookworm to 3.12.4-slim-bookworm #4224

rubenfiszel commented Aug 10, 2024 •

edited by ellipsis-dev bot

Loading

[Snyk] Security upgrade python from 3.11.8-slim-bookworm to 3.12.4-slim-bookworm #4224

[Snyk] Security upgrade python from 3.11.8-slim-bookworm to 3.12.4-slim-bookworm #4224

Conversation

rubenfiszel commented Aug 10, 2024 • edited by ellipsis-dev bot Loading

Snyk has created this PR to fix 4 vulnerabilities in the dockerfile dependencies of this project.

Snyk changed the following file(s):

Vulnerabilities that will be fixed with an upgrade:

Summary:

rubenfiszel commented Aug 10, 2024 •

edited by ellipsis-dev bot

Loading