From 69f2974141f9b635b9283e14214701ef60d60189 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 27 Oct 2022 18:52:28 +0000 Subject: [PATCH 1/9] fix: Dockerfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-ALPINE316-EXPAT-3062883 --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index cbf7f71e..7c774269 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM python:3-alpine +FROM python:3.12.0a1-alpine LABEL maintainer='' LABEL version='0.0.0-dev.0-build.0' From 733fbb634267083ad1fd87d78d0bb478416f2db1 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 20 Dec 2022 07:09:52 +0000 Subject: [PATCH 2/9] fix: Dockerfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-ALPINE316-KRB5-3136432 --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 7c774269..51a797d8 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM python:3.12.0a1-alpine +FROM python:3.12.0a2-alpine LABEL maintainer='' LABEL version='0.0.0-dev.0-build.0' From 531fb97c6951ab3d435660663e3e4886f2ed17e2 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 15 Feb 2023 03:55:05 +0000 Subject: [PATCH 3/9] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3172287 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3314966 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3315324 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3315328 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3315331 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3315452 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3315972 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3315975 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3316038 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3316211 --- requirements.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/requirements.txt b/requirements.txt index ff0d3596..9c9aec2d 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,3 +1,4 @@ paramiko==2.10.4 tornado==5.1.1; python_version < '3.5' tornado==6.1.0; python_version >= '3.5' +cryptography>=39.0.1 # not directly required, pinned by Snyk to avoid a vulnerability From 7bcceef27feb44b254bc3b77652309bd403a511c Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 14 Mar 2023 23:09:24 +0000 Subject: [PATCH 4/9] fix: Dockerfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-ALPINE317-E2FSPROGS-3339842 - https://snyk.io/vuln/SNYK-ALPINE317-OPENSSL-3188632 - https://snyk.io/vuln/SNYK-ALPINE317-OPENSSL-3314647 - https://snyk.io/vuln/SNYK-ALPINE317-OPENSSL-3314650 - https://snyk.io/vuln/SNYK-ALPINE317-OPENSSL-3314650 --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 51a797d8..96bfafec 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM python:3.12.0a2-alpine +FROM python:3.12.0a6-alpine LABEL maintainer='' LABEL version='0.0.0-dev.0-build.0' From d8e5e509145879f49042bab0bc7013aa43e8d494 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Fri, 31 Mar 2023 00:50:04 +0000 Subject: [PATCH 5/9] fix: Dockerfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-ALPINE317-OPENSSL-3188632 - https://snyk.io/vuln/SNYK-ALPINE317-OPENSSL-3314647 - https://snyk.io/vuln/SNYK-ALPINE317-OPENSSL-3314650 - https://snyk.io/vuln/SNYK-ALPINE317-OPENSSL-3314651 - https://snyk.io/vuln/SNYK-ALPINE317-OPENSSL-3314657 --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 51a797d8..96bfafec 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM python:3.12.0a2-alpine +FROM python:3.12.0a6-alpine LABEL maintainer='' LABEL version='0.0.0-dev.0-build.0' From 8249eff1d1f220eec7a1a46be92142a8c6e3adf1 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 17 May 2023 03:23:42 +0000 Subject: [PATCH 6/9] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-TORNADO-5537286 From 31646757cda41b23b6e9f4603ef468818f86d3d8 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 15 Aug 2023 17:50:16 +0000 Subject: [PATCH 7/9] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-TORNADO-5840803 --- requirements.txt | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/requirements.txt b/requirements.txt index 9c9aec2d..f5a9e59a 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,4 +1,4 @@ paramiko==2.10.4 -tornado==5.1.1; python_version < '3.5' -tornado==6.1.0; python_version >= '3.5' +tornado==6.3.3; python_version < '3.5' +tornado==6.3.3; python_version >= '3.5' cryptography>=39.0.1 # not directly required, pinned by Snyk to avoid a vulnerability From 187b2bd8b5338ab26ff3583410578fb75fb50b70 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 20 Sep 2023 16:34:42 +0000 Subject: [PATCH 8/9] fix: Dockerfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-ALPINE317-NCURSES-5606599 - https://snyk.io/vuln/SNYK-ALPINE317-NCURSES-5606599 - https://snyk.io/vuln/SNYK-ALPINE317-OPENSSL-5438697 - https://snyk.io/vuln/SNYK-ALPINE317-OPENSSL-5788365 - https://snyk.io/vuln/SNYK-ALPINE317-OPENSSL-5821141 --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 96bfafec..48bf87c5 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM python:3.12.0a6-alpine +FROM python:3.12.0rc2-alpine LABEL maintainer='' LABEL version='0.0.0-dev.0-build.0' From ac1f643d17757656c172899838419a828dfacc75 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 9 Jan 2025 07:57:28 +0000 Subject: [PATCH 9/9] fix: Dockerfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-ALPINE318-EXPAT-7908292 - https://snyk.io/vuln/SNYK-ALPINE318-EXPAT-7908293 - https://snyk.io/vuln/SNYK-ALPINE318-KRB5-8366395 - https://snyk.io/vuln/SNYK-ALPINE318-KRB5-8366393 - https://snyk.io/vuln/SNYK-ALPINE318-OPENSSL-6032386 --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 48bf87c5..324d2e29 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM python:3.12.0rc2-alpine +FROM python:3.14.0a3-alpine LABEL maintainer='' LABEL version='0.0.0-dev.0-build.0'