[Snyk] Security upgrade python from 3.6-slim to 3.13.0b2-slim #8

VaniHaripriya · 2024-07-02T23:07:40Z

This PR was automatically created by Snyk using the credentials of a real user.

![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123)

Snyk has created this PR to fix 4 vulnerabilities in the dockerfile dependencies of this project.

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Snyk changed the following file(s):

components/ibm-components/watson/store/Dockerfile

We recommend upgrading to python:3.13.0b2-slim, as this image has only 43 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Out-of-bounds Write SNYK-DEBIAN11-GLIBC-5927133	829
	Out-of-bounds Write SNYK-DEBIAN11-GLIBC-5927133	829
	Use After Free SNYK-DEBIAN11-GLIBC-1296898	714
	Buffer Overflow SNYK-DEBIAN11-GLIBC-2340908	714
	OS Command Injection SNYK-DEBIAN11-OPENSSL-2807596	714

Important

Check the changes in this PR to ensure they won't cause issues with your project.
Max score is 1000. Note that the real score may have changed since the PR was raised.
This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Use After Free
🦉 OS Command Injection

Signed-off-by: Achyut Madhusudan <[email protected]>

Fix OWNERS to replicate dsp-tekton OWNERS file

Signed-off-by: Humair Khan <[email protected]>

UPSTREAM: <carry>: add ns scoped s3 support.

Signed-off-by: Humair Khan <[email protected]>

UPSTREAM: <carry>: add mlmd grpc dockerfile

Signed-off-by: Humair Khan <[email protected]>

transfer actions from dsp tekton.

Signed-off-by: Humair Khan <[email protected]>

UPSTREAM: <carry>: add actions from dsp tekton repo.

Signed-off-by: Humair Khan <[email protected]>

UPSTREAM: <carry>: remove unused images for v2.

Signed-off-by: Humair Khan <[email protected]>

UPSTREAM: <carry>: add ability to filter by pipeline id/ver

the model name for epxeriment is ExperimentUUID, not ExperimentID Signed-off-by: Humair Khan <[email protected]>

UPSTREAM: <carry>: correct typo in experiment model

Signed-off-by: Humair Khan <[email protected]>

update packages

Signed-off-by: Humair Khan <[email protected]>

UPSTREAM: <carry>: update packages.

Signed-off-by: Humair Khan <[email protected]>

UPSTREAM: <carry>: remove direct k8s pkg import.

Signed-off-by: Humair Khan <[email protected]>

UPSTREAM: <carry>: update outdate package

namely pipeline name, id, and pipeline version id filters for jobs & runs Signed-off-by: Humair Khan <[email protected]>

Signed-off-by: Humair Khan <[email protected]>

UPSTREAM: <carry>: feat: expose more filters for runs/jobs

…cations Launcher writes input artifacts to root paths /gcs, /minio, and /s3. These paths are not accessible by non-root users by default, which is problematic in locked-down Kubernetes installations and/or OpenShift. /gcs is currently a contract for KFP v2 python component wrappers, so the path cannot be changed. Mount an EmptyDir scratch volume to these paths to work around this. Additionally, /.local and /.cache are written to by pip, so add EmptyDir mounts for those too. Fixes: https://issues.redhat.com/browse/RHOAIENG-1889 Ref: kubeflow#5673 Ref: kubeflow#7345

UPSTREAM: <carry>: feat: mount EmptyDir volumes for launcher write locations

…flow#9678 (kubeflow#10459) Signed-off-by: hbelmiro <[email protected]> (cherry picked from commit 1ae0a82)

chore: Add Commit Checker github action

Signed-off-by: Ricardo M. Oliveira <[email protected]>

Fix Commit Checker workflow

Signed-off-by: Humair Khan <[email protected]>

UPSTREAM: <carry>: move commit checker to separate wf

Signed-off-by: Humair Khan <[email protected]>

UPSTREAM: <carry>: fix commit-checker gh workflow syntax

Change Commit Checker to get the PR last commit

Signed-off-by: Ricardo M. Oliveira <[email protected]>

Fix Commit Checker PR comment formatting

…o avoid return an error code Signed-off-by: Ricardo M. Oliveira <[email protected]>

UPSTREAM: <carry>: Add a conditional in the commit checker workflow to avoid return an error code

Signed-off-by: Achyut Madhusudan <[email protected]>

UPSTREAM:<carry>:chore:RHOAIENG-7423 - Updated ubi8 image and go-toolset version

Signed-off-by: Ricardo M. Oliveira <[email protected]>

Final fix for Commit Checker GH Action

UPSTREAM: <carry>: Fix for default Pipelineroot failures

Signed-off-by: Humair Khan <[email protected]>

UPSTREAM: <carry>: add last_run_creation

UPSTREAM: <carry>: Upgrade DSP api/go.mod package versions

UPSTREAM: <carry>: Upgrade DSP go.mod package versions

…ions

UPSTREAM: <carry>: Upgrade go version to 1.21 and go.mod package versions

…erabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-DEBIAN11-GLIBC-5927133 - https://snyk.io/vuln/SNYK-DEBIAN11-GLIBC-5927133 - https://snyk.io/vuln/SNYK-DEBIAN11-GLIBC-1296898 - https://snyk.io/vuln/SNYK-DEBIAN11-GLIBC-2340908 - https://snyk.io/vuln/SNYK-DEBIAN11-OPENSSL-2807596

Achyut Madhusudan and others added 30 commits January 12, 2024 23:29

Updated OWNERS to replicate dsp-tekton OWNERS file.

e516ed8

Signed-off-by: Achyut Madhusudan <[email protected]>

Merge pull request #2 from amadhusu/am/update_owners

888eacc

Fix OWNERS to replicate dsp-tekton OWNERS file

UPSTREAM: <carry>: add ns scoped s3 support.

58ecf2d

Signed-off-by: Humair Khan <[email protected]>

Merge pull request #4 from HumairAK/s3_support

4e9b4e6

UPSTREAM: <carry>: add ns scoped s3 support.

UPSTREAM: <carry>: add mlmd grpc dockerfile

e06e729

Signed-off-by: Humair Khan <[email protected]>

Merge pull request #5 from HumairAK/envoy_image

c49ae1f

UPSTREAM: <carry>: add mlmd grpc dockerfile

UPSTREAM: <carry>: transfer actions from dsp tekton.

3a16bf5

Signed-off-by: Humair Khan <[email protected]>

Merge pull request #6 from HumairAK/transfer_actions

b88e873

transfer actions from dsp tekton.

UPSTREAM: <carry>: add actions from dsp tekton repo.

73af738

Signed-off-by: Humair Khan <[email protected]>

Merge pull request #7 from HumairAK/xfer_actions

68c49b0

UPSTREAM: <carry>: add actions from dsp tekton repo.

UPSTREAM: <carry>: remove unused images for v2.

8a908c4

Signed-off-by: Humair Khan <[email protected]>

Merge pull request #8 from HumairAK/remove_unused

d2a3583

UPSTREAM: <carry>: remove unused images for v2.

UPSTREAM: <carry>: add ability to filter by pipeline id/ver

db5b90c

Signed-off-by: Humair Khan <[email protected]>

Merge pull request #9 from HumairAK/support_pipeline_version_fetch

d76c6b7

UPSTREAM: <carry>: add ability to filter by pipeline id/ver

UPSTREAM: <carry>: correct typo in experiment model

a11816b

the model name for epxeriment is ExperimentUUID, not ExperimentID Signed-off-by: Humair Khan <[email protected]>

Merge pull request #10 from HumairAK/model_name

763dd96

UPSTREAM: <carry>: correct typo in experiment model

UPSTREAM: <carry>: update packages

682c89e

Signed-off-by: Humair Khan <[email protected]>

Merge pull request #11 from HumairAK/pkg_updates

03a43a5

update packages

UPSTREAM: <carry>: update packages.

0dfefbf

Signed-off-by: Humair Khan <[email protected]>

Merge pull request #12 from HumairAK/update_packages_2

8bf2d94

UPSTREAM: <carry>: update packages.

UPSTREAM: <carry>: remove direct k8s pkg import.

bdf37e3

Signed-off-by: Humair Khan <[email protected]>

Merge pull request #13 from HumairAK/update_packages_3

f3e082e

UPSTREAM: <carry>: remove direct k8s pkg import.

UPSTREAM: <carry>: update outdate package

052a632

Signed-off-by: Humair Khan <[email protected]>

Merge pull request #14 from HumairAK/update_packages_4

410a82d

UPSTREAM: <carry>: update outdate package

UPSTREAM: <carry>: feat: expose more filters for runs/jobs

a95e0a2

namely pipeline name, id, and pipeline version id filters for jobs & runs Signed-off-by: Humair Khan <[email protected]>

UPSTREAM: <carry>: feat: expose experiment id filter for jobs

e3aad5b

Signed-off-by: Humair Khan <[email protected]>

Merge pull request #16 from HumairAK/ver_id

d48d383

UPSTREAM: <carry>: feat: expose more filters for runs/jobs

Merge pull request #19 from gregsheremeta/add-mounts-for-writeable-paths

57830bf

UPSTREAM: <carry>: feat: mount EmptyDir volumes for launcher write locations

fix(backend): fixes "cannot save parameter" error message. Fixes kube…

90a92f9

…flow#9678 (kubeflow#10459) Signed-off-by: hbelmiro <[email protected]> (cherry picked from commit 1ae0a82)

HumairAK and others added 28 commits May 27, 2024 15:05

Merge pull request #38 from rimolive/rmartine

3c5170b

chore: Add Commit Checker github action

UPSTREAM: <carry>: Fix Commit Checker workflow to checkout the code

d09b624

Signed-off-by: Ricardo M. Oliveira <[email protected]>

Merge pull request #39 from rimolive/rmartine

bdd4217

Fix Commit Checker workflow

UPSTREAM: <carry>: move commit checker to separate wf

15464f6

Signed-off-by: Humair Khan <[email protected]>

Merge pull request #41 from HumairAK/fix_cc

2bc028c

UPSTREAM: <carry>: move commit checker to separate wf

UPSTREAM: <carry>: fix commit-checker gh workflow syntax

abb28bd

Signed-off-by: Humair Khan <[email protected]>

Merge pull request #45 from HumairAK/fix_commit_checker

0115b8e

UPSTREAM: <carry>: fix commit-checker gh workflow syntax

Change Commit Checker to get the PR last commit

47fb475

Merge pull request #47 from rimolive/rmartine-commit-checker

7127a61

Change Commit Checker to get the PR last commit

UPSTREAM:<carry>:Fix Commit Checker PR comment formatting

efb845e

Signed-off-by: Ricardo M. Oliveira <[email protected]>

Merge pull request #48 from rimolive/rmartine-commit-checker

542e1d4

Fix Commit Checker PR comment formatting

UPSTREAM: <carry>: Add a conditional in the commit checker workflow t…

0b53e53

…o avoid return an error code Signed-off-by: Ricardo M. Oliveira <[email protected]>

Merge pull request #49 from rimolive/rmartine-commit-checker

25f33aa

UPSTREAM: <carry>: Add a conditional in the commit checker workflow to avoid return an error code

Updated ubi8 image and go-toolset version

ea12783

Signed-off-by: Achyut Madhusudan <[email protected]>

Merge pull request #44 from amadhusu/RHOAIENG-7423-1.18

effca01

UPSTREAM:<carry>:chore:RHOAIENG-7423 - Updated ubi8 image and go-toolset version

UPSTREAM: <carry>: Final fix for Commit Checker GH Action

dcbeed8

Signed-off-by: Ricardo M. Oliveira <[email protected]>

Merge pull request #50 from rimolive/rmartine-commit-checker

6623b7c

Final fix for Commit Checker GH Action

UPSTREAM: <carry>: Fix for default Pipelineroot failures

624df09

Merge pull request #51 from VaniHaripriya/RHOAIENG-7209

f3fbc2c

UPSTREAM: <carry>: Fix for default Pipelineroot failures

UPSTREAM: <carry>: add last_run_creation

bf77909

Signed-off-by: Humair Khan <[email protected]>

Merge pull request #52 from HumairAK/RHOAIENG-7692

2aacfe2

UPSTREAM: <carry>: add last_run_creation

UPSTREAM: <carry>: Upgrade DSP api/go.mod package versions

a54c07f

Merge pull request #54 from DharmitD/snyk-cve-api

50c0275

UPSTREAM: <carry>: Upgrade DSP api/go.mod package versions

UPSTREAM: <carry>: Upgrade DSP go.mod package versions

aeb18d2

Merge pull request #55 from DharmitD/DSP-snyk-HL

ea68150

UPSTREAM: <carry>: Upgrade DSP go.mod package versions

UPSTREAM: <carry>: Upgrade go version to 1.21 and go.mod package vers…

f46e510

…ions

Merge pull request #56 from DharmitD/go-version-cve

dadfb38

UPSTREAM: <carry>: Upgrade go version to 1.21 and go.mod package versions

VaniHaripriya force-pushed the master branch from 2d860af to a8fbbd2 Compare September 11, 2024 21:48

VaniHaripriya force-pushed the master branch from a8fbbd2 to b5ffb86 Compare September 23, 2024 23:18

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[Snyk] Security upgrade python from 3.6-slim to 3.13.0b2-slim #8

[Snyk] Security upgrade python from 3.6-slim to 3.13.0b2-slim #8

VaniHaripriya commented Jul 2, 2024

[Snyk] Security upgrade python from 3.6-slim to 3.13.0b2-slim #8

Are you sure you want to change the base?

[Snyk] Security upgrade python from 3.6-slim to 3.13.0b2-slim #8

Conversation

VaniHaripriya commented Jul 2, 2024

Snyk has created this PR to fix 4 vulnerabilities in the dockerfile dependencies of this project.

Snyk changed the following file(s):

Vulnerabilities that will be fixed with an upgrade: