-
Notifications
You must be signed in to change notification settings - Fork 245
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
py3-dill/0.3.9 package update #29647
Conversation
octo-sts
bot
commented
Sep 29, 2024
Signed-off-by: wolfi-bot <[email protected]>
Package py3.11-dill: Click to expand/collapsePackage py3.11-dill: Package py3.13-dill: Click to expand/collapsePackage py3.13-dill: Package py3.10-dill-bin: Click to expand/collapsePackage py3.10-dill-bin: Package py3.11-dill-bin: Click to expand/collapsePackage py3.11-dill-bin: Package py3.12-dill-bin: Click to expand/collapsePackage py3.12-dill-bin: Package py3.10-dill: Click to expand/collapsePackage py3.10-dill: Package py3.12-dill: Click to expand/collapsePackage py3.12-dill: Package py3.13-dill-bin: Click to expand/collapsePackage py3.13-dill-bin: Package py3-supported-dill: Click to expand/collapsePackage py3-supported-dill: Package py3-dill: Click to expand/collapsePackage py3-dill: bincapz found differences: Click to expand/collapseDeleted: py3.12-dill/usr/lib/python3.12/site-packages/dill-0.3.8.dist-info/direct_url.json [✅ LOW]
Deleted: py3.13-dill/usr/lib/python3.13/site-packages/dill-0.3.8.dist-info/direct_url.json [✅ LOW]
Deleted: py3.10-dill/usr/lib/python3.10/site-packages/dill-0.3.8.dist-info/direct_url.json [✅ LOW]
Deleted: py3.12-dill/var/lib/db/sbom/py3.12-dill-0.3.8-r2.spdx.json [
|
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-MEDIUM | net/download | download files | downloadLocation |
-LOW | ref/site/url | contains embedded HTTPS URLs | https://spdx.org/spdxdocs/chainguard/melange/6b0a3a1fba3bf687ec8950375ca1 |
Deleted: py3.11-dill/usr/lib/python3.11/site-packages/dill-0.3.8.dist-info/direct_url.json [✅ LOW]
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-LOW | ref/path/file/url | file url | file:///home |
-LOW | ref/path/hidden | possible hidden file path | /home/build/.wheels |
Deleted: py3-dill/var/lib/db/sbom/py3-dill-0.3.8-r2.spdx.json [⚠️ MEDIUM]
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-MEDIUM | net/download | download files | downloadLocation |
-LOW | ref/site/url | contains embedded HTTPS URLs | https://spdx.org/spdxdocs/chainguard/melange/9745995e01709742cde04446a1e6 |
Deleted: py3.12-dill-bin/var/lib/db/sbom/py3.12-dill-bin-0.3.8-r2.spdx.json [⚠️ MEDIUM]
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-MEDIUM | net/download | download files | downloadLocation |
-LOW | ref/site/url | contains embedded HTTPS URLs | https://spdx.org/spdxdocs/chainguard/melange/a51f9a60bb785725d6933548f261 |
Deleted: py3.11-dill/var/lib/db/sbom/py3.11-dill-0.3.8-r2.spdx.json [⚠️ MEDIUM]
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-MEDIUM | net/download | download files | downloadLocation |
-LOW | ref/site/url | contains embedded HTTPS URLs | https://spdx.org/spdxdocs/chainguard/melange/f7547c68de75ef0a20f8dcac8c5d |
Deleted: py3.13-dill-bin/var/lib/db/sbom/py3.13-dill-bin-0.3.8-r2.spdx.json [⚠️ MEDIUM]
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-MEDIUM | net/download | download files | downloadLocation |
-LOW | ref/site/url | contains embedded HTTPS URLs | https://spdx.org/spdxdocs/chainguard/melange/1aaf3d909341e002a5225d2a9f22 |
Deleted: py3.13-dill/var/lib/db/sbom/py3.13-dill-0.3.8-r2.spdx.json [⚠️ MEDIUM]
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-MEDIUM | net/download | download files | downloadLocation |
-LOW | ref/site/url | contains embedded HTTPS URLs | https://spdx.org/spdxdocs/chainguard/melange/753856355fdbc44bdf97efb4aa1c |
Deleted: py3-supported-dill/var/lib/db/sbom/py3-supported-dill-0.3.8-r2.spdx.json [⚠️ MEDIUM]
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-MEDIUM | net/download | download files | downloadLocation |
-LOW | ref/site/url | contains embedded HTTPS URLs | https://spdx.org/spdxdocs/chainguard/melange/f64d3e9281ee1e1ac252602a2fe4 |
Deleted: py3.10-dill-bin/var/lib/db/sbom/py3.10-dill-bin-0.3.8-r2.spdx.json [⚠️ MEDIUM]
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-MEDIUM | net/download | download files | downloadLocation |
-LOW | ref/site/url | contains embedded HTTPS URLs | https://spdx.org/spdxdocs/chainguard/melange/c26b4800333cb86f5b7e840c41d5 |
Deleted: py3.11-dill-bin/var/lib/db/sbom/py3.11-dill-bin-0.3.8-r2.spdx.json [⚠️ MEDIUM]
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
-MEDIUM | net/download | download files | downloadLocation |
-LOW | ref/site/url | contains embedded HTTPS URLs | https://spdx.org/spdxdocs/chainguard/melange/ac01e8068347c5413d92cdfea36b |
Added: py3.11-dill/usr/lib/python3.11/site-packages/dill/tests/test_sources.py [⚠️ MEDIUM]
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+MEDIUM | techniques/code_eval | evaluate code dynamically using exec() | exec(ds |
+LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
+LOW | ref/site/url | contains embedded HTTPS URLs | python/cpython#118888 https://github.com/uqfoundation/dill/blob/master/LICENSE |
Added: py3.12-dill-bin/var/lib/db/sbom/py3.12-dill-bin-0.3.9-r0.spdx.json [⚠️ MEDIUM]
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+MEDIUM | net/download | download files | downloadLocation |
+LOW | ref/site/url | contains embedded HTTPS URLs | https://spdx.org/spdxdocs/chainguard/melange/662fa6841738380aac295e19b0d6 |
Added: py3.11-dill/usr/lib/python3.11/site-packages/dill/tests/test_threads.py [⚠️ MEDIUM]
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+MEDIUM | process/multithreaded | uses python threading | threading.Thread |
+MEDIUM | ref/daemon | Run as a background daemon | daemon |
+LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
+LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Added: py3-supported-dill/var/lib/db/sbom/py3-supported-dill-0.3.9-r0.spdx.json [⚠️ MEDIUM]
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+MEDIUM | net/download | download files | downloadLocation |
+LOW | ref/site/url | contains embedded HTTPS URLs | https://spdx.org/spdxdocs/chainguard/melange/da5ec8e5c5c1cccb0e9af5759f95 |
Added: py3.13-dill/usr/lib/python3.13/site-packages/dill-0.3.9.dist-info/direct_url.json [✅ LOW]
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+LOW | ref/path/file/url | file url | file:///home |
+LOW | ref/path/hidden | possible hidden file path | /home/build/.wheels |
Added: py3.11-dill/usr/lib/python3.11/site-packages/dill-0.3.9.dist-info/direct_url.json [✅ LOW]
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+LOW | ref/path/file/url | file url | file:///home |
+LOW | ref/path/hidden | possible hidden file path | /home/build/.wheels |
Added: py3.10-dill/usr/lib/python3.10/site-packages/dill-0.3.9.dist-info/direct_url.json [✅ LOW]
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+LOW | ref/path/file/url | file url | file:///home |
+LOW | ref/path/hidden | possible hidden file path | /home/build/.wheels |
Added: py3.13-dill-bin/var/lib/db/sbom/py3.13-dill-bin-0.3.9-r0.spdx.json [⚠️ MEDIUM]
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+MEDIUM | net/download | download files | downloadLocation |
+LOW | ref/site/url | contains embedded HTTPS URLs | https://spdx.org/spdxdocs/chainguard/melange/c1d1f0ee7b86c28e2500e6d6fcdb |
Added: py3.12-dill/usr/lib/python3.12/site-packages/dill/tests/test_threads.py [⚠️ MEDIUM]
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+MEDIUM | process/multithreaded | uses python threading | threading.Thread |
+MEDIUM | ref/daemon | Run as a background daemon | daemon |
+LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
+LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Added: py3.10-dill/usr/lib/python3.10/site-packages/dill/tests/test_sources.py [⚠️ MEDIUM]
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+MEDIUM | techniques/code_eval | evaluate code dynamically using exec() | exec(ds |
+LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
+LOW | ref/site/url | contains embedded HTTPS URLs | python/cpython#118888 https://github.com/uqfoundation/dill/blob/master/LICENSE |
Added: py3.12-dill/usr/lib/python3.12/site-packages/dill-0.3.9.dist-info/direct_url.json [✅ LOW]
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+LOW | ref/path/file/url | file url | file:///home |
+LOW | ref/path/hidden | possible hidden file path | /home/build/.wheels |
Added: py3.10-dill/usr/lib/python3.10/site-packages/dill/tests/test_threads.py [⚠️ MEDIUM]
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+MEDIUM | process/multithreaded | uses python threading | threading.Thread |
+MEDIUM | ref/daemon | Run as a background daemon | daemon |
+LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
+LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Added: py3.12-dill/usr/lib/python3.12/site-packages/dill/tests/test_sources.py [⚠️ MEDIUM]
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+MEDIUM | techniques/code_eval | evaluate code dynamically using exec() | exec(ds |
+LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
+LOW | ref/site/url | contains embedded HTTPS URLs | python/cpython#118888 https://github.com/uqfoundation/dill/blob/master/LICENSE |
Added: py3.11-dill-bin/var/lib/db/sbom/py3.11-dill-bin-0.3.9-r0.spdx.json [⚠️ MEDIUM]
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+MEDIUM | net/download | download files | downloadLocation |
+LOW | ref/site/url | contains embedded HTTPS URLs | https://spdx.org/spdxdocs/chainguard/melange/b1e2566b000e94247f06be9b44c1 |
Added: py3.13-dill/usr/lib/python3.13/site-packages/dill/tests/test_threads.py [⚠️ MEDIUM]
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+MEDIUM | process/multithreaded | uses python threading | threading.Thread |
+MEDIUM | ref/daemon | Run as a background daemon | daemon |
+LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
+LOW | ref/site/url | contains embedded HTTPS URLs | https://github.com/uqfoundation/dill/blob/master/LICENSE |
Added: py3.13-dill/usr/lib/python3.13/site-packages/dill/tests/test_sources.py [⚠️ MEDIUM]
RISK | KEY | DESCRIPTION | EVIDENCE |
---|---|---|---|
+MEDIUM | techniques/code_eval | evaluate code dynamically using exec() | exec(ds |
+LOW | ref/path/usr/bin | path reference within /usr/bin | /usr/bin/env |
+LOW | ref/site/url | contains embedded HTTPS URLs | python/cpython#118888 https://github.com/uqfoundation/dill/blob/master/LICENSE |