From 69f2974141f9b635b9283e14214701ef60d60189 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Thu, 27 Oct 2022 18:52:28 +0000 Subject: [PATCH 1/3] fix: Dockerfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-ALPINE316-EXPAT-3062883 --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index cbf7f71..7c77426 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM python:3-alpine +FROM python:3.12.0a1-alpine LABEL maintainer='' LABEL version='0.0.0-dev.0-build.0' From 733fbb634267083ad1fd87d78d0bb478416f2db1 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Tue, 20 Dec 2022 07:09:52 +0000 Subject: [PATCH 2/3] fix: Dockerfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-ALPINE316-KRB5-3136432 --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 7c77426..51a797d 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM python:3.12.0a1-alpine +FROM python:3.12.0a2-alpine LABEL maintainer='' LABEL version='0.0.0-dev.0-build.0' From 531fb97c6951ab3d435660663e3e4886f2ed17e2 Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Wed, 15 Feb 2023 03:55:05 +0000 Subject: [PATCH 3/3] fix: requirements.txt to reduce vulnerabilities The following vulnerabilities are fixed by pinning transitive dependencies: - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3172287 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3314966 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3315324 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3315328 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3315331 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3315452 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3315972 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3315975 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3316038 - https://snyk.io/vuln/SNYK-PYTHON-CRYPTOGRAPHY-3316211 --- requirements.txt | 1 + 1 file changed, 1 insertion(+) diff --git a/requirements.txt b/requirements.txt index ff0d359..9c9aec2 100644 --- a/requirements.txt +++ b/requirements.txt @@ -1,3 +1,4 @@ paramiko==2.10.4 tornado==5.1.1; python_version < '3.5' tornado==6.1.0; python_version >= '3.5' +cryptography>=39.0.1 # not directly required, pinned by Snyk to avoid a vulnerability