Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Snyk] Security upgrade mysql from 8.1 to 8.4.1 #3374

Merged
merged 2 commits into from
Sep 15, 2024

Conversation

yurake
Copy link
Owner

@yurake yurake commented Jul 4, 2024

This PR was automatically created by Snyk using the credentials of a real user.


![snyk-top-banner](https://github.com/andygongea/OWASP-Benchmark/assets/818805/c518c423-16fe-447e-b67f-ad5a49b5d123)

Snyk has created this PR to fix 5 vulnerabilities in the dockerfile dependencies of this project.

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Snyk changed the following file(s):

  • kubernetes/mysql/Dockerfile

We recommend upgrading to mysql:8.4.1, as this image has only 44 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Vulnerabilities that will be fixed with an upgrade:

Issue Score
high severity Out-of-bounds Write
SNYK-ORACLE8-GLIBC-5935529
  829  
high severity Out-of-bounds Write
SNYK-ORACLE8-GLIBCCOMMON-5935226
  829  
high severity Out-of-bounds Write
SNYK-ORACLE8-GLIBCMINIMALLANGPACK-5935235
  829  
medium severity Improper Validation of Integrity Check Value
SNYK-ORACLE8-LIBSSH-6226959
  621  
medium severity Improper Validation of Integrity Check Value
SNYK-ORACLE8-LIBSSHCONFIG-6227084
  621  

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

@github-actions github-actions bot added kubernetes someone for kubernetes docker Pull requests that update Docker code labels Jul 4, 2024
Copy link

sonarqubecloud bot commented Jul 4, 2024

Copy link

codeclimate bot commented Sep 15, 2024

Code Climate has analyzed commit 15749e3 and detected 0 issues on this pull request.

View more on Code Climate.

Copy link

@yurake yurake merged commit 982052e into master Sep 15, 2024
64 checks passed
@yurake yurake deleted the snyk-fix-813ad5a3d74a41af98a5bae57f4266a1 branch September 15, 2024 05:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
docker Pull requests that update Docker code kubernetes someone for kubernetes size/XS
Projects
Status: Done
Development

Successfully merging this pull request may close these issues.

2 participants