opentelemetry-examples icon indicating copy to clipboard operation
opentelemetry-examples copied to clipboard

[Snyk] Security upgrade alpine from latest to 3.18.3

Open mattcobb opened this issue 1 year ago • 1 comments

This PR was automatically created by Snyk using the credentials of a real user.


Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Changes included in this PR

  • go/opentracing/client/Dockerfile

We recommend upgrading to alpine:3.18.3, as this image has only 0 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Some of the most important vulnerabilities in your base image include:

Severity Issue Exploit Maturity
medium severity Improper Authentication
SNYK-ALPINE318-OPENSSL-5776808
No Known Exploit
medium severity Improper Authentication
SNYK-ALPINE318-OPENSSL-5776808
No Known Exploit
medium severity Inefficient Regular Expression Complexity
SNYK-ALPINE318-OPENSSL-5788370
No Known Exploit
medium severity Inefficient Regular Expression Complexity
SNYK-ALPINE318-OPENSSL-5788370
No Known Exploit
low severity CVE-2023-3817
SNYK-ALPINE318-OPENSSL-5821142
No Known Exploit

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information: 🧐 View latest project report

🛠 Adjust project settings


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Inefficient Regular Expression Complexity

mattcobb avatar Aug 08 '23 18:08 mattcobb

Have raised this for consideration by Python SDK maintainers and internal OpenTelemetry PM. Considering whether the right move is to continue maintenance of the replacement examples from legacy OpenTracing or to focus resources on urging updates and deprecate this entirely.

nslaughter avatar Oct 26 '23 18:10 nslaughter