windmill
windmill copied to clipboard
[Snyk] Security upgrade python from 3.11.8-slim-bookworm to 3.11.9-slim-bookworm
This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix 4 vulnerabilities in the dockerfile dependencies of this project.
Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.
Snyk changed the following file(s):
Dockerfile
We recommend upgrading to python:3.11.9-slim-bookworm, as this image has only 49 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.
Vulnerabilities that will be fixed with an upgrade:
| Issue | Score | |
|---|---|---|
| Allocation of Resources Without Limits or Throttling SNYK-DEBIAN12-SYSTEMD-6277507 |
614 | |
| Allocation of Resources Without Limits or Throttling SNYK-DEBIAN12-SYSTEMD-6277507 |
614 | |
| Improper Check for Unusual or Exceptional Conditions SNYK-DEBIAN12-OPENSSL-6048820 |
514 | |
| Out-of-bounds Write SNYK-DEBIAN12-OPENSSL-6148845 |
514 | |
| CVE-2024-0727 SNYK-DEBIAN12-OPENSSL-6190223 |
514 |
[!IMPORTANT]
- Check the changes in this PR to ensure they won't cause issues with your project.
- Max score is 1000. Note that the real score may have changed since the PR was raised.
- This PR was automatically created by Snyk using the credentials of a real user.
Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.
For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic
Learn how to fix vulnerabilities with free interactive lessons:
🦉 Allocation of Resources Without Limits or Throttling
| :rocket: | This description was created by Ellipsis for commit 34241a95761e8f5e924e76551d1742e89227895e |
|---|
Summary:
Update Dockerfile to use python:3.11.9-slim-bookworm to address security vulnerabilities.
Key points:
- Update
Dockerfileto usepython:3.11.9-slim-bookworminstead ofpython:3.11.8-slim-bookworm. - Addresses 4 security vulnerabilities related to
systemdandopensslin the previous image version. - No changes to application code, only the Docker base image.
Generated with :heart: by ellipsis.dev