Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fix v1.1.3: Fix vulnerabilities and update backup-tools image #20

Merged
merged 19 commits into from
Aug 14, 2024
Merged

Fix v1.1.3: Fix vulnerabilities and update backup-tools image #20

merged 19 commits into from
Aug 14, 2024

Conversation

obervinov
Copy link
Owner

@obervinov obervinov commented Aug 9, 2024 •
edited by github-actions bot
Loading

v1.1.3 - 2024-08-14

What's Changed

Full Changelog: v1.1.2...v1.1.3 by @obervinov in #20

🚀 Features

  • Add rclone and vault in backup-tools image
  • Bump base images version
  • Bump workflow version to 1.2.8
  • Small improvements in the Dockerfiles

🐛 Bug Fixes

@obervinov obervinov added bug Something isn't working enhancement New feature or request dependencies Pull requests that update a dependency file labels Aug 9, 2024
@obervinov obervinov added this to the v1.1.3 milestone Aug 9, 2024
@obervinov obervinov self-assigned this Aug 9, 2024
This was linked to issues Aug 9, 2024
Fix code scanning alert - golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses #10
Closed
Fix code scanning alert - golang: html/template: improper handling of JavaScript whitespace #11
Closed
Fix code scanning alert - zlib: integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_6 #12
Closed
Fix code scanning alert - OpenEXR: Heap Overflow in Scanline Deep Data Parsing #13
Closed
Fix code scanning alert - expat: Integer overflow in storeRawNames() #19
Closed
Fix code scanning alert - zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header ... #18
Closed
Fix code scanning alert - busybox: stack overflow vulnerability in ash.c leads to arbitrary code execution #17
Closed
Fix code scanning alert - git: Recursive clones RCE #16
Closed
Fix code scanning alert - aom: heap-buffer-overflow on frame size change #15
Closed
Fix code scanning alert - libaom: Integer overflow in internal function img_alloc_helper #14
Closed
obervinov added 14 commits August 9, 2024 13:00
fixed security vulnerabilities
8307f83
modified: docker/backup-tools/Dockerfile
c4a97a1 
modified:   docker/glab/Dockerfile
modified: CHANGELOG.md
bdbeca0
fixed dockerfile
77a7754
fixed apk -U upgrade
2b4db05
modified: docker/glab/Dockerfile
7741198
modified: docker/glab/Dockerfile
544e192
modified: docker/backup-tools/Dockerfile
210ea71 
modified:   docker/caddy/Dockerfile
modified:   docker/caddy/README.md
modified:   docker/certbot/Dockerfile
modified:   docker/certbot/README.md
modified:   docker/debug/Dockerfile
modified:   docker/debug/README.md
modified:   docker/glab/Dockerfile
modified:   docker/glab/README.md
modified:   docker/gradle/Dockerfile
modified:   docker/gradle/README.md
modified:   docker/python/Dockerfile
modified:   docker/python/README.md
modified:   docker/vault/Dockerfile
modified:   docker/vault/README.md
bump workflow version to 1.2.7
e9c6464
bump workflow version to v1.2.7
357a341
modified: CHANGELOG.md
50238ec
modified: docker/glab/Dockerfile
19b20c7 
modified:   docker/gradle/Dockerfile
fixed certbot Dockerfile
ce5d97e
fixed ALPINE_VERSION
7a54e70
@obervinov obervinov marked this pull request as ready for review August 14, 2024 13:21
obervinov
obervinov commented Aug 14, 2024
View reviewed changes
Copy link
Owner Author

@obervinov obervinov left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

reviewed

@obervinov obervinov merged commit 196d42b into main Aug 14, 2024
4 checks passed
@obervinov obervinov deleted the fix/v1.1.3 branch August 14, 2024 13:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees

@obervinov obervinov

Labels
bug Something isn't working dependencies Pull requests that update a dependency file enhancement New feature or request
Projects
@obervinov's Tools and templates
Status: Done
Milestone
v1.1.3
Development

Successfully merging this pull request may close these issues.

Fix code scanning alert - libaom: Integer overflow in internal function img_alloc_helper Fix code scanning alert - OpenEXR: Heap Overflow in Scanline Deep Data Parsing Fix code scanning alert - zlib: integer overflow and resultant heap-based buffer overflow in zipOpenNewFileInZip4_6 Fix code scanning alert - golang: html/template: improper handling of JavaScript whitespace Fix code scanning alert - golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
Fix code scanning alert - aom: heap-buffer-overflow on frame size change Fix code scanning alert - git: Recursive clones RCE Fix code scanning alert - busybox: stack overflow vulnerability in ash.c leads to arbitrary code execution Fix code scanning alert - zlib: heap-based buffer over-read and overflow in inflate() in inflate.c via a large gzip header ... Fix code scanning alert - expat: Integer overflow in storeRawNames()
1 participant
@obervinov