Skip to content

Conversation

@jupyterhub-bot
Copy link
Collaborator

@jupyterhub-bot jupyterhub-bot commented Apr 7, 2025

A rebuild of quay.io/jupyterhub/k8s-singleuser-sample has been found to influence the detected vulnerabilities! This PR will trigger a rebuild because it has updated a comment in the Dockerfile.

About

This scan for known vulnerabilities has been made by aquasecurity/trivy. Trivy was configured to filter the vulnerabilities with the following settings:

  • ignore-unfixed: true

Before

Before trying to rebuild the image, the following vulnerabilities was detected in quay.io/jupyterhub/k8s-singleuser-sample:4.1.1-0.dev.git.6988.hc5e9d168.

Target Vuln. ID Package Name Installed v. Fixed v.
debian CVE-2024-56406 libperl5.36 5.36.0-7+deb12u1 5.36.0-7+deb12u2
debian CVE-2024-56406 perl 5.36.0-7+deb12u1 5.36.0-7+deb12u2
debian CVE-2024-56406 perl-base 5.36.0-7+deb12u1 5.36.0-7+deb12u2
debian CVE-2024-56406 perl-modules-5.36 5.36.0-7+deb12u1 5.36.0-7+deb12u2

After

Target Vuln. ID Package Name Installed v. Fixed v.

@jupyterhub-bot jupyterhub-bot added the image:rebuild-to-patch-vuln Image rebuild to patch a known external vulnerability label Apr 7, 2025
@jupyterhub-bot jupyterhub-bot force-pushed the vuln-scan-singleuser-sample branch from 0ed7272 to 2bceff4 Compare April 14, 2025 05:07
@minrk minrk merged commit c63ba56 into main Apr 14, 2025
14 checks passed
@minrk minrk deleted the vuln-scan-singleuser-sample branch April 14, 2025 13:40
consideRatio pushed a commit to jupyterhub/helm-chart that referenced this pull request Apr 14, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

image:rebuild-to-patch-vuln Image rebuild to patch a known external vulnerability

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants