Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

#847: Updated packages and ignored Kernel CVEs #386

Merged
merged 6 commits into from
Oct 25, 2023
Merged

#847: Updated packages and ignored Kernel CVEs #386

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
6 commits
Select commit Hold shift + click to select a range
ac83b64
Update locales package
tkilias Oct 24, 2023
8827e72
Update curl package
tkilias Oct 24, 2023
6f6a66c
Update libcurl4-openssl-dev package
tkilias Oct 24, 2023
f2d0efe
Pin pydobc in test-container to >=4.0.24 and <5.0.0, because exasol-p…
tkilias Oct 24, 2023
52bf892
Ignore CVE-2023-4244 in python-3.8-minimal, because this is a kernel cve
tkilias Oct 24, 2023
349110c
Fix update_apt_package_in_package_list.sh
tkilias Oct 25, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions flavors/python-3.8-minimal-EXASOL-6.2.0/flavor_base/build_deps/packages/apt_get_packages
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
coreutils|8.28-1ubuntu1
locales|2.27-3ubuntu1.6
locales|2.31-0ubuntu9.12
tar|1.29b-2ubuntu0.4
curl|7.68.0-1ubuntu2.19
curl|7.68.0-1ubuntu2.20
openjdk-11-jdk|11.0.19+7~us1-0ubuntu1~20.04.1
build-essential|12.4ubuntu1
libpcre3-dev|2:8.39-9ubuntu0.1
Expand Down
2 changes: 1 addition & 1 deletion ...rs/python-3.8-minimal-EXASOL-6.2.0/flavor_base/flavor_base_deps/packages/apt_get_packages
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
unzip|6.0-25ubuntu1.1
git|1:2.25.1-1ubuntu3.11
libcurl4-openssl-dev|7.68.0-1ubuntu2.19
libcurl4-openssl-dev|7.68.0-1ubuntu2.20
build-essential|12.8ubuntu1.1
2 changes: 1 addition & 1 deletion flavors/python-3.8-minimal-EXASOL-6.2.0/flavor_base/language_deps/packages/apt_get_packages
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
ca-certificates|20230311ubuntu0.20.04.1
python3.8-dev|3.8.10-0ubuntu1~20.04.8
python3-distutils|3.8.10-0ubuntu1~20.04
curl|7.68.0-1ubuntu2.19
curl|7.68.0-1ubuntu2.20

1 change: 1 addition & 0 deletions flavors/python-3.8-minimal-EXASOL-6.2.0/flavor_base/security_scan/.trivyignore
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,6 +18,7 @@ CVE-2023-3609
CVE-2023-4622
CVE-2023-4623
CVE-2023-4921
CVE-2023-4244
# CVE-2023-20569 does not have a fix and is a problem of host system (amd cpus)
CVE-2023-20569
#CVE-2022-23648 is a bug in containerd, not issue for containers
Expand Down
2 changes: 1 addition & 1 deletion flavors/python-3.8-minimal-EXASOL-6.2.0/flavor_base/udfclient_deps/packages/apt_get_packages
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
coreutils|8.30-3ubuntu2
locales|2.31-0ubuntu9.9
locales|2.31-0ubuntu9.12
libnss-db|2.2.3pre1-6build6
libzmq3-dev|4.3.2-2ubuntu1
libprotobuf-dev|3.6.1.3-2ubuntu5.2
Expand Down
4 changes: 2 additions & 2 deletions ...ors/template-Exasol-all-python-3.8-conda/flavor_base/conda_deps/packages/apt_get_packages
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
coreutils|8.30-3ubuntu2
locales|2.31-0ubuntu9.9
curl|7.68.0-1ubuntu2.19
locales|2.31-0ubuntu9.12
curl|7.68.0-1ubuntu2.20
ca-certificates|20230311ubuntu0.20.04.1
4 changes: 2 additions & 2 deletions ...Exasol-all-python-3.8-cuda-conda/flavor_base/nvidia_driver_deps/packages/apt_get_packages
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
coreutils|8.30-3ubuntu2
locales|2.31-0ubuntu9.9
curl|7.68.0-1ubuntu2.19
locales|2.31-0ubuntu9.12
curl|7.68.0-1ubuntu2.20
ca-certificates|20230311ubuntu0.20.04.1
10 changes: 6 additions & 4 deletions scripts/update_apt_package_in_package_list.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,18 +4,20 @@ set -o nounset
set -o pipefail

LIST_NEWEST_VERSION_OUTPUT=$1 # Package|Installed|Candidate
FLAVOR=$2
SEARCH_DIRECTORY=$2
REPLACE=$3

PACKAGE=$(echo "$LIST_NEWEST_VERSION_OUTPUT" | cut -f 1 -d "|")
CANDIDATE_VERSION=$(echo "$LIST_NEWEST_VERSION_OUTPUT" | cut -f 3 -d "|")
REPLACE=$3
CURRENT_VERSION=$(echo "$LIST_NEWEST_VERSION_OUTPUT" | cut -f 2 -d "|")

if [[ "$REPLACE" == "yes" ]]
then
SED_REPLACE_OPTION=("-i")
else
SED_REPLACE_OPTION=()
fi
grep -E -R "^$PACKAGE\|" "$FLAVOR" \
grep -E -R "^$PACKAGE\|$CURRENT_VERSION" "$SEARCH_DIRECTORY" \
| cut -f 1 -d ":" \
| xargs -I{} sed "${SED_REPLACE_OPTION=[@]}" -E "s/^($PACKAGE)\|.*$/$PACKAGE|$CANDIDATE_VERSION/g" "{}" \
| xargs -I{} sed "${SED_REPLACE_OPTION[@]}" -E "s/^($PACKAGE\|$CURRENT_VERSION).*$/$PACKAGE|$CANDIDATE_VERSION/g" "{}" \
| grep -E "^$PACKAGE\|"
2 changes: 1 addition & 1 deletion test_container/build/deps/requirements.txt
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
pyodbc>=4.0.27
pyodbc>=4.0.27, <5.0.0
pytz
lxml
docker
Expand Down
Loading