You are viewing a plain text version of this content. The canonical link for it is here.
Posted to notifications@superset.apache.org by "nigzak (via GitHub)" <gi...@apache.org> on 2024/05/21 12:12:51 UTC
[I] missing redis-update in superset 4.0.1 => redis 4.6.0 [superset]
nigzak opened a new issue, #28621:
URL: https://github.com/apache/superset/issues/28621
### Bug description
redis was not updated in superset 4.0.1 as it was merged into master
https://github.com/apache/superset/pull/27250
Because of this some scans show CVE finding which is fixed with 4.6.0
CVE-2024-34069
Please merge this also in a next 4.x update
### How to reproduce the bug
pull image from dockerhub
scan image
### Screenshots/recordings
_No response_
### Superset version
4.0.1
### Python version
3.9
### Node version
16
### Browser
Chrome
### Additional context
_No response_
### Checklist
- [X] I have searched Superset docs and Slack and didn't find a solution to my problem.
- [X] I have searched the GitHub issue tracker and didn't find a similar bug report.
- [X] I have checked Superset's logs for errors and if I found a relevant Python stacktrace, I included it here as text in the "additional context" section.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
Re: [I] missing redis-update in superset 4.0.1 => redis 4.6.0 [superset]
Posted by "nigzak (via GitHub)" <gi...@apache.org>.
nigzak closed issue #28621: missing redis-update in superset 4.0.1 => redis 4.6.0
URL: https://github.com/apache/superset/issues/28621
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
Re: [I] missing redis-update in superset 4.0.1 => redis 4.6.0 [superset]
Posted by "dosubot[bot] (via GitHub)" <gi...@apache.org>.
dosubot[bot] commented on issue #28621:
URL: https://github.com/apache/superset/issues/28621#issuecomment-2122497946
<!-- Greeting -->
Hey @nigzak! Good to see you again! Thanks for bringing this up. I'm taking a look at your issue and will get back to you shortly.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org
Re: [I] missing redis-update in superset 4.0.1 => redis 4.6.0 [superset]
Posted by "nigzak (via GitHub)" <gi...@apache.org>.
nigzak commented on issue #28621:
URL: https://github.com/apache/superset/issues/28621#issuecomment-2127989155
close as it seems it is not wanted to highlight well known bugs/cve's in images which are shown in public repos/docker scout
FYI @michael-s-molina this is the same behaviour as the other ones you closed - so I closed this also.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org