Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Base image of Dockerfile python:3.8.1-alpine3.11 contains vulnerable libraries #2251

Closed
5 tasks done
mirraxian opened this issue Jan 28, 2021 · 3 comments
Closed
5 tasks done
Labels
change request Issue requests a new feature or improvement resolved Issue is resolved, yet unreleased if open

Comments

@mirraxian
Copy link
Contributor

I've found a bug and checked that ...

  • ... the problem doesn't occur with the default MkDocs template
  • ... the problem is not in any of my customizations (CSS, JS, template)
  • ... the documentation does not mention anything about my problem
  • ... there are no open or closed issues that are related to my problem

Description

Docker image is currently based on python:3.8.1-alpine3.11 which contains outdated packages such as sqlite 3.32.1-r0 which suffers from CVE-2020-11656.

@mirraxian
Copy link
Contributor Author

Pull Request 2252 submitted with updated python base image.

mkdocs build and mkdocs gh-deploy validated:

/docs # mkdocs build
INFO    -  Cleaning site directory
INFO    -  Building documentation to directory: /docs/site
INFO    -  Documentation built in 9.34 seconds
/docs # mkdocs gh-deploy
INFO    -  Cleaning site directory
INFO    -  Building documentation to directory: /docs/site
INFO    -  Documentation built in 6.81 seconds
WARNING -  Version check skipped: No version specified in previous deployment.
INFO    -  Copying '/docs/site' to 'gh-pages' branch and pushing to GitHub.
INFO    -  Your documentation should shortly be available at: https://BenHimsel.github.io/mkdocs-material/

@squidfunk squidfunk added change request Issue requests a new feature or improvement resolved Issue is resolved, yet unreleased if open labels Jan 29, 2021
@squidfunk
Copy link
Owner

Fixed in #2252

@squidfunk
Copy link
Owner

Released as 6.2.7.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment