Skip to content

Security update for docker images in Oct. 2025 #96

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 3 commits into from
Nov 5, 2025
Merged

Security update for docker images in Oct. 2025 #96

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
c16650d
remove svn since apt doesn't have latest svn package verion 1.14.5
Sep 19, 2025
281443d
add apk upgrade to update system components for alpine-based images
Oct 16, 2025
e122175
update cluster-local-storage docker file to fix svn security warnings
Oct 16, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions src/alert-manager/build/abnormal-detector.common.dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,9 @@
FROM python:3.12

RUN apt update && apt upgrade -y

RUN apt purge -y subversion && apt autoremove -y

RUN pip install --upgrade pip

COPY ./src/abnormal_detector .
Expand Down
2 changes: 2 additions & 0 deletions src/alert-manager/build/alert-handler.common.dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,8 @@ RUN npm install -g npm@latest

RUN apt update && apt upgrade -y

RUN apt purge -y subversion && apt autoremove -y

WORKDIR /usr/src/app

ENV NODE_ENV=production
Expand Down
2 changes: 2 additions & 0 deletions src/alert-manager/build/job-status-change-notification.common.dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,6 +9,8 @@ WORKDIR /usr/src/app

RUN apt update && apt upgrade -y

RUN apt purge -y subversion && apt autoremove -y

ENV NODE_ENV=production

COPY ./src/job-status-change-notification .
Expand Down
7 changes: 4 additions & 3 deletions src/alert-manager/src/alert-handler/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -35,7 +35,7 @@
},
"dependencies": {
"@kubernetes/client-node": "1.2.0",
"axios": "^1.9.0",
"axios": "^1.12.0",
"body-parser": "^2.2.0",
"cookie-parser": "^1.4.7",
"ejs": "^3.1.10",
Expand All @@ -44,12 +44,13 @@
"express-bearer-token": "^3.0.0",
"joi": "^17.13.3",
"module-alias": "^2.2.3",
"nodemailer": "^7.0.3",
"nodemailer": "^7.0.7",
"winston": "2",
"ws": "^8.18.2"
},
"resolutions": {
"tar-fs": "^3.0.9",
"nodemailer": "^7.0.7",
"tar-fs": "^3.1.1",
"@eslint/plugin-kit": "^0.3.3",
"form-data": "^4.0.4"
},
Expand Down
44 changes: 15 additions & 29 deletions src/alert-manager/src/alert-handler/yarn.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -850,14 +850,14 @@ __metadata:
languageName: node
linkType: hard

"axios@npm:^1.9.0":
version: 1.9.0
resolution: "axios@npm:1.9.0"
"axios@npm:^1.12.0":
version: 1.12.2
resolution: "axios@npm:1.12.2"
dependencies:
follow-redirects: "npm:^1.15.6"
form-data: "npm:^4.0.0"
form-data: "npm:^4.0.4"
proxy-from-env: "npm:^1.1.0"
checksum: 10c0/9371a56886c2e43e4ff5647b5c2c3c046ed0a3d13482ef1d0135b994a628c41fbad459796f101c655e62f0c161d03883454474d2e435b2e021b1924d9f24994c
checksum: 10c0/80b063e318cf05cd33a4d991cea0162f3573481946f9129efb7766f38fde4c061c34f41a93a9f9521f02b7c9565ccbc197c099b0186543ac84a24580017adfed
languageName: node
linkType: hard

Expand Down Expand Up @@ -3371,24 +3371,10 @@ __metadata:
languageName: node
linkType: hard

"nodemailer@npm:6.9.16":
version: 6.9.16
resolution: "nodemailer@npm:6.9.16"
checksum: 10c0/9fd73ab4ab5b81544c3c9820afbe386369aba442f997b2f58d171222a898a7aed580fc100bfe6eebc194f18ba6e169d67ee40ca64d32d69022d89e575cef97a4
languageName: node
linkType: hard

"nodemailer@npm:^6.9.13, nodemailer@npm:^6.9.14":
version: 6.10.1
resolution: "nodemailer@npm:6.10.1"
checksum: 10c0/e81fde258ea4f4e5646e9e3eebe89294d007939999d2d1a8c96c5488fa00bf659e46cf76fccb2697e9aa6ef9807a1ed47ff2aef6ad30b795e3849b6997066d16
languageName: node
linkType: hard

"nodemailer@npm:^7.0.3":
version: 7.0.3
resolution: "nodemailer@npm:7.0.3"
checksum: 10c0/835492262328471b94a080cea43ea20f4232e19a915400cd71c7f4f4ab93a7d361775154eebe30a8fc40379eecf11a0bbc73e6cf4bbee9dccb6dd1cf7a1dc792
"nodemailer@npm:^7.0.7":
version: 7.0.9
resolution: "nodemailer@npm:7.0.9"
checksum: 10c0/029af0c89d64a521aa9969196e44c13ef289c7f419264eed8d63682610999e06205b0fc264ab8ac65941dc3eefd3c435f23337a32880614cc199744c9be6209a
languageName: node
linkType: hard

Expand Down Expand Up @@ -3607,7 +3593,7 @@ __metadata:
resolution: "pai-alert-handler@workspace:."
dependencies:
"@kubernetes/client-node": "npm:1.2.0"
axios: "npm:^1.9.0"
axios: "npm:^1.12.0"
body-parser: "npm:^2.2.0"
cookie-parser: "npm:^1.4.7"
dotenv: "npm:^16.5.0"
Expand All @@ -3624,7 +3610,7 @@ __metadata:
express-bearer-token: "npm:^3.0.0"
joi: "npm:^17.13.3"
module-alias: "npm:^2.2.3"
nodemailer: "npm:^7.0.3"
nodemailer: "npm:^7.0.7"
prettier: "npm:~3.5.3"
winston: "npm:2"
ws: "npm:^8.18.2"
Expand Down Expand Up @@ -4514,9 +4500,9 @@ __metadata:
languageName: node
linkType: hard

"tar-fs@npm:^3.0.9":
version: 3.0.9
resolution: "tar-fs@npm:3.0.9"
"tar-fs@npm:^3.1.1":
version: 3.1.1
resolution: "tar-fs@npm:3.1.1"
dependencies:
bare-fs: "npm:^4.0.1"
bare-path: "npm:^3.0.0"
Expand All @@ -4527,7 +4513,7 @@ __metadata:
optional: true
bare-path:
optional: true
checksum: 10c0/e7c6c8b7d1bf342bab0e94e0a2d96dc73c18d0cc6b59ee7b57f919adb08f5cee7f417cb4baee8322789292dc51ae67028cfd5d73f3559c919723ec7d71aa8959
checksum: 10c0/0c677d711c4aa41f94e1a712aa647022ba1910ff84430739e5d9e95a615e3ea1b7112dc93164fc8ce30dc715befcf9cfdc64da27d4e7958d73c59bda06aa0d8e
languageName: node
linkType: hard

Expand Down
2 changes: 1 addition & 1 deletion src/alert-manager/src/job-status-change-notification/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@
"prettier": "~3.5.3"
},
"dependencies": {
"axios": "^1.9.0",
"axios": "^1.12.0",
"interval-promise": "^1.4.0",
"joi": "^17.13.3",
"module-alias": "^2.2.3",
Expand Down
55 changes: 27 additions & 28 deletions src/alert-manager/src/job-status-change-notification/yarn.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -50,6 +50,15 @@ __metadata:
languageName: node
linkType: hard

"@eslint/core@npm:^0.15.2":
version: 0.15.2
resolution: "@eslint/core@npm:0.15.2"
dependencies:
"@types/json-schema": "npm:^7.0.15"
checksum: 10c0/c17a6dc4f5a6006ecb60165cc38bcd21fefb4a10c7a2578a0cfe5813bbd442531a87ed741da5adab5eb678e8e693fda2e2b14555b035355537e32bcec367ea17
languageName: node
linkType: hard

"@eslint/eslintrc@npm:^3.3.1":
version: 3.3.1
resolution: "@eslint/eslintrc@npm:3.3.1"
Expand Down Expand Up @@ -81,13 +90,13 @@ __metadata:
languageName: node
linkType: hard

"@eslint/plugin-kit@npm:^0.2.8":
version: 0.2.8
resolution: "@eslint/plugin-kit@npm:0.2.8"
"@eslint/plugin-kit@npm:^0.3.3":
version: 0.3.5
resolution: "@eslint/plugin-kit@npm:0.3.5"
dependencies:
"@eslint/core": "npm:^0.13.0"
"@eslint/core": "npm:^0.15.2"
levn: "npm:^0.4.1"
checksum: 10c0/554847c8f2b6bfe0e634f317fc43d0b54771eea0015c4f844f75915fdb9e6170c830c004291bad57db949d61771732e459f36ed059f45cf750af223f77357c5c
checksum: 10c0/c178c1b58c574200c0fd125af3e4bc775daba7ce434ba6d1eeaf9bcb64b2e9fea75efabffb3ed3ab28858e55a016a5efa95f509994ee4341b341199ca630b89e
languageName: node
linkType: hard

Expand Down Expand Up @@ -419,14 +428,14 @@ __metadata:
languageName: node
linkType: hard

"axios@npm:^1.9.0":
version: 1.9.0
resolution: "axios@npm:1.9.0"
"axios@npm:^1.12.0":
version: 1.12.2
resolution: "axios@npm:1.12.2"
dependencies:
follow-redirects: "npm:^1.15.6"
form-data: "npm:^4.0.0"
form-data: "npm:^4.0.4"
proxy-from-env: "npm:^1.1.0"
checksum: 10c0/9371a56886c2e43e4ff5647b5c2c3c046ed0a3d13482ef1d0135b994a628c41fbad459796f101c655e62f0c161d03883454474d2e435b2e021b1924d9f24994c
checksum: 10c0/80b063e318cf05cd33a4d991cea0162f3573481946f9129efb7766f38fde4c061c34f41a93a9f9521f02b7c9565ccbc197c099b0186543ac84a24580017adfed
languageName: node
linkType: hard

Expand Down Expand Up @@ -1320,15 +1329,16 @@ __metadata:
languageName: node
linkType: hard

"form-data@npm:^4.0.0":
version: 4.0.2
resolution: "form-data@npm:4.0.2"
"form-data@npm:^4.0.4":
version: 4.0.4
resolution: "form-data@npm:4.0.4"
dependencies:
asynckit: "npm:^0.4.0"
combined-stream: "npm:^1.0.8"
es-set-tostringtag: "npm:^2.1.0"
hasown: "npm:^2.0.2"
mime-types: "npm:^2.1.12"
checksum: 10c0/e534b0cf025c831a0929bf4b9bbe1a9a6b03e273a8161f9947286b9b13bf8fb279c6944aae0070c4c311100c6d6dbb815cd955dc217728caf73fad8dc5b8ee9c
checksum: 10c0/373525a9a034b9d57073e55eab79e501a714ffac02e7a9b01be1c820780652b16e4101819785e1e18f8d98f0aee866cc654d660a435c378e16a72f2e7cac9695
languageName: node
linkType: hard

Expand Down Expand Up @@ -1838,7 +1848,7 @@ __metadata:
version: 0.0.0-use.local
resolution: "job-status-change-notification@workspace:."
dependencies:
axios: "npm:^1.9.0"
axios: "npm:^1.12.0"
eslint: "npm:^9.26.0"
eslint-config-prettier: "npm:~10.1.2"
eslint-plugin-import: "npm:^2.31.0"
Expand All @@ -1849,7 +1859,6 @@ __metadata:
interval-promise: "npm:^1.4.0"
joi: "npm:^17.13.3"
module-alias: "npm:^2.2.3"
npm-check-updates: "npm:^18.0.1"
openpaidbsdk: "file:./openpaidbsdk"
prettier: "npm:~3.5.3"
sequelize: "npm:^6.37.7"
Expand Down Expand Up @@ -2069,16 +2078,6 @@ __metadata:
languageName: node
linkType: hard

"npm-check-updates@npm:^18.0.1":
version: 18.0.1
resolution: "npm-check-updates@npm:18.0.1"
bin:
ncu: build/cli.js
npm-check-updates: build/cli.js
checksum: 10c0/0f4f8c26e8a51a413ee724fe76f0860bd360e0c096a52e928916ef6fe3ff0c2ea0f346ca8d291a43f46a269d05450e2a879fed8aa11871f73970d5f9dfdd162a
languageName: node
linkType: hard

"object-assign@npm:^4":
version: 4.1.1
resolution: "object-assign@npm:4.1.1"
Expand Down Expand Up @@ -2169,11 +2168,11 @@ __metadata:

"openpaidbsdk@file:./openpaidbsdk::locator=job-status-change-notification%40workspace%3A.":
version: 1.0.2
resolution: "openpaidbsdk@file:./openpaidbsdk#./openpaidbsdk::hash=8f34d7&locator=job-status-change-notification%40workspace%3A."
resolution: "openpaidbsdk@file:./openpaidbsdk#./openpaidbsdk::hash=2318c0&locator=job-status-change-notification%40workspace%3A."
dependencies:
pg: "npm:^8.15.6"
sequelize: "npm:6.37.7"
checksum: 10c0/6d4cf9f022c3e32c6ab3ad6fe8fcfa2672f8a5b01570623d3862b355ba70af628130a5bba35fdbe5c53b8e4670cad2f3222555dfb4d6039f662f649727078201
checksum: 10c0/37403f99e7805e802bf87b19a93033e444fc0b753c55ad569c080eeda9f0f6b3fdb16e008107c215737147cc9a4a32b4432ea25474f193ee752a31e8a3db34f7
languageName: node
linkType: hard

Expand Down
Empty file modified src/cluster-local-storage/build/build-pre.sh
100644 → 100755
View file
Open in desktop
Empty file.
2 changes: 2 additions & 0 deletions src/dashboard-data-backup/build/dashboard-data-backup.common.dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,6 +3,8 @@ FROM python:3.12
# Install cron
RUN apt-get update && apt-get upgrade -y && apt-get install -y cron && rm -rf /var/lib/apt/lists/*

RUN apt-get purge -y subversion && apt-get autoremove -y

# Set working directory
WORKDIR /app

Expand Down
2 changes: 2 additions & 0 deletions src/database-controller/build/database-controller.common.dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,6 +7,8 @@ RUN npm install -g npm@latest

RUN apt update && apt upgrade -y

RUN apt purge -y subversion && apt autoremove -y

WORKDIR /database-controller

COPY ./src ./src
Expand Down
2 changes: 1 addition & 1 deletion src/database-controller/src/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -35,7 +35,7 @@
"ws": "^8.18.2"
},
"resolutions": {
"tar-fs": "^3.0.9",
"tar-fs": "^3.1.1",
"@eslint/plugin-kit": "^0.3.3",
"form-data": "^4.0.4"
},
Expand Down
8 changes: 4 additions & 4 deletions src/database-controller/src/yarn.lock
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2907,10 +2907,10 @@ synckit@^0.11.0:
"@pkgr/core" "^0.2.3"
tslib "^2.8.1"

tar-fs@^3.0.8, tar-fs@^3.0.9:
version "3.1.0"
resolved "https://registry.yarnpkg.com/tar-fs/-/tar-fs-3.1.0.tgz#4675e2254d81410e609d91581a762608de999d25"
integrity sha512-5Mty5y/sOF1YWj1J6GiBodjlDc05CUR8PKXrsnFAiSG0xA+GHeWLovaZPYUDXkH/1iKRf2+M5+OrRgzC7O9b7w==
tar-fs@^3.0.8, tar-fs@^3.1.1:
version "3.1.1"
resolved "https://registry.yarnpkg.com/tar-fs/-/tar-fs-3.1.1.tgz#4f164e59fb60f103d472360731e8c6bb4a7fe9ef"
integrity sha512-LZA0oaPOc2fVo82Txf3gw+AkEd38szODlptMYejQUhndHMLQ9M059uXR+AfS7DNo0NpINvSqDsvyaCrBVkptWg==
dependencies:
pump "^3.0.0"
tar-stream "^3.1.5"
Expand Down
1 change: 1 addition & 0 deletions src/frameworkcontroller/deploy/frameworkcontroller.yaml.template
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -34,6 +34,7 @@ spec:
containers:
- name: frameworkcontroller
image: {{ cluster_cfg['cluster']['docker-registry']['prefix'] }}frameworkcontroller:{{ cluster_cfg['cluster']['docker-registry']['tag'] }}
imagePullPolicy: Always
{%- if cluster_cfg['cluster']['common']['k8s-rbac'] != 'true' %}
env:
- name: KUBE_APISERVER_ADDRESS
Expand Down
2 changes: 2 additions & 0 deletions src/rest-server/build/rest-server.common.dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,6 +21,8 @@ RUN npm install -g npm@latest

RUN apt update && apt upgrade -y

RUN apt purge -y subversion && apt autoremove -y

WORKDIR /usr/src/app

ENV NODE_ENV=production \
Expand Down
4 changes: 2 additions & 2 deletions src/rest-server/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -30,7 +30,7 @@
"ajv": "^8.17.1",
"async": "~3.2.6",
"async-mutex": "^0.5.0",
"axios": "^1.9.0",
"axios": "^1.12.0",
"chai": "~5.2.0",
"chai-as-promised": "~8.0.1",
"chai-http": "^5.1.2",
Expand Down Expand Up @@ -70,7 +70,7 @@
"xml2js": "~0.6.2"
},
"resolutions": {
"tar-fs": "^3.0.9",
"tar-fs": "^3.1.1",
"@eslint/plugin-kit": "^0.3.3",
"form-data": "^4.0.4"
},
Expand Down
Loading
Loading