Commit Graph

57 Commits

Author SHA1 Message Date
Théophile Diot ff9566b495
Update Python base image SHA256 2023-11-29 11:17:42 +01:00
Théophile Diot b539a97ad9
Fix CVE CVE-2023-5678 in Dockerfiles 2023-11-13 10:02:16 +00:00
dependabot[bot] c8eae49e5b
deps/autoconf: bump python from `dc2e889` to `a5d1738` in /src/autoconf
Bumps python from `dc2e889` to `a5d1738`.

---
updated-dependencies:
- dependency-name: python
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-25 11:06:15 +00:00
Théophile Diot 989c14ae73
Fix CVE CVE-2023-5363 2023-10-25 12:53:10 +02:00
Théophile Diot 5193d6cd19
Update docker images 2023-10-23 11:00:07 +02:00
Théophile Diot 2df85b2c93
Updated python:3.12.0-alpine image's sha256 2023-10-19 12:36:07 +02:00
Théophile Diot c2db157bb5
Update python docker image to 3.12.0 2023-10-03 14:10:04 +02:00
Théophile Diot 6b0e623e59
Update Dockerfiles to install pip and its deps before the project ones 2023-10-02 13:17:32 +01:00
Théophile Diot f3fc69110e
Fix typos in Dockerfile when installing python dependencies 2023-09-29 16:58:09 +01:00
Théophile Diot 073e8575e2
Updated Dockerfile, python deps and npm package to use pinned dependencies 2023-09-29 16:47:34 +01:00
Théophile Diot f9f5b6570d
Remove old CVE fixes for python images 2023-08-29 15:53:30 +02:00
Théophile Diot 1676ebeb7e
Test CVE on autoconf 2023-08-29 15:49:38 +02:00
Théophile Diot 637573e591
Update docker images and python deps 2023-08-29 15:47:03 +02:00
Théophile Diot ad45bbb4d7
Update python deps and fix error with PyYAML compilation 2023-07-19 13:05:11 -04:00
Théophile Diot 758901dfc3
Fix CVE CVE-2023-2975 2023-07-17 10:06:28 -04:00
Théophile Diot e1a5782a3e
Update how the dependencies are being cleaned up 2023-06-26 11:09:41 -04:00
Théophile Diot 23f9f14a46
Remove old CVEs fixes from Dockerfile 2023-06-09 13:33:51 -04:00
Théophile Diot f77150bc26
Test Aqua Security CVEs 2023-06-09 13:29:37 -04:00
Théophile Diot 6ab48d9dd2
Update python image to tag 3.11.4-alpine 2023-06-09 13:24:55 -04:00
Théophile Diot 0ca7de1de1
Add CVEs fixes back 2023-06-05 22:09:29 -04:00
Théophile Diot 84fcfb726d
Test Aqua Security 2 2023-06-05 22:07:14 -04:00
Théophile Diot 299a0b5c25
Remove apk update at beginning of each Dockerfile 2023-06-02 10:36:31 -04:00
Théophile Diot a424d59b1b
Add apk update at the beginning of each Dockerfile 2023-05-31 14:17:08 -04:00
Théophile Diot e920cba432
Fix CVE CVE-2023-2650 2023-05-31 10:37:41 -04:00
Théophile Diot 8dad7a0b79
Starting work on paths resolution refactor 2023-05-25 16:52:02 -04:00
Théophile Diot ed6bee69c7
Test Acqua Security vulns 2023-05-25 16:13:46 -04:00
Théophile Diot b75690fdf0
Change the way python deps are installed 2023-05-20 13:28:40 -04:00
florian 2e1296d9ae
show useful info in BW logs after startup/reload and reduce container images size 2023-05-14 15:57:55 +02:00
florian 59324526cf
speedup build process for python deps and fix default env value for autoconf/k8s 2023-05-07 12:53:49 +02:00
florian 773874154d move /etc/letsencrypt to /var/cache/bunkerweb/letsencrypt (wip) 2023-05-04 17:52:18 +02:00
florian 9395456440
add missing postgresql-dev build deps for ARM images 2023-04-30 12:29:27 +02:00
florian 4e0d2fce5f
add missing dependencies when prebuilt crypto package is not present 2023-04-30 00:58:37 +02:00
Théophile Diot a829528c3f
Add bwcli to scheduler and fix it for the autoconf 2023-04-25 15:49:27 +02:00
Théophile Diot 3b4882d82b
Revert "Remove no longer present CVEs fix because these are already fix in the images"
This reverts commit a93d9a7d94.
2023-04-24 14:16:37 +02:00
Théophile Diot a93d9a7d94
Remove no longer present CVEs fix because these are already fix in the images 2023-04-24 11:40:45 +02:00
Théophile Diot 63b1fb947a
Fix CVE CVE-2023-1255 2023-04-21 09:44:27 +02:00
Théophile Diot ad64ce22e9
Remove no longer needed packages that were fixing old CVEs 2023-04-18 15:12:56 +02:00
Théophile Diot 34ab94640f
Update python image in Dockerfiles + Add gevent to requirements for the UI 2023-04-16 16:29:31 +02:00
Théophile Diot bf9b94ebf8
Avoid Autoconf from running in root 2023-04-07 18:52:10 +02:00
bunkerity e8ee460efc fix CVE-2023-0464 and CVE-2023-0465 2023-03-29 11:03:39 +02:00
Théophile Diot 283306a07a
Remove CVEs fix, it's no longer needed for now 2023-03-27 10:36:09 +02:00
bunkerity 041142a4f3 add healthchecks to ui and autoconf docker images 2023-03-24 13:23:07 +01:00
bunkerity 5e31b6c4ae fix CVE-2022-1304 for autoconf, add missing load_module for ngx_stream_lua_module.so and fix missing -lpcre in configure step 2023-03-07 09:46:31 +01:00
Théophile Diot 7a8a75901f
Fix multiple CVEs (see comment) (finally) 2023-02-22 10:13:34 +01:00
Théophile Diot 0f35c05eee
Ignore multiple CVEs due to missing deps in python:3.11-alpine 2023-02-16 14:16:32 +01:00
Théophile Diot 846e26e410
Fix multiple CVEs (again) 2023-02-16 13:31:15 +01:00
Théophile Diot ebc7fbbcee
Fix multiple CVEs (see comment) 2023-02-16 13:26:15 +01:00
Théophile Diot 7689dac76d
Filter CVEs fixes in Dockerfiles 2022-12-14 16:02:22 +01:00
Théophile Diot 0c8dfaaab1
Update bw and autoconf Dockerfiles for let's encrypt 2022-12-14 15:48:18 +01:00
Théophile Diot c195ffc864
Fix autoconf not working properly with the shared volume 2022-12-03 16:47:35 +01:00