Skip to content

fix: update jaraco.context to resolve CVE #74

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
qued wants to merge 7 commits into
base: main
Choose a base branch
from
Open

fix: update jaraco.context to resolve CVE #74

Show file tree
Hide file tree
Changes from 4 commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
32effc6
update jaraco.context to resolve CVE
qued Jan 14, 2026
59aa25a
same for wolfi-slim
qued Jan 14, 2026
fd70df5
try just using pip
qued Jan 14, 2026
238f3d3
remove --user flag
qued Jan 14, 2026
aec270f
how do I get rid of CVE version?
qued Jan 14, 2026
f78df35
try this?
qued Jan 14, 2026
e54aedd
try uninstalling setuptools
qued Jan 14, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions dockerfiles/wolfi-base/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -30,6 +30,9 @@ ENV TESSDATA_PREFIX=/usr/local/share/tessdata
USER ${NB_USER}
WORKDIR ${HOME}

# NOTE(alan): To resolve GHSA-58pv-8j8x-9vj2
RUN pip install --no-cache-dir --upgrade "jaraco.context>=6.1"

# NOTE(mike): This dummy call is a workaround for libreoffice not executing commands properly at the start of the container.
# The issue is decribed here: https://github.com/Unstructured-IO/unstructured/issues/3105
# soffice running twice explanation: https://github.com/jodconverter/jodconverter/issues/48#issuecomment-1863864333
Expand Down
3 changes: 3 additions & 0 deletions dockerfiles/wolfi-py3.12-slim/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,4 +6,7 @@ RUN apk update && \
apk add bash python-3.12 py3.12-pip && \
apk cache clean

# NOTE(alan): To resolve GHSA-58pv-8j8x-9vj2
RUN pip install --no-cache-dir --upgrade "jaraco.context>=6.1"

CMD ["/bin/bash"]
Loading