CVE-2022-1292

Advisory

Dagster-cloud 1.1.4 updates 'dagster/dagster-cloud-agent' Docker image’s base to 'python:3.8.15-slim' to include security fixes.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

New

- A handful of changes have been made to URLs in Dagit:
- The `/instance` URL path prefix has been removed. E.g. `/instance/runs` can now be found at `/runs`.
- The `/workspace` URL path prefix has been changed to `/locations`. E.g. the URL for job `my_job` in repository `foobar` can now be found at `/locations/foobar/jobs/my_job`.
- In Dagit, the “Workspace” navigation item in the top nav has been moved to be a tab under the “Deployment” section of the app, and is renamed to “Definitions”.

Dependency Changes

- We’ve upgraded our `dagster/dagster-cloud-agent` Docker image’s base from `python:3.8.12-slim` to `python:3.8.15-slim` to patch [some vulnerabilities in the old base image](https://snyk.io/test/docker/python%3A3.8.12-slim).

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1292