CVE-2022-1304

Advisory

Omegaml 0.15.4rc1 updates its Dockerfile dependency 'tensorflow' to v2.11.0rc1 to include security fixes.
https://github.com/omegaml/omegaml/pull/290

Affected package

Affected versions

Fixed versions

Vulnerability changelog

What's Changed
* use sqlalchemy prepared statements for pd.read_sql by miraculixx in https://github.com/omegaml/omegaml/pull/294
* sanitize mongodb query filters by miraculixx in https://github.com/omegaml/omegaml/pull/293
* streamline extdmetadata handling resp. X, Y, result by miraculixx in https://github.com/omegaml/omegaml/pull/291
* upgrade mongodb 5.x by miraculixx in https://github.com/omegaml/omegaml/pull/232
* enable using mongodb as a result backend by miraculixx in https://github.com/omegaml/omegaml/pull/300
* Upgrade celery 5 by miraculixx in https://github.com/omegaml/omegaml/pull/234


**Full Changelog**: https://github.com/omegaml/omegaml/compare/release/0.15.3...release/0.15.4-rc1

What's Changed
* [Snyk] Fix for 4 vulnerabilities by snyk-bot in https://github.com/omegaml/omegaml/pull/299
* [Snyk] Security upgrade tensorflow/tensorflow from 2.10.0rc3-gpu-jupyter to 2.11.0rc1-gpu-jupyter by omegaml in https://github.com/omegaml/omegaml/pull/290
* [Snyk] Security upgrade tensorflow/tensorflow from 2.10.0rc3-gpu-jupyter to 2.11.0rc0-gpu-jupyter by snyk-bot in https://github.com/omegaml/omegaml/pull/289


**Full Changelog**: https://github.com/omegaml/omegaml/compare/release/0.15.4-rc1...release/0.15.4-rc2

Resources

• https://pypi.org/project/omegaml
• https://pyup.io/changelogs/omegaml/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1304