CVE-2023-0361

Advisory

Github-rate-limits-exporter 0.7.2 updates its dependency 'libgnutls30' to version '3.7.1-5+deb11u3' to include a security fix.
https://github.com/theodore86/github-rate-limits-exporter/commit/44073972e4a8e1bc86f842e3b6d421eba80e2ff6

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Changelog
* [016b3ac] ci: update github action workflow dependencies (Theodoros Georgomanolis)
* [00e89bd] chore: update README.md (Theodoros Georgomanolis)
* [6325fc0] chore(helm): introduce helm charts (Theodoros Georgomanolis)
* [bf80817] build(deps): bump docker/setup-buildx-action from 2.4.1 to 2.5.0 (dependabot[bot])
* [8784d5e] ci: update linting-and-testing.yml gh action (Theodoros Georgomanolis)
* [61fab78] build(deps): bump bandit from 1.7.4 to 1.7.5 (dependabot[bot])
* [e364ebf] build(deps): bump aquasecurity/trivy-action from 0.9.1 to 0.9.2 (dependabot[bot])
* [c428081] build(deps): bump pylint from 2.16.4 to 2.17.0 (dependabot[bot])
* [6978e6f] build(deps): bump mypy from 1.0.1 to 1.1.1 (dependabot[bot])
* [a0ba947] build(deps): bump pylint from 2.16.3 to 2.16.4 in /requirements.d (dependabot[bot])
* [1ed6c46] build(deps): bump pytest from 7.2.1 to 7.2.2 in /requirements.d (dependabot[bot])
* [739a918] build(deps): bump cryptography from 39.0.1 to 39.0.2 (dependabot[bot])
* [63100fc] build(deps): bump pylint from 2.16.2 to 2.16.3 in /requirements.d (dependabot[bot])
* [2a51c05] build(deps): bump allure-pytest from 2.12.0 to 2.13.0 (dependabot[bot])
* [711c374] build(deps): bump types-requests in /requirements.d (dependabot[bot])
* [ed38f52] build(deps): bump ipython from 8.10.0 to 8.11.0 in /requirements.d (dependabot[bot])
* [8629df7] tests: fix argparse failure when tox extra args (Theodoros Georgomanolis)
* [9bd70ef] chore(dev): update mypy .gitignore (Theodoros Georgomanolis)
* [0354563] fix: is_string_base64_encoded utility function (Theodoros Georgomanolis)
* [4407397] ci: fix trivys image scanner CVE-2023-0361 (Theodoros Georgomanolis)
* [d41dd70] ci: update mypy.ini configuration file (Theodoros Georgomanolis)
* [ac92b89] build(deps): bump types-requests from 2.28.11.13 to 2.28.11.14 (dependabot[bot])
* [a8fc02c] build(deps): bump pygithub from 1.56 to 1.58.0 (dependabot[bot])
* [a902151] build(deps): bump mypy from 1.0.0 to 1.0.1 in /requirements.d (dependabot[bot])
* [98b6f7a] build(deps): bump types-requests in /requirements.d (dependabot[bot])
* [5083235] build(deps): bump pylint from 2.16.1 to 2.16.2 (dependabot[bot])
* [5f5e8ae] ci: update unittests (Theodoros Georgomanolis)
* [5e4c5b6] build(deps): bump aquasecurity/trivy-action from 0.9.0 to 0.9.1 (dependabot[bot])
* [b09367a] build(deps): bump ipython from 8.9.0 to 8.10.0 (dependabot[bot])
* [aa51c41] build(deps): bump python from 3.11.1-slim to 3.11.2-slim (dependabot[bot])
* [ead6290] build(deps): bump cryptography from 39.0.0 to 39.0.1 (dependabot[bot])
* [a834e28] build(deps): bump types-requests in /requirements.d (dependabot[bot])
* [0117c42] build(deps): bump mypy from 0.991 to 1.0.0 (dependabot[bot])
* [4d17b0f] build(deps): bump docker/setup-buildx-action from 2.4.0 to 2.4.1 (dependabot[bot])
* [2e3090e] build(deps): bump black from 22.12.0 to 23.1.0 (dependabot[bot])
* [b1a431e] build(deps): bump aquasecurity/trivy-action from 0.8.0 to 0.9.0 (dependabot[bot])
* [d0730aa] build(deps): bump pylint from 2.16.0 to 2.16.1 (dependabot[bot])
* [18b62ff] build(deps): bump pylint from 2.15.10 to 2.16.0 (dependabot[bot])
* [acc4508] build(deps): bump docker/build-push-action from 3.3.1 to 4.0.0 (dependabot[bot])
* [0628f61] chore: update package version file to: v0.7.1 (theodore86)

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0361