CVE-2023-0401

Advisory

Mlrun 1.3.0rc29 unpins its dependency 'cryptography' to allow latest security updates.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

Features / Enhancements
* **Runtime**: Log when using default grace period for runtime resources deletion, 3147, alonmr
* **Security**: Relief cryptography to allow latest security updates, 3154, liranbg
* **CI**: Collect log-collector image for system tests, 3155, liranbg
* **CI**: Enable verbose logging for enterprise system test preparation, 3153, liranbg
* **UI**: [Features & enhancement](https://github.com/mlrun/ui/releases/tag/v1.3.0-rc29#features-and-enhancements)

Bug fixes
* **UI**: [Bug fixes](https://github.com/mlrun/ui/releases/tag/v1.3.0-rc29#bug-fixes)


Pull requests:
e451850c [Runtime] Log when using default grace period for runtime resources deletion (3147)
dfc58279 [Security] Relief cryptography to allow latest security updates (3154)
bbaaf6ab [CI] Collect log-collector image for system tests (3155)
05828da0 [CI] Enable verbose logging for enterprise system test preparation (3153)

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-0401