CVE-2023-4863

Advisory

Jetson-stats 4.2.4 updates its dependency 'pillow' to include a security fix.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

jetson-stats now run on **Jetpack 6.0 DP** and other contributions are merge to jetson-stats!

Update jetson-stats to latest **4.2.4** release

sudo pip3 install -U jetson-stats


🙏 **Thank you everybody for your help!**


What's Changed
* Bump docker/build-push-action from 4.1.1 to 4.2.1 by dependabot in https://github.com/rbonghi/jetson_stats/pull/448
* Bump python from 3.12.0rc1-slim-bullseye to 3.12.0rc2-slim-bullseye by dependabot in https://github.com/rbonghi/jetson_stats/pull/449
* Bump python from 3.12.0rc2-slim-bullseye to 3.12.0rc3-slim-bullseye by dependabot in https://github.com/rbonghi/jetson_stats/pull/456
* Bump python from 3.12.0rc3-slim-bullseye to 3.12.0-slim-bullseye by dependabot in https://github.com/rbonghi/jetson_stats/pull/459
* [Snyk] Security upgrade tornado from 6.2 to 6.3.3 by rbonghi in https://github.com/rbonghi/jetson_stats/pull/442
* Bump actions/checkout from 3 to 4 by dependabot in https://github.com/rbonghi/jetson_stats/pull/446
* Bump docker/setup-buildx-action from 2 to 3 by dependabot in https://github.com/rbonghi/jetson_stats/pull/451
* Bump docker/metadata-action from 4 to 5 by dependabot in https://github.com/rbonghi/jetson_stats/pull/452
* Bump docker/setup-qemu-action from 2 to 3 by dependabot in https://github.com/rbonghi/jetson_stats/pull/453
* Bump docker/build-push-action from 4.2.1 to 5.1.0 by dependabot in https://github.com/rbonghi/jetson_stats/pull/467
* [Snyk] Security upgrade pillow from 9.5.0 to 10.0.1 by rbonghi in https://github.com/rbonghi/jetson_stats/pull/458
* [Snyk] Fix for 2 vulnerabilities by rbonghi in https://github.com/rbonghi/jetson_stats/pull/465
* [Snyk] Security upgrade pillow from 9.5.0 to 10.0.1 by rbonghi in https://github.com/rbonghi/jetson_stats/pull/472
* Bump docker/login-action from 2.2.0 to 3.0.0 by dependabot in https://github.com/rbonghi/jetson_stats/pull/473
* Bump actions/setup-python from 4 to 5 by dependabot in https://github.com/rbonghi/jetson_stats/pull/474
* Bump python from 3.12.0-slim-bullseye to 3.12.1-slim-bullseye by dependabot in https://github.com/rbonghi/jetson_stats/pull/475
* Bump actions/upload-artifact from 3 to 4 by dependabot in https://github.com/rbonghi/jetson_stats/pull/477
* [Snyk] Security upgrade fonttools from 4.38.0 to 4.43.0 by rbonghi in https://github.com/rbonghi/jetson_stats/pull/478
* [Snyk] Security upgrade fonttools from 4.38.0 to 4.43.0 by rbonghi in https://github.com/rbonghi/jetson_stats/pull/479
* Add support for JP 6.0DP by qqice in https://github.com/rbonghi/jetson_stats/pull/471
* Update jtop.py by omerts in https://github.com/rbonghi/jetson_stats/pull/445
* Ensure nprocess exists when table is empty. by dmbuck32 in https://github.com/rbonghi/jetson_stats/pull/444
* fix calls to os.symlink by 4dec in https://github.com/rbonghi/jetson_stats/pull/455
* Documentation by Thomas1430352 in https://github.com/rbonghi/jetson_stats/pull/460

New Contributors
* qqice made their first contribution in https://github.com/rbonghi/jetson_stats/pull/471
* omerts made their first contribution in https://github.com/rbonghi/jetson_stats/pull/445
* dmbuck32 made their first contribution in https://github.com/rbonghi/jetson_stats/pull/444
* 4dec made their first contribution in https://github.com/rbonghi/jetson_stats/pull/455
* Thomas1430352 made their first contribution in https://github.com/rbonghi/jetson_stats/pull/460

**Full Changelog**: https://github.com/rbonghi/jetson_stats/compare/4.2.3...4.2.4

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-4863