CVE-2024-3651

Advisory

Spark-on-k8s version 0.5.0 has updated its idna dependency from version 3.6 to 3.7 to address the security vulnerability detailed in CVE-2024-3651.

Affected package

Affected versions

Fixed versions

Vulnerability changelog

What's Changed
* feat(docker): add a dockerfile for spark-history server by hussein-awala in https://github.com/hussein-awala/spark-on-k8s/pull/28
* feat(webserver): integrate spark history server by hussein-awala in https://github.com/hussein-awala/spark-on-k8s/pull/29
* feat(helm): add support for spark history deployment in the helm chart by hussein-awala in https://github.com/hussein-awala/spark-on-k8s/pull/30
* security: bump Apache Airflow version to avoid CVE-2024-29735 by hussein-awala in https://github.com/hussein-awala/spark-on-k8s/pull/31
* chore(helm): add `SPARK_ON_K8S_IN_CLUSTER` by default to the webserver pod by hussein-awala in https://github.com/hussein-awala/spark-on-k8s/pull/32
* ci(helm): publish the chart to a github page by hussein-awala in https://github.com/hussein-awala/spark-on-k8s/pull/33
* doc: add instructions to install helm chart from new repo by hussein-awala in https://github.com/hussein-awala/spark-on-k8s/pull/34
* security: update poetry constraints by hussein-awala in https://github.com/hussein-awala/spark-on-k8s/pull/35


**Full Changelog**: https://github.com/hussein-awala/spark-on-k8s/compare/0.4.0...0.5.0

Resources

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3651
• https://github.com/hussein-awala/spark-on-k8s/pull/35