Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore(master): release 2.7.7 #61

Merged
merged 1 commit into from
Nov 13, 2024
Merged

chore(master): release 2.7.7 #61

merged 1 commit into from
Nov 13, 2024

Conversation

lotyp
Copy link
Member

@lotyp lotyp commented Nov 13, 2024

🤖 I have created a release beep boop

2.7.7 (2024-11-13)

Dependencies

  • deps: update actions/checkout action to v4.2.2 (9da2fd7)

This PR was generated with Release Please. See documentation.

@lotyp lotyp enabled auto-merge November 13, 2024 15:10
@github-actions GitHub Actions
Copy link

github-actions bot commented Nov 13, 2024 •
edited
Loading

Outdated

🔍 Vulnerabilities of wayofdev/php-dev:latest

📦 Image Reference wayofdev/php-dev:latest
digestsha256:27b921dddb0d367e4dea441227a209f821a4e47ab6b965e5f922697510d6a72c
vulnerabilitiescritical: 0 high: 4 medium: 0 low: 0
size108 MB
packages229
📦 Base Image php:8-alpine
also known as
  • 8-alpine3.20
  • 8-cli-alpine
  • 8-cli-alpine3.20
  • 8.3-alpine
  • 8.3-alpine3.20
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.20
  • 8.3.11-alpine
  • 8.3.11-alpine3.20
  • 8.3.11-cli-alpine
  • 8.3.11-cli-alpine3.20
  • alpine
  • alpine3.20
  • cli-alpine
  • cli-alpine3.20
digestsha256:fbd89ae244b08e08eece68310e23f0eb7865496203892ce649781d5d716e544f
vulnerabilitiescritical: 0 high: 0 medium: 3 low: 0
critical: 0 high: 3 medium: 0 low: 0 stdlib 1.22.5 (golang)

pkg:golang/[email protected]

high : CVE--2024--34158

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.04%
EPSS Percentile17th percentile
Description

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.

high : CVE--2024--34156

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.04%
EPSS Percentile17th percentile
Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

high : CVE--2022--30635

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.19%
EPSS Percentile57th percentile
Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

critical: 0 high: 1 medium: 0 low: 0 postgresql16 16.3-r0 (apk)

pkg:apk/alpine/[email protected]?os_name=alpine&os_version=3.20

high : CVE--2024--7348

Affected range<16.4-r0
Fixed version16.4-r0
EPSS Score0.05%
EPSS Percentile20th percentile
Description

@github-actions GitHub Actions
Copy link

github-actions bot commented Nov 13, 2024 •
edited
Loading

Outdated

Recommended fixes for image wayofdev/php-dev:latest

Base image is php:8-alpine

Name8.3.11-alpine3.20
Digestsha256:fbd89ae244b08e08eece68310e23f0eb7865496203892ce649781d5d716e544f
Vulnerabilitiescritical: 0 high: 0 medium: 3 low: 0
Pushed2 months ago
Size37 MB
Packages50
Flavoralpine
OS3.20
Runtime8.3.11
The base image is also available under the supported tag(s): 8-alpine3.20, 8-cli-alpine, 8-cli-alpine3.20, 8.3-alpine, 8.3-alpine3.20, 8.3-cli-alpine, 8.3-cli-alpine3.20, alpine, alpine3.20, cli-alpine, cli-alpine3.20

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.
TagDetailsPushedVulnerabilities
8-alpine
Newer image for same tag
Also known as:
  • 8.3.13-cli-alpine
  • 8.3.13-cli-alpine3.20
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.20
  • 8-cli-alpine
  • 8-cli-alpine3.20
  • cli-alpine
  • cli-alpine3.20
  • alpine
  • alpine3.20
  • 8.3.13-alpine
  • 8.3.13-alpine3.20
  • 8.3-alpine
  • 8.3-alpine3.20
  • 8-alpine3.20
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Newer image for same tag
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 3
  • Image contains equal number of packages
  • 8-alpine was pulled 1.6K times last month
Image details:
  • Size: 39 MB
  • Flavor: alpine
  • OS: 3.20
  • Runtime: 8.3.13
 2 weeks ago



Change base image

✅ There are no tag recommendations at this time.

@github-actions GitHub Actions
Copy link

github-actions bot commented Nov 13, 2024 •
edited
Loading

Outdated

🔍 Vulnerabilities of wayofdev/php-dev:latest

📦 Image Reference wayofdev/php-dev:latest
digestsha256:f2ea5f6198e42dd72a8e52e24d6f4fc73f5d523d7333667abf18bd3d0dc0f4c0
vulnerabilitiescritical: 0 high: 4 medium: 0 low: 0
size125 MB
packages247
📦 Base Image php:8.1-alpine
also known as
  • 8.1-alpine3.20
  • 8.1-cli-alpine
  • 8.1-cli-alpine3.20
  • 8.1.29-alpine
  • 8.1.29-alpine3.20
  • 8.1.29-cli-alpine
  • 8.1.29-cli-alpine3.20
digestsha256:4001f8453a837283a053931e0d085366d36f77fd5a2a18c31950c4121cd4a5ec
vulnerabilitiescritical: 0 high: 0 medium: 3 low: 0
critical: 0 high: 3 medium: 0 low: 0 stdlib 1.22.5 (golang)

pkg:golang/[email protected]

high : CVE--2024--34158

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.04%
EPSS Percentile17th percentile
Description

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.

high : CVE--2024--34156

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.04%
EPSS Percentile17th percentile
Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

high : CVE--2022--30635

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.19%
EPSS Percentile57th percentile
Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

critical: 0 high: 1 medium: 0 low: 0 postgresql16 16.3-r0 (apk)

pkg:apk/alpine/[email protected]?os_name=alpine&os_version=3.20

high : CVE--2024--7348

Affected range<16.4-r0
Fixed version16.4-r0
EPSS Score0.05%
EPSS Percentile20th percentile
Description

@github-actions GitHub Actions
Copy link

github-actions bot commented Nov 13, 2024 •
edited
Loading

Outdated

Recommended fixes for image wayofdev/php-dev:latest

Base image is php:8.1-alpine

Name8.1.29-alpine3.20
Digestsha256:4001f8453a837283a053931e0d085366d36f77fd5a2a18c31950c4121cd4a5ec
Vulnerabilitiescritical: 0 high: 0 medium: 3 low: 0
Pushed2 months ago
Size35 MB
Packages50
Flavoralpine
OS3.20
Runtime8.1.29
The base image is also available under the supported tag(s): 8.1-alpine3.20, 8.1-cli-alpine, 8.1-cli-alpine3.20

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.
TagDetailsPushedVulnerabilities
8.1-alpine
Newer image for same tag
Also known as:
  • 8.1.30-cli-alpine
  • 8.1.30-cli-alpine3.20
  • 8.1-cli-alpine
  • 8.1-cli-alpine3.20
  • 8.1.30-alpine
  • 8.1.30-alpine3.20
  • 8.1-alpine3.20
 Benefits:
  • Patch runtime version update
  • Same OS detected
  • Newer image for same tag
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 3
  • Image contains equal number of packages
  • 8.1-alpine was pulled 5.2K times last month
Image details:
  • Size: 38 MB
  • Flavor: alpine
  • OS: 3.20
  • Runtime: 8.1.30
 1 month ago



Change base image

TagDetailsPushedVulnerabilities
8.3-alpine
Minor runtime version update
Also known as:
  • 8.3.13-cli-alpine
  • 8.3.13-cli-alpine3.20
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.20
  • 8-cli-alpine
  • 8-cli-alpine3.20
  • cli-alpine
  • cli-alpine3.20
  • alpine
  • alpine3.20
  • 8.3.13-alpine
  • 8.3.13-alpine3.20
  • 8.3-alpine3.20
  • 8-alpine
  • 8-alpine3.20
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 3
  • Image contains equal number of packages
Image details:
  • Size: 39 MB
  • Flavor: alpine
  • OS: 3.20
  • Runtime: 8.3.13
 2 weeks ago



8.2-alpine
Minor runtime version update
Also known as:
  • 8.2.25-cli-alpine
  • 8.2.25-cli-alpine3.20
  • 8.2-cli-alpine
  • 8.2-cli-alpine3.20
  • 8.2.25-alpine
  • 8.2.25-alpine3.20
  • 8.2-alpine3.20
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 3
  • Image contains equal number of packages
  • 8.2-alpine was pulled 1.8K times last month
Image details:
  • Size: 38 MB
  • Flavor: alpine
  • OS: 3.20
  • Runtime: 8.2.25
 2 weeks ago



@github-actions GitHub Actions
Copy link

github-actions bot commented Nov 13, 2024 •
edited
Loading

Outdated

🔍 Vulnerabilities of wayofdev/php-dev:latest

📦 Image Reference wayofdev/php-dev:latest
digestsha256:9ad8d44c224a017fa8d6c64303fed5f7d8c29a47c6d809ed23aedae9f248a417
vulnerabilitiescritical: 0 high: 4 medium: 0 low: 0
size102 MB
packages230
📦 Base Image php:8.1-fpm-alpine
also known as
  • 8.1-fpm-alpine3.20
  • 8.1.29-fpm-alpine
  • 8.1.29-fpm-alpine3.20
digestsha256:c2a4daca3f96f06a5b3fa60bf58d933e147e43b607b87dffdd31f0e430843848
vulnerabilitiescritical: 0 high: 0 medium: 3 low: 0
critical: 0 high: 3 medium: 0 low: 0 stdlib 1.22.5 (golang)

pkg:golang/[email protected]

high : CVE--2024--34158

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.04%
EPSS Percentile17th percentile
Description

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.

high : CVE--2024--34156

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.04%
EPSS Percentile17th percentile
Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

high : CVE--2022--30635

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.19%
EPSS Percentile57th percentile
Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

critical: 0 high: 1 medium: 0 low: 0 postgresql16 16.3-r0 (apk)

pkg:apk/alpine/[email protected]?os_name=alpine&os_version=3.20

high : CVE--2024--7348

Affected range<16.4-r0
Fixed version16.4-r0
EPSS Score0.05%
EPSS Percentile20th percentile
Description

@github-actions GitHub Actions
Copy link

github-actions bot commented Nov 13, 2024 •
edited
Loading

Outdated

Recommended fixes for image wayofdev/php-dev:latest

Base image is php:8.1-fpm-alpine

Name8.1.29-fpm-alpine3.20
Digestsha256:c2a4daca3f96f06a5b3fa60bf58d933e147e43b607b87dffdd31f0e430843848
Vulnerabilitiescritical: 0 high: 0 medium: 3 low: 0
Pushed2 months ago
Size31 MB
Packages51
Flavoralpine
OS3.20
Runtime8.1.29
The base image is also available under the supported tag(s): 8.1-fpm-alpine3.20

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.
TagDetailsPushedVulnerabilities
8.1-fpm-alpine
Newer image for same tag
Also known as:
  • 8.1.30-fpm-alpine
  • 8.1.30-fpm-alpine3.20
  • 8.1-fpm-alpine3.20
 Benefits:
  • Patch runtime version update
  • Same OS detected
  • Newer image for same tag
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 3
  • Image contains equal number of packages
  • 8.1-fpm-alpine was pulled 18K times last month
Image details:
  • Size: 34 MB
  • Flavor: alpine
  • OS: 3.20
  • Runtime: 8.1.30
 1 month ago



Change base image

TagDetailsPushedVulnerabilities
8.2-fpm-alpine
Minor runtime version update
Also known as:
  • 8.2.25-fpm-alpine
  • 8.2.25-fpm-alpine3.20
  • 8.2-fpm-alpine3.20
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 3
  • Image contains equal number of packages
  • 8.2-fpm-alpine was pulled 4.1K times last month
Image details:
  • Size: 34 MB
  • Flavor: alpine
  • OS: 3.20
  • Runtime: 8.2.25
 2 weeks ago



8.3-fpm-alpine
Image introduces no new vulnerability but removes 3
Also known as:
  • 8.3.13-fpm-alpine
  • 8.3.13-fpm-alpine3.20
  • 8.3-fpm-alpine3.20
  • 8-fpm-alpine
  • 8-fpm-alpine3.20
  • fpm-alpine
  • fpm-alpine3.20
 Benefits:
  • Same OS detected
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 3
  • Image contains equal number of packages
Image details:
  • Size: 35 MB
  • Flavor: alpine
  • OS: 3.20
 2 weeks ago



@github-actions GitHub Actions
Copy link

github-actions bot commented Nov 13, 2024 •
edited
Loading

Outdated

🔍 Vulnerabilities of wayofdev/php-dev:latest

📦 Image Reference wayofdev/php-dev:latest
digestsha256:f66eabe4c0a04cc243fa690d9a20dfef4b714d763691da1f664233bdbdd7344c
vulnerabilitiescritical: 0 high: 4 medium: 0 low: 0
size102 MB
packages230
📦 Base Image php:8.2-fpm-alpine
also known as
  • 8.2-fpm-alpine3.20
  • 8.2.23-fpm-alpine
  • 8.2.23-fpm-alpine3.20
digestsha256:2541389406d2ec619088fde1c8a3a1c9f3a263ee3ff3a2724e17cd78b168c89d
vulnerabilitiescritical: 0 high: 0 medium: 3 low: 0
critical: 0 high: 3 medium: 0 low: 0 stdlib 1.22.5 (golang)

pkg:golang/[email protected]

high : CVE--2024--34158

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.04%
EPSS Percentile17th percentile
Description

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.

high : CVE--2024--34156

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.04%
EPSS Percentile17th percentile
Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

high : CVE--2022--30635

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.19%
EPSS Percentile57th percentile
Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

critical: 0 high: 1 medium: 0 low: 0 postgresql16 16.3-r0 (apk)

pkg:apk/alpine/[email protected]?os_name=alpine&os_version=3.20

high : CVE--2024--7348

Affected range<16.4-r0
Fixed version16.4-r0
EPSS Score0.05%
EPSS Percentile20th percentile
Description

@github-actions GitHub Actions
Copy link

github-actions bot commented Nov 13, 2024 •
edited
Loading

Outdated

🔍 Vulnerabilities of wayofdev/php-dev:latest

📦 Image Reference wayofdev/php-dev:latest
digestsha256:7c6904bc95bd14367c12f02f6f5c6d74fc650d23468e38c2c72afc52dda2e554
vulnerabilitiescritical: 0 high: 4 medium: 0 low: 0
size107 MB
packages229
📦 Base Image php:8.2-alpine
also known as
  • 8.2-alpine3.20
  • 8.2-cli-alpine
  • 8.2-cli-alpine3.20
  • 8.2.23-alpine
  • 8.2.23-alpine3.20
  • 8.2.23-cli-alpine
  • 8.2.23-cli-alpine3.20
digestsha256:664c504580bbf49e465ef58c3a501ea48c21fbfbef991f34bee822a670fbad49
vulnerabilitiescritical: 0 high: 0 medium: 3 low: 0
critical: 0 high: 3 medium: 0 low: 0 stdlib 1.22.5 (golang)

pkg:golang/[email protected]

high : CVE--2024--34158

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.04%
EPSS Percentile17th percentile
Description

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.

high : CVE--2024--34156

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.04%
EPSS Percentile17th percentile
Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

high : CVE--2022--30635

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.19%
EPSS Percentile57th percentile
Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

critical: 0 high: 1 medium: 0 low: 0 postgresql16 16.3-r0 (apk)

pkg:apk/alpine/[email protected]?os_name=alpine&os_version=3.20

high : CVE--2024--7348

Affected range<16.4-r0
Fixed version16.4-r0
EPSS Score0.05%
EPSS Percentile20th percentile
Description

@github-actions GitHub Actions
Copy link

github-actions bot commented Nov 13, 2024 •
edited
Loading

Outdated

Recommended fixes for image wayofdev/php-dev:latest

Base image is php:8.2-fpm-alpine

Name8.2.23-fpm-alpine3.20
Digestsha256:2541389406d2ec619088fde1c8a3a1c9f3a263ee3ff3a2724e17cd78b168c89d
Vulnerabilitiescritical: 0 high: 0 medium: 3 low: 0
Pushed2 months ago
Size32 MB
Packages51
Flavoralpine
OS3.20
Runtime8.2.23
The base image is also available under the supported tag(s): 8.2-fpm-alpine3.20

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.
TagDetailsPushedVulnerabilities
8.2-fpm-alpine
Newer image for same tag
Also known as:
  • 8.2.25-fpm-alpine
  • 8.2.25-fpm-alpine3.20
  • 8.2-fpm-alpine3.20
 Benefits:
  • Patch runtime version update
  • Same OS detected
  • Newer image for same tag
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 3
  • Image contains equal number of packages
  • 8.2-fpm-alpine was pulled 4.1K times last month
Image details:
  • Size: 34 MB
  • Flavor: alpine
  • OS: 3.20
  • Runtime: 8.2.25
 2 weeks ago



Change base image

TagDetailsPushedVulnerabilities
8.3-fpm-alpine
Image introduces no new vulnerability but removes 3
Also known as:
  • 8.3.13-fpm-alpine
  • 8.3.13-fpm-alpine3.20
  • 8.3-fpm-alpine3.20
  • 8-fpm-alpine
  • 8-fpm-alpine3.20
  • fpm-alpine
  • fpm-alpine3.20
 Benefits:
  • Same OS detected
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 3
  • Image contains equal number of packages
Image details:
  • Size: 35 MB
  • Flavor: alpine
  • OS: 3.20
 2 weeks ago



@github-actions GitHub Actions
Copy link

github-actions bot commented Nov 13, 2024 •
edited
Loading

Outdated

Recommended fixes for image wayofdev/php-dev:latest

Base image is php:8.2-alpine

Name8.2.23-alpine3.20
Digestsha256:664c504580bbf49e465ef58c3a501ea48c21fbfbef991f34bee822a670fbad49
Vulnerabilitiescritical: 0 high: 0 medium: 3 low: 0
Pushed2 months ago
Size36 MB
Packages50
Flavoralpine
OS3.20
Runtime8.2.23
The base image is also available under the supported tag(s): 8.2-alpine3.20, 8.2-cli-alpine, 8.2-cli-alpine3.20

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.
TagDetailsPushedVulnerabilities
8.2-alpine
Newer image for same tag
Also known as:
  • 8.2.25-cli-alpine
  • 8.2.25-cli-alpine3.20
  • 8.2-cli-alpine
  • 8.2-cli-alpine3.20
  • 8.2.25-alpine
  • 8.2.25-alpine3.20
  • 8.2-alpine3.20
 Benefits:
  • Patch runtime version update
  • Same OS detected
  • Newer image for same tag
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 3
  • Image contains equal number of packages
  • 8.2-alpine was pulled 1.8K times last month
Image details:
  • Size: 38 MB
  • Flavor: alpine
  • OS: 3.20
  • Runtime: 8.2.25
 2 weeks ago



Change base image

TagDetailsPushedVulnerabilities
8.3-alpine
Minor runtime version update
Also known as:
  • 8.3.13-cli-alpine
  • 8.3.13-cli-alpine3.20
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.20
  • 8-cli-alpine
  • 8-cli-alpine3.20
  • cli-alpine
  • cli-alpine3.20
  • alpine
  • alpine3.20
  • 8.3.13-alpine
  • 8.3.13-alpine3.20
  • 8.3-alpine3.20
  • 8-alpine
  • 8-alpine3.20
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 3
  • Image contains equal number of packages
Image details:
  • Size: 39 MB
  • Flavor: alpine
  • OS: 3.20
  • Runtime: 8.3.13
 2 weeks ago



@github-actions GitHub Actions
Copy link

github-actions bot commented Nov 13, 2024 •
edited
Loading

Outdated

🔍 Vulnerabilities of wayofdev/php-dev:latest

📦 Image Reference wayofdev/php-dev:latest
digestsha256:dd310a7db5d774de5f6763e93e24704bbeda5345cb841497a1616f14f6012bf3
vulnerabilitiescritical: 0 high: 4 medium: 0 low: 0
size126 MB
packages247
📦 Base Image php:8.2-alpine
also known as
  • 8.2-alpine3.20
  • 8.2-cli-alpine
  • 8.2-cli-alpine3.20
  • 8.2.23-alpine
  • 8.2.23-alpine3.20
  • 8.2.23-cli-alpine
  • 8.2.23-cli-alpine3.20
digestsha256:664c504580bbf49e465ef58c3a501ea48c21fbfbef991f34bee822a670fbad49
vulnerabilitiescritical: 0 high: 0 medium: 3 low: 0
critical: 0 high: 3 medium: 0 low: 0 stdlib 1.22.5 (golang)

pkg:golang/[email protected]

high : CVE--2024--34158

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.04%
EPSS Percentile17th percentile
Description

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.

high : CVE--2024--34156

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.04%
EPSS Percentile17th percentile
Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

high : CVE--2022--30635

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.19%
EPSS Percentile57th percentile
Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

critical: 0 high: 1 medium: 0 low: 0 postgresql16 16.3-r0 (apk)

pkg:apk/alpine/[email protected]?os_name=alpine&os_version=3.20

high : CVE--2024--7348

Affected range<16.4-r0
Fixed version16.4-r0
EPSS Score0.05%
EPSS Percentile20th percentile
Description

@github-actions GitHub Actions
Copy link

github-actions bot commented Nov 13, 2024 •
edited
Loading

Outdated

🔍 Vulnerabilities of wayofdev/php-dev:latest

📦 Image Reference wayofdev/php-dev:latest
digestsha256:bd2f7193d5aca8062b6b09d36ebdf9b0e75f835f3d61d94463a8b5e3154bfb4d
vulnerabilitiescritical: 0 high: 4 medium: 0 low: 0
size103 MB
packages230
📦 Base Image php:8-fpm-alpine
also known as
  • 8-fpm-alpine3.20
  • 8.3-fpm-alpine
  • 8.3-fpm-alpine3.20
  • 8.3.11-fpm-alpine
  • 8.3.11-fpm-alpine3.20
  • fpm-alpine
  • fpm-alpine3.20
digestsha256:6cf4a9ecc6a3626c62b37f83190750e6ea76a65c924ec6900d1c5b6d0e2456fc
vulnerabilitiescritical: 0 high: 0 medium: 3 low: 0
critical: 0 high: 3 medium: 0 low: 0 stdlib 1.22.5 (golang)

pkg:golang/[email protected]

high : CVE--2024--34158

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.04%
EPSS Percentile17th percentile
Description

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.

high : CVE--2024--34156

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.04%
EPSS Percentile17th percentile
Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

high : CVE--2022--30635

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.19%
EPSS Percentile57th percentile
Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

critical: 0 high: 1 medium: 0 low: 0 postgresql16 16.3-r0 (apk)

pkg:apk/alpine/[email protected]?os_name=alpine&os_version=3.20

high : CVE--2024--7348

Affected range<16.4-r0
Fixed version16.4-r0
EPSS Score0.05%
EPSS Percentile20th percentile
Description

@github-actions GitHub Actions
Copy link

github-actions bot commented Nov 13, 2024 •
edited
Loading

Outdated

Recommended fixes for image wayofdev/php-dev:latest

Base image is php:8.2-alpine

Name8.2.23-alpine3.20
Digestsha256:664c504580bbf49e465ef58c3a501ea48c21fbfbef991f34bee822a670fbad49
Vulnerabilitiescritical: 0 high: 0 medium: 3 low: 0
Pushed2 months ago
Size36 MB
Packages50
Flavoralpine
OS3.20
Runtime8.2.23
The base image is also available under the supported tag(s): 8.2-alpine3.20, 8.2-cli-alpine, 8.2-cli-alpine3.20

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.
TagDetailsPushedVulnerabilities
8.2-alpine
Newer image for same tag
Also known as:
  • 8.2.25-cli-alpine
  • 8.2.25-cli-alpine3.20
  • 8.2-cli-alpine
  • 8.2-cli-alpine3.20
  • 8.2.25-alpine
  • 8.2.25-alpine3.20
  • 8.2-alpine3.20
 Benefits:
  • Patch runtime version update
  • Same OS detected
  • Newer image for same tag
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 3
  • Image contains equal number of packages
  • 8.2-alpine was pulled 1.8K times last month
Image details:
  • Size: 38 MB
  • Flavor: alpine
  • OS: 3.20
  • Runtime: 8.2.25
 2 weeks ago



Change base image

TagDetailsPushedVulnerabilities
8.3-alpine
Minor runtime version update
Also known as:
  • 8.3.13-cli-alpine
  • 8.3.13-cli-alpine3.20
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.20
  • 8-cli-alpine
  • 8-cli-alpine3.20
  • cli-alpine
  • cli-alpine3.20
  • alpine
  • alpine3.20
  • 8.3.13-alpine
  • 8.3.13-alpine3.20
  • 8.3-alpine3.20
  • 8-alpine
  • 8-alpine3.20
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 3
  • Image contains equal number of packages
Image details:
  • Size: 39 MB
  • Flavor: alpine
  • OS: 3.20
  • Runtime: 8.3.13
 2 weeks ago



@github-actions GitHub Actions
Copy link

github-actions bot commented Nov 13, 2024 •
edited
Loading

Outdated

Recommended fixes for image wayofdev/php-dev:latest

Base image is php:8-fpm-alpine

Namefpm-alpine3.20
Digestsha256:6cf4a9ecc6a3626c62b37f83190750e6ea76a65c924ec6900d1c5b6d0e2456fc
Vulnerabilitiescritical: 0 high: 0 medium: 3 low: 0
Pushed2 months ago
Size32 MB
Packages51
Flavoralpine
OS3.20
The base image is also available under the supported tag(s): 8-fpm-alpine3.20, 8.3-fpm-alpine, 8.3-fpm-alpine3.20, fpm-alpine, fpm-alpine3.20

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.
TagDetailsPushedVulnerabilities
8-fpm-alpine
Newer image for same tag
Also known as:
  • 8.3.13-fpm-alpine
  • 8.3.13-fpm-alpine3.20
  • 8.3-fpm-alpine
  • 8.3-fpm-alpine3.20
  • 8-fpm-alpine3.20
  • fpm-alpine
  • fpm-alpine3.20
 Benefits:
  • Same OS detected
  • Newer image for same tag
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 3
  • Image contains equal number of packages
  • 8-fpm-alpine was pulled 4.8K times last month
Image details:
  • Size: 35 MB
  • Flavor: alpine
  • OS: 3.20
 2 weeks ago



Change base image

TagDetailsPushedVulnerabilities
8.2-fpm-alpine
Minor runtime version update
Also known as:
  • 8.2.25-fpm-alpine
  • 8.2.25-fpm-alpine3.20
  • 8.2-fpm-alpine3.20
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 3
  • Image contains equal number of packages
  • 8.2-fpm-alpine was pulled 4.1K times last month
Image details:
  • Size: 34 MB
  • Flavor: alpine
  • OS: 3.20
  • Runtime: 8.2.25
 2 weeks ago



8.1-fpm-alpine
Minor runtime version update
Also known as:
  • 8.1.30-fpm-alpine
  • 8.1.30-fpm-alpine3.20
  • 8.1-fpm-alpine3.20
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 3
  • Image contains equal number of packages
  • 8.1-fpm-alpine is the fourth most popular tag with 18K pulls per month
Image details:
  • Size: 34 MB
  • Flavor: alpine
  • OS: 3.20
  • Runtime: 8.1.30
 1 month ago



@github-actions GitHub Actions
Copy link

github-actions bot commented Nov 13, 2024 •
edited
Loading

Outdated

🔍 Vulnerabilities of wayofdev/php-dev:latest

📦 Image Reference wayofdev/php-dev:latest
digestsha256:d747ec500870721b0274225585423aaa860dd0aef6ab0f64152cd166d57efb54
vulnerabilitiescritical: 0 high: 4 medium: 0 low: 0
size127 MB
packages247
📦 Base Image php:8-alpine
also known as
  • 8-alpine3.20
  • 8-cli-alpine
  • 8-cli-alpine3.20
  • 8.3-alpine
  • 8.3-alpine3.20
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.20
  • 8.3.11-alpine
  • 8.3.11-alpine3.20
  • 8.3.11-cli-alpine
  • 8.3.11-cli-alpine3.20
  • alpine
  • alpine3.20
  • cli-alpine
  • cli-alpine3.20
digestsha256:fbd89ae244b08e08eece68310e23f0eb7865496203892ce649781d5d716e544f
vulnerabilitiescritical: 0 high: 0 medium: 3 low: 0
critical: 0 high: 3 medium: 0 low: 0 stdlib 1.22.5 (golang)

pkg:golang/[email protected]

high : CVE--2024--34158

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.04%
EPSS Percentile17th percentile
Description

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.

high : CVE--2024--34156

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.04%
EPSS Percentile17th percentile
Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

high : CVE--2022--30635

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.19%
EPSS Percentile57th percentile
Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

critical: 0 high: 1 medium: 0 low: 0 postgresql16 16.3-r0 (apk)

pkg:apk/alpine/[email protected]?os_name=alpine&os_version=3.20

high : CVE--2024--7348

Affected range<16.4-r0
Fixed version16.4-r0
EPSS Score0.05%
EPSS Percentile20th percentile
Description

@github-actions GitHub Actions
Copy link

github-actions bot commented Nov 13, 2024 •
edited
Loading

Outdated

Recommended fixes for image wayofdev/php-dev:latest

Base image is php:8-alpine

Name8.3.11-alpine3.20
Digestsha256:fbd89ae244b08e08eece68310e23f0eb7865496203892ce649781d5d716e544f
Vulnerabilitiescritical: 0 high: 0 medium: 3 low: 0
Pushed2 months ago
Size37 MB
Packages50
Flavoralpine
OS3.20
Runtime8.3.11
The base image is also available under the supported tag(s): 8-alpine3.20, 8-cli-alpine, 8-cli-alpine3.20, 8.3-alpine, 8.3-alpine3.20, 8.3-cli-alpine, 8.3-cli-alpine3.20, alpine, alpine3.20, cli-alpine, cli-alpine3.20

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.
TagDetailsPushedVulnerabilities
8-alpine
Newer image for same tag
Also known as:
  • 8.3.13-cli-alpine
  • 8.3.13-cli-alpine3.20
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.20
  • 8-cli-alpine
  • 8-cli-alpine3.20
  • cli-alpine
  • cli-alpine3.20
  • alpine
  • alpine3.20
  • 8.3.13-alpine
  • 8.3.13-alpine3.20
  • 8.3-alpine
  • 8.3-alpine3.20
  • 8-alpine3.20
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Newer image for same tag
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 3
  • Image contains equal number of packages
  • 8-alpine was pulled 1.6K times last month
Image details:
  • Size: 39 MB
  • Flavor: alpine
  • OS: 3.20
  • Runtime: 8.3.13
 2 weeks ago



Change base image

✅ There are no tag recommendations at this time.

@github-actions GitHub Actions
Copy link

🔍 Vulnerabilities of wayofdev/php-dev:latest

📦 Image Reference wayofdev/php-dev:latest
digestsha256:54896f3a7cead55cfdd18009c2740caefb62b180de08087d55e31e0c8ccbddb2
vulnerabilitiescritical: 0 high: 4 medium: 0 low: 0
size107 MB
packages229
📦 Base Image php:8.1-alpine
also known as
  • 8.1-alpine3.20
  • 8.1-cli-alpine
  • 8.1-cli-alpine3.20
  • 8.1.29-alpine
  • 8.1.29-alpine3.20
  • 8.1.29-cli-alpine
  • 8.1.29-cli-alpine3.20
digestsha256:4001f8453a837283a053931e0d085366d36f77fd5a2a18c31950c4121cd4a5ec
vulnerabilitiescritical: 0 high: 0 medium: 3 low: 0
critical: 0 high: 3 medium: 0 low: 0 stdlib 1.22.5 (golang)

pkg:golang/[email protected]

high : CVE--2024--34158

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.04%
EPSS Percentile17th percentile
Description

Calling Parse on a "// +build" build tag line with deeply nested expressions can cause a panic due to stack exhaustion.

high : CVE--2024--34156

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.04%
EPSS Percentile17th percentile
Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

high : CVE--2022--30635

Affected range<1.22.7
Fixed version1.22.7
EPSS Score0.19%
EPSS Percentile57th percentile
Description

Calling Decoder.Decode on a message which contains deeply nested structures can cause a panic due to stack exhaustion. This is a follow-up to CVE-2022-30635.

critical: 0 high: 1 medium: 0 low: 0 postgresql16 16.3-r0 (apk)

pkg:apk/alpine/[email protected]?os_name=alpine&os_version=3.20

high : CVE--2024--7348

Affected range<16.4-r0
Fixed version16.4-r0
EPSS Score0.05%
EPSS Percentile20th percentile
Description

@github-actions GitHub Actions
Copy link

Recommended fixes for image wayofdev/php-dev:latest

Base image is php:8.1-alpine

Name8.1.29-alpine3.20
Digestsha256:4001f8453a837283a053931e0d085366d36f77fd5a2a18c31950c4121cd4a5ec
Vulnerabilitiescritical: 0 high: 0 medium: 3 low: 0
Pushed2 months ago
Size35 MB
Packages50
Flavoralpine
OS3.20
Runtime8.1.29
The base image is also available under the supported tag(s): 8.1-alpine3.20, 8.1-cli-alpine, 8.1-cli-alpine3.20

Refresh base image

Rebuild the image using a newer base image version. Updating this may result in breaking changes.
TagDetailsPushedVulnerabilities
8.1-alpine
Newer image for same tag
Also known as:
  • 8.1.30-cli-alpine
  • 8.1.30-cli-alpine3.20
  • 8.1-cli-alpine
  • 8.1-cli-alpine3.20
  • 8.1.30-alpine
  • 8.1.30-alpine3.20
  • 8.1-alpine3.20
 Benefits:
  • Patch runtime version update
  • Same OS detected
  • Newer image for same tag
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 3
  • Image contains equal number of packages
  • 8.1-alpine was pulled 5.2K times last month
Image details:
  • Size: 38 MB
  • Flavor: alpine
  • OS: 3.20
  • Runtime: 8.1.30
 1 month ago



Change base image

TagDetailsPushedVulnerabilities
8.3-alpine
Minor runtime version update
Also known as:
  • 8.3.13-cli-alpine
  • 8.3.13-cli-alpine3.20
  • 8.3-cli-alpine
  • 8.3-cli-alpine3.20
  • 8-cli-alpine
  • 8-cli-alpine3.20
  • cli-alpine
  • cli-alpine3.20
  • alpine
  • alpine3.20
  • 8.3.13-alpine
  • 8.3.13-alpine3.20
  • 8.3-alpine3.20
  • 8-alpine
  • 8-alpine3.20
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 3
  • Image contains equal number of packages
Image details:
  • Size: 39 MB
  • Flavor: alpine
  • OS: 3.20
  • Runtime: 8.3.13
 2 weeks ago



8.2-alpine
Minor runtime version update
Also known as:
  • 8.2.25-cli-alpine
  • 8.2.25-cli-alpine3.20
  • 8.2-cli-alpine
  • 8.2-cli-alpine3.20
  • 8.2.25-alpine
  • 8.2.25-alpine3.20
  • 8.2-alpine3.20
 Benefits:
  • Same OS detected
  • Minor runtime version update
  • Tag was pushed more recently
  • Image has similar size
  • Image introduces no new vulnerability but removes 3
  • Image contains equal number of packages
  • 8.2-alpine was pulled 1.8K times last month
Image details:
  • Size: 38 MB
  • Flavor: alpine
  • OS: 3.20
  • Runtime: 8.2.25
 2 weeks ago



@way-finder-bot way-finder-bot self-requested a review November 13, 2024 15:17
@way-finder-bot way-finder-bot self-assigned this Nov 13, 2024
@lotyp lotyp merged commit 5bcf307 into master Nov 13, 2024
17 checks passed
@lotyp lotyp deleted the release-please--branches--master--components--docker-php-dev branch November 13, 2024 15:17
@lotyp
Copy link
Member Author

lotyp commented Nov 13, 2024

🤖 Created releases:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@way-finder-bot way-finder-bot way-finder-bot approved these changes

Assignees

@way-finder-bot way-finder-bot

Labels
autorelease: tagged
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@lotyp @way-finder-bot