Snow CVE (#713)

codefresh-io · Jan 10, 2025 · 74e57a8 · 74e57a8
1 parent 62cbc72
commit 74e57a8
Show file tree

Hide file tree

Showing 3 changed files with 12 additions and 3 deletions.
diff --git a/incubating/service-now/CHANGELOG.md b/incubating/service-now/CHANGELOG.md
@@ -1,5 +1,14 @@
 # Changelog
 
+## [1.2.5] - 2025-01-02
+
+### Fixed
+- CVE-2023-4911 - upgrade glibc
+- CVE-2023-6246 - upgrade glibc
+- CVE-2024-45492 - Upgrade expat/libexpat1
+- CVE-2024-45491 - Upgrade expat/libexpat1
+- CVE-2024-37371 - Upgrade krb5
+
 ## [1.2.4] - 2023-09-21
 ### Changed
 - Change logging mechanism

diff --git a/incubating/service-now/Dockerfile b/incubating/service-now/Dockerfile
@@ -1,4 +1,4 @@
-FROM python:3.11.5-slim-bookworm
+FROM python:3.13.1-slim-bookworm
 RUN pip3 install requests
 
 COPY lib/snow.py /snow/snow.py

diff --git a/incubating/service-now/step.yaml b/incubating/service-now/step.yaml
@@ -2,7 +2,7 @@ kind: step-type
 version: '1.0'
 metadata:
   name: service-now
-  version: 1.2.4
+  version: 1.2.5
   isPublic: true
   description: Integration with ServiceNow Change Management
   sources:
@@ -86,7 +86,7 @@ spec:
         },
         "SN_IMAGE_VERSION": {
           "type": "string",
-          "default": "1.2.4",
+          "default": "1.2.5",
           "description": "Version of the ServiceNow image to use, Docker image tag."
         },
         "SN_INSTANCE": {