Skip to content

chore(deps): update 3lvia/cli digest to fc1c993#281

Closed
renovate[bot] wants to merge 1 commit intotrunkfrom
renovate/3lvia-cli-digest
Closed

chore(deps): update 3lvia/cli digest to fc1c993#281
renovate[bot] wants to merge 1 commit intotrunkfrom
renovate/3lvia-cli-digest

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Mar 30, 2026

This PR contains the following updates:

Package Type Update Change
3lvia/cli action digest 07d05a3fc1c993

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Mar 30, 2026

Integration Test Results

2 tests  +2   2 ✅ +2   1s ⏱️ -1s
1 suites +1   0 💤 ±0 
1 files   +1   0 ❌ ±0 

Results for commit 0b31280. ± Comparison against base commit 3fb07c6.

♻️ This comment has been updated with latest results.

@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Mar 30, 2026

Unit Test Results

1 tests  +1   1 ✅ +1   0s ⏱️ ±0s
1 suites +1   0 💤 ±0 
1 files   +1   0 ❌ ±0 

Results for commit 0b31280. ± Comparison against base commit 3fb07c6.

♻️ This comment has been updated with latest results.

@github-actions
Copy link
Copy Markdown
Contributor

github-actions bot commented Mar 30, 2026

⚠️ Vulnerabilities detected in ghcr.io/3lvia/core/vulnerable-service:latest-cache ⚠️

Found in: ghcr.io/3lvia/core/vulnerable-service:latest-cache (debian 10.13)

glibc: stack-based buffer overflow in netgroup cache – HIGH

ID: CVE-2024-33599

Package Name: libc-bin

Installed Version: 2.28-10+deb10u3

nscd: Stack-based buffer overflow in netgroup cache

If the Name Service Cache Daemon's (nscd) fixed size cache is exhausted
by client requests then a subsequent client request for netgroup data
may result in a stack-based buffer overflow. This flaw was introduced
in glibc 2.15 when the cache was added to nscd.

This vulnerability is only present in the nscd binary.

References:

glibc: stack-based buffer overflow in netgroup cache – HIGH

ID: CVE-2024-33599

Package Name: libc6

Installed Version: 2.28-10+deb10u3

nscd: Stack-based buffer overflow in netgroup cache

If the Name Service Cache Daemon's (nscd) fixed size cache is exhausted
by client requests then a subsequent client request for netgroup data
may result in a stack-based buffer overflow. This flaw was introduced
in glibc 2.15 when the cache was added to nscd.

This vulnerability is only present in the nscd binary.

References:

@renovate renovate bot force-pushed the renovate/3lvia-cli-digest branch from 7e3525a to 0b31280 Compare March 30, 2026 15:43
@renovate renovate bot changed the title chore(deps): update 3lvia/cli digest to 7aa84ce chore(deps): update 3lvia/cli digest to fc1c993 Mar 30, 2026
@renovate
Copy link
Copy Markdown
Contributor Author

renovate bot commented Mar 30, 2026

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for the 3lvia/cli fc1c993 update again.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.

@renovate renovate bot deleted the renovate/3lvia-cli-digest branch March 30, 2026 15:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant