CVEs due the current version of Debian that Feast uses

[sourabh-raja-murali]

• https://security-tracker.debian.org/tracker/CVE-2023-45853
• https://security-tracker.debian.org/tracker/CVE-2023-38408
• https://security-tracker.debian.org/tracker/CVE-2023-45871

Above are some vulnerabilities as part of the current Debian version that Feast uses.

Possible Solution

Updating the Debian version would solve these CVEs.

PS: Have indicated just a few critical CVEs. There are other moderate ones as well again due to the Debian version.

[shuchu]

Feast uses the Python3.8/3.9 images as base images. The Python3.10 does not seem to have high Vulnerabilities.

I'll keep an eyeeye on this when we do the upgration. It will involve multiple tests. The current CI/CD is using Python3.8.

[robhowley]

at this point feast should prob drop 3.8 entirely and start phasing out 3.9. see python version calendar.

[shuchu]

Feast is upgraded to support Python >= 3.9.