Skip to content

Conversation

mocsharp
Copy link
Collaborator

@mocsharp mocsharp commented Mar 26, 2025

Update to MIG 0.5.1 and MWM & MTM to 0.2.1 to fix CVE-2024-38229, CVE-2024-35264

This is NOT recommended for production environments

Please review the README for details about prerequisites, installation, start/stop services, running workflows with MONAI Applications (MAPs) and some tips!


This release is based on the following services:

MONAI Deploy Services

Service Version
Informatics Gateway (IG) 0.5.1-3
Workflow Manager (WM) 0.2.1-2
Task Manager (TM) - part of WM repo as of today, but designed as a standalone service 0.2.1-2

Third-Party Services

Service Version
MinIO (default storage service) RELEASE.2024-06-11T03-13-30Z
RabbitMQ (default message broker service) 3.12.7-management
MongoDB (default database for WM & TM) 5.0.25
Orthanc (optional) 24.6.1-full
Elastic Search (optional) 8.7.0
Log Stash (optional) 8.7.0
Kibana (optional) 8.7.0

Signed-off-by: Victor Chang <[email protected]>
@mocsharp mocsharp force-pushed the vchang/mde-0.6.1 branch 3 times, most recently from ca54e20 to 0e078a8 Compare March 26, 2025 22:07
@mocsharp mocsharp requested a review from Copilot March 26, 2025 22:10
Copy link

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR updates service dependencies for MONAI Deploy Express, ensuring compatibility with the newest versions required to address specific CVEs. Key changes include:

  • Upgrading actions/upload-artifact from v3 to v4.6.2 in the CI workflow.
  • Updating service dependencies as part of the release for MONAI Deploy Express 0.6.1.
Files not reviewed (1)
  • deploy/monai-deploy-express/.env: Language not supported

Copy link
Collaborator

@MMelQin MMelQin left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@mocsharp mocsharp merged commit 0c1f13a into main Mar 26, 2025
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

CVE-2024-38229, CVE-2024-35264
2 participants