2 high CVEs on docker image
Closed this issue · 5 comments
ikheifets-splunk commented
Docker scout finding 2 high vulnerabilities in docker image.
Just run command docker scout cves ghcr.io/axoflow/axosyslog:4.6.0.
ikheifets-splunk commented
bazsi commented
This is roughly just a rebuild away, which happens regularly at new
releases.
We could cut an earlier release though.
…On Wed, Mar 20, 2024, 21:09 Ilya ***@***.***> wrote:
@MrAnno <https://github.com/MrAnno> @alltilla
<https://github.com/alltilla> jfyi
—
Reply to this email directly, view it on GitHub
<#67 (comment)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AAFOK5RUO3WAWHBILNWQWX3YZHUIPAVCNFSM6AAAAABE5MTO4KVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDAMJQGUZTGNRUGM>
.
You are receiving this because you are subscribed to this thread.Message
ID: ***@***.***>
MrAnno commented
We have updated the 4.6.0 image.
There is also an ongoing PR to switch to alpine:3.19: #68
ikheifets-splunk commented
bazsi commented
This image should contain the fixes already: https://github.com/axoflow/axosyslog/pkgs/container/axosyslog/193934484?tag=4.6.0