docker-library/mongo

Need help with CVE-2023-24538⁠, CVE-2023-24540, CVE-2024-21626 and CVE-2023-27561

shuukphil opened this issue · 4 comments

I can see these CVE issues across all version of MongoDB, are these false positive or it fixable?
I tried upgraded your gosu from 1.16 to 1.17 during the container re-build from your official docker image, When I run it the CVE are gone and my application still functions, just have doubt and wanted to ask MongoDB team will it break some functionalities if i upgraded your gosu?
Thanks

image

Updating to the newer gosu would be great! 😄

Ah, #672 😄

@tianon Will this be applied on docker hub official Images ?