Remediate Security Vulnerability CVE-2024-2398
Closed this issue · 1 comments
elad-at-intenthq commented
Is your feature request related to a problem? Please describe
Hi team,
we detected a CVE-2024-2398 while running Trivy scanner on latastes nginx:stable-alpine3.19 on linux/amd64. This is marked critical due to using curl version 8.5.0-r0.
Also available on Docker hub
Describe the solution you'd like
Passing the security tests
Proposed solution:
https://curl.se/docs/CVE-2024-2398.html
upgrade library to 8.7.0
We would appreciate it if these could be patched or remedied, if at all feasible, for reasons of compliance.
thresheek commented
Fixed in nginx:stable-alpine now. (The image was migrated to Alpine 3.20, which uses curl-8.9.0-r0.