Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update dependencies in Docker image #85

Open
ngosang opened this issue May 2, 2024 · 0 comments
Open

Update dependencies in Docker image #85

ngosang opened this issue May 2, 2024 · 0 comments

Comments

@ngosang
Copy link

ngosang commented May 2, 2024

I was doing a security scanner using Grype => https://github.com/anchore/grype
And I detected your Docker image has some outdated dependencies. I don't think they are a security risk but it's a good practice to publish releases more often. Thank you for your work!

grype fschuindt/docker-nfs-server:2.2.1 --only-fixed | grep -i -E '(High|Critical)'

Docker image: fschuindt/docker-nfs-server:2.2.1
apk-tools     2.10.4-r3  2.10.7-r0   apk   CVE-2021-36159  Critical  
apk-tools     2.10.4-r3  2.10.6-r0   apk   CVE-2021-30139  High      
busybox       1.31.1-r9  1.31.1-r11  apk   CVE-2021-42386  High      
busybox       1.31.1-r9  1.31.1-r11  apk   CVE-2021-42385  High      
busybox       1.31.1-r9  1.31.1-r11  apk   CVE-2021-42384  High      
busybox       1.31.1-r9  1.31.1-r11  apk   CVE-2021-42383  High      
busybox       1.31.1-r9  1.31.1-r11  apk   CVE-2021-42382  High      
busybox       1.31.1-r9  1.31.1-r11  apk   CVE-2021-42381  High      
busybox       1.31.1-r9  1.31.1-r11  apk   CVE-2021-42380  High      
busybox       1.31.1-r9  1.31.1-r11  apk   CVE-2021-42379  High      
busybox       1.31.1-r9  1.31.1-r11  apk   CVE-2021-42378  High      
busybox       1.31.1-r9  1.31.1-r10  apk   CVE-2021-28831  High      
krb5-libs     1.17.1-r0  1.17.2-r0   apk   CVE-2020-28196  High      
libcrypto1.1  1.1.1d-r3  1.1.1l-r0   apk   CVE-2021-3711   Critical  
libcrypto1.1  1.1.1d-r3  1.1.1l-r0   apk   CVE-2021-3712   High      
libcrypto1.1  1.1.1d-r3  1.1.1k-r0   apk   CVE-2021-3450   High      
libcrypto1.1  1.1.1d-r3  1.1.1j-r0   apk   CVE-2021-23840  High      
libcrypto1.1  1.1.1d-r3  1.1.1g-r0   apk   CVE-2020-1967   High      
libssl1.1     1.1.1d-r3  1.1.1l-r0   apk   CVE-2021-3711   Critical  
libssl1.1     1.1.1d-r3  1.1.1l-r0   apk   CVE-2021-3712   High      
libssl1.1     1.1.1d-r3  1.1.1k-r0   apk   CVE-2021-3450   High      
libssl1.1     1.1.1d-r3  1.1.1j-r0   apk   CVE-2021-23840  High      
libssl1.1     1.1.1d-r3  1.1.1g-r0   apk   CVE-2020-1967   High      
sqlite-libs   3.30.1-r1  3.30.1-r2   apk   CVE-2020-11655  High      
ssl_client    1.31.1-r9  1.31.1-r11  apk   CVE-2021-42386  High      
ssl_client    1.31.1-r9  1.31.1-r11  apk   CVE-2021-42385  High      
ssl_client    1.31.1-r9  1.31.1-r11  apk   CVE-2021-42384  High      
ssl_client    1.31.1-r9  1.31.1-r11  apk   CVE-2021-42383  High      
ssl_client    1.31.1-r9  1.31.1-r11  apk   CVE-2021-42382  High      
ssl_client    1.31.1-r9  1.31.1-r11  apk   CVE-2021-42381  High      
ssl_client    1.31.1-r9  1.31.1-r11  apk   CVE-2021-42380  High      
ssl_client    1.31.1-r9  1.31.1-r11  apk   CVE-2021-42379  High      
ssl_client    1.31.1-r9  1.31.1-r11  apk   CVE-2021-42378  High      
ssl_client    1.31.1-r9  1.31.1-r10  apk   CVE-2021-28831  High      
zlib          1.2.11-r3  1.2.11-r4   apk   CVE-2022-37434  Critical
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant