cirruslabs / cirruslabs/docker-wget

CVEs in latest image

Open
#1 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Dockerfile
Stars
2
Forks
3
PR merge metrics
No merged PRs in 30d

Description

Seems there are some CVEs in the latest image in docker hub. Can you please update it? Thanks.

```
┌────────────┬────────────────┬──────────┬───────────────────┬───────────────┬─────────────────────────────────────────────────────────────┐
│ Library │ Vulnerability │ Severity │ Installed Version │ Fixed Version │ Title │
├────────────┼────────────────┼──────────┼───────────────────┼───────────────┼─────────────────────────────────────────────────────────────┤
│ musl │ CVE-2019-14697 │ CRITICAL │ 1.1.19-r10 │ 1.1.19-r11 │ musl libc through 1.1.23 has an x87 floating-point stack │
│ │ │ │ │ │ adjustment im ...... │
│ │ │ │ │ │ https://avd.aquasec.com/nvd/cve-2019-14697 │
├────────────┤ │ │ │ │ │
│ musl-utils │ │ │ │ │ │
│ │ │ │ │ │ │
│ │ │ │ │ │ │
├────────────┼────────────────┼──────────┼───────────────────┼───────────────┼─────────────────────────────────────────────────────────────┤
│ wget │ CVE-2018-20483 │ HIGH │ 1.19.5-r0 │ 1.20.1-r0 │ wget: Information exposure in set_file_metadata function in │
│ │ │ │ │ │ xattr.c │
│ │ │ │ │ │ https://avd.aquasec.com/nvd/cve-2018-20483 │
└────────────┴────────────────┴──────────┴───────────────────┴───────────────┴─────────────────────────────────────────────────────────────┘
```

Contributor guide

No contributing guide indexed for this repository

Research direction

No repository file or test is named; first locate the Dockerfile or build entry point for the Docker Hub image and inspect how musl, musl-utils, and wget are installed. Rebuild and scan the image, checking that the listed packages reach the fixed versions and the reported CVEs are resolved.

Written by the indexing model from the issue text.

Assessment

Tech stack
docker
Domain
devops
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.