cirruslabs / cirruslabs/docker-wget
CVEs in latest image
- Dominant language
- Dockerfile
- Stars
- 2
- Forks
- 3
- PR merge metrics
- No merged PRs in 30d
Description
Seems there are some CVEs in the latest image in docker hub. Can you please update it? Thanks.
```
┌────────────┬────────────────┬──────────┬───────────────────┬───────────────┬─────────────────────────────────────────────────────────────┐
│ Library │ Vulnerability │ Severity │ Installed Version │ Fixed Version │ Title │
├────────────┼────────────────┼──────────┼───────────────────┼───────────────┼─────────────────────────────────────────────────────────────┤
│ musl │ CVE-2019-14697 │ CRITICAL │ 1.1.19-r10 │ 1.1.19-r11 │ musl libc through 1.1.23 has an x87 floating-point stack │
│ │ │ │ │ │ adjustment im ...... │
│ │ │ │ │ │ https://avd.aquasec.com/nvd/cve-2019-14697 │
├────────────┤ │ │ │ │ │
│ musl-utils │ │ │ │ │ │
│ │ │ │ │ │ │
│ │ │ │ │ │ │
├────────────┼────────────────┼──────────┼───────────────────┼───────────────┼─────────────────────────────────────────────────────────────┤
│ wget │ CVE-2018-20483 │ HIGH │ 1.19.5-r0 │ 1.20.1-r0 │ wget: Information exposure in set_file_metadata function in │
│ │ │ │ │ │ xattr.c │
│ │ │ │ │ │ https://avd.aquasec.com/nvd/cve-2018-20483 │
└────────────┴────────────────┴──────────┴───────────────────┴───────────────┴─────────────────────────────────────────────────────────────┘
```
Contributor guide
No contributing guide indexed for this repository
Research direction
No repository file or test is named; first locate the Dockerfile or build entry point for the Docker Hub image and inspect how musl, musl-utils, and wget are installed. Rebuild and scan the image, checking that the listed packages reach the fixed versions and the reported CVEs are resolved.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- docker
- Domain
- devops
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100