confluentinc / confluentinc/common-docker
Vulnerability issue legacy python versions are present <python 2/python 3.6>
Open
- Dominant language
- Java
- Stars
- 10
- Forks
- 76
- Avg merge
- 9h 47m
- Merged PRs (30d)
- 105
Description
Our security scan flags the image that it has old python version related packges. Could you clean up old python packages which is having EOL ? i.e Remove python 2.x and python 3.6.x related libs.
`yum list | grep python3-libs`
Tested in below version as well.
`docker run --rm -it --entrypoint /bin/sh confluentinc/[cp-kafka-connect-base](https://confluentinc.atlassian.net/browse/CP-kafka-connect-base):7.7.1`
verified latest version and it is still contain python 3.6 which is no longer supported
```
sh-4.4# ls /lib/python3.*
/lib/python3.6:
site-packages
/lib/python3.9:
site-packages
sh-4.4#
```
Contributor guide
Assessment
This issue has not been assessed yet.