lncm / lncm/docker-tor

Update base image

Open
#21 10 comments 2 reactions 0 assignees View on GitHub
Dominant language
Dockerfile
Stars
20
Forks
11
PR merge metrics
No merged PRs in 30d

Description

When doing a `docker scan lncm/tor`, the report throws out a LOT of critical vulnerabilities that need patching. At the bottom of the report, it recommends updating to Debian:11-slim to get rid of most of them

```
Project name: docker-image|lncm/tor
Docker image: lncm/tor
Platform: linux/amd64
Base image: debian:10.10-slim

**Tested 85 dependencies for known vulnerabilities, found 61 vulnerabilities.**

Base Image Vulnerabilities Severity
debian:10.10-slim 61 10 high, 6 medium, 45 low

Recommendations for base image upgrade:

Major upgrades
Base Image Vulnerabilities Severity
debian:11-slim 37 1 high, 2 medium, 34 low
```

Contributor guide

No contributing guide indexed for this repository

Research direction

Locate the Dockerfile entry that uses debian:10.10-slim and inspect how the image is built. Update the base image to debian:11-slim, rebuild lncm/tor, and run docker scan to verify that the reported vulnerabilities are reduced.

Written by the indexing model from the issue text.

Assessment

Tech stack
docker, dockerfile
Domain
devops, security
Issue type
Bug
Difficulty
2/5
Estimated time
1-3 hours
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
45/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.