openssl vulnerability CVE-2021-3449 in underlying Ubuntu image

NVIDIA / docker-swift

Docker image for Swift all-in-one demo deployment

GNU General Public License v2.0

82 stars 38 forks source link

Closed dlmutart closed 3 years ago

dlmutart commented 3 years ago

Container security scans with IBM Aqua have found CVE-2021-3449 in this docker image. It appears that the openssl package on the the base OS needs to be updated. See https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2021-3449 for details.

timuralp commented 3 years ago

Updated published images with the new 20.04 base image and openssl 1.1.1f-1ubuntu2.3.