search

deis / slugrunner

Buildpack application runner for Deis Workflow.
https://deis.com
MIT License
13 stars 18 forks source link

Git vulnerability #67

Closed Bregor closed 7 years ago

Bregor commented 7 years ago

USN-3387-1 Slugrunner is affected:

$ kubectl exec -n appname appname-web-2095715944-ckzh5 -- dpkg -l|grep -w git|head -1|grep -Eo '1:[^ ]+'
1:1.9.1-1ubuntu0.3
mboersma commented 7 years ago

Probably means we need to rev the base image to get upstream Ubuntu fixes, then rebuild everything off that. A bit of a chore, but we have some scripting to help.

mboersma commented 7 years ago

With the most recent quay.io/deis/slugrunner:v2.4.0 it's been updated:

$ docker run -it --entrypoint bash quay.io/deis/slugrunner:v2.4.0 
slug@c26b20b637cd:~$ dpkg -l|grep -w git|head -1|grep -Eo '1:[^ ]+'
1:1.9.1-1ubuntu0.5

The security scan shows only medium vulnerabilities. @Bregor is there still a patch needed here?