Requesting Rebuild to Patch libc6 CVE for Bullseye

docker-library / buildpack-deps

MIT License

445 stars 113 forks source link

Requesting Rebuild to Patch libc6 CVE for Bullseye #127

Closed wcedmisten-reify closed 2 years ago

wcedmisten-reify commented 2 years ago

There's a CVE with libc6 2.31-13+deb11u2 currently used in buildpack-deps:bullseye-scm. Rebuilding this image would update this to the patched version 2.31-13+deb11u3 and allow downstream images to adopt this fix as well.

https://security-tracker.debian.org/tracker/CVE-2022-23218

Thanks!

tianon commented 2 years ago

Will be fixed via https://github.com/docker-library/official-images/pull/12133.