search

docker-library / official-images

Primary source of truth for the Docker "Official Images" program
https://hub.docker.com/u/library
Apache License 2.0
6.47k stars 2.35k forks source link

Rebuild Debian images to address Wheezy 7.6 #111

Closed yonkeltron closed 10 years ago

yonkeltron commented 10 years ago

My dearest @tianon,

My heart aches in the fiery pangs of your absence. Each sunrise without you brings melancholy upon me as my constitution weakens. Good thing the Debian project released 7.6 today, ya feel me?

https://www.debian.org/News/2014/20140712

This update mainly adds corrections for security problems to the stable release, along with a few adjustments for serious problems. Security advisories were already published separately and are referenced where available.

Also, two DSAs came out this morning, one for libav and one for libxml2.

Since neither of these come in the base image by default, we should be all good on that front.

xoxoxox -JEM

tianon commented 10 years ago

Hah, with prose like that, how can I resist?

Also:

+ docker run debian:wheezy debsecan
CVE-2014-0475 libc-bin (fixed)
CVE-2014-0475 multiarch-support (fixed)
CVE-2014-0475 libc6 (fixed)

So obviously not a moment too soon!

tianon commented 10 years ago

BTW, thanks to this and dotcloud/docker#7064, I'm currently (as we speak) rebuilding all 8 debian tags. ;)