Resolve Critical CVEs - Githubissues

mesosphere / marathon-lb

Marathon-lb is a service discovery & load balancing tool for DC/OS

Apache License 2.0

450 stars 300 forks source link

Resolve Critical CVEs #665

Open PatrickGoRaft opened 4 years ago

PatrickGoRaft commented 4 years ago

Updating the Debian image to reference a stable slim version resolves the following critical Common Vulnerabilities and Exposures and does not impact functionality:

CVE-2019-5481 (https://security-tracker.debian.org/tracker/CVE-2019-5481)
CVE-2019-5482 ( https://security-tracker.debian.org/tracker/CVE-2019-5482)

mesosphere-ci commented 4 years ago

Can one of the admins verify this patch?

mesosphere-ci commented 4 years ago

Can one of the admins verify this patch?

mesosphere-ci commented 4 years ago

Can one of the admins verify this patch?

mesosphere-ci commented 4 years ago

Can one of the admins verify this patch?

jkoelker commented 4 years ago

ok to test

jkoelker commented 4 years ago

Thanks for the fix! I'm not familiar with the debian tagging policy for images. Are the fixes not included in the latest buster tag? And if we switch to this tag, will it continue to be updated?