Current Docker image has CVE-2023-0286

mintel / dex-k8s-authenticator

A Kubernetes Dex Client Authenticator

MIT License

371 stars 146 forks source link

Current Docker image has CVE-2023-0286 #198

Open m-barthelemy opened 1 year ago

m-barthelemy commented 1 year ago

The current mintel/dex-k8s-authenticator image on Docker Hub is impacted by CVE-2023-0286 (critical vulnerability in libcrypto1.1) Would it be possible to generate a new image based on the latest Alpine?

m-barthelemy commented 8 months ago

So far I've been maintaining https://github.com/m-barthelemy/dex-k8s-authenticator which adds a couple of PRs opened here and periodic security fixes.

Images at https://hub.docker.com/repository/docker/mbarthelemy/dex-k8s-authenticator