Open dpericaxon opened 1 year ago
Hi @dpericaxon, all of those are not fixed in Debian Bullseye, so not much we can do about it.
Maybe using an alpine-based image will make it easier for you?
Good idea, we'll try the Alpine image with the next version upgrade we do.
FYI, some of libtiff issues are now fixed in Debian Bullseye.
Everything except https://security-tracker.debian.org/tracker/CVE-2022-1210 is now fixed in Bookworm-based images (nginx:1.25.1 and newer).
Hello! We ran a twistlock scan and it showed the following CVE's:
libtiff5-
libdb5.3-
libgd3-
If possible, we'd like these to be patched/remediated for compliance reasons on our end. Let me know if you need more info!