sismics / docs

Lightweight document management system packed with all the features you can expect from big expensive solutions
https://teedy.io
GNU General Public License v2.0
1.97k stars 489 forks source link

New release with updated dependencies and linux base-image #730

Open bschlapsi4tf opened 1 year ago

bschlapsi4tf commented 1 year ago

When do you plan to release a new release with updated dependencies and updates linux? The different security scanners show a lot of Vulnerabilities for the last release from March 2023

Enrice commented 1 year ago

I would highly appreciate that as well. LDAPS is missing in V1.11, and broken in the latest docker image (I wonder on what commit this was based on).

jendib commented 1 year ago

A PR would be appreciated if anyone can spend the time to do this.

Enrice commented 1 year ago

I would highly appreciate that as well. LDAPS is missing in V1.11, and broken in the latest docker image (I wonder on what commit this was based on).

turned out to be a browser caching problem - sry.

sukalpomitra commented 10 months ago

hi @jendib I have raised a PR -> https://github.com/sismics/docker-ubuntu/pull/1 that will update the ubuntu base image.

The PR shows the before and after reports.

jendib commented 9 months ago

@sukalpomitra I think it would make more sense to dump the sismics/ubuntu-jetty base image and have a self contained Teedy Dockerfile based on the official Ubuntu 22 image.

sukalpomitra commented 9 months ago

@jendib sure let me address your comments in my PR and then I can club the ubuntu-jav and uuntu-jetty into one Dockerfile and add it in the docs repo Dockerfile. Did I understand you correctly?

jendib commented 9 months ago

Exactly

sukalpomitra commented 9 months ago

@jendib Consider it done boss :P

sukalpomitra commented 9 months ago

@jendib Please check this PR for the self contained Teedy docker image

sukalpomitra commented 9 months ago

@jendib I have achieved 0 vulnerability. Once you merge the self contained docker PR, then I will raise another PR to fix the vulnerabilities

sukalpomitra commented 5 months ago

hi @jendib this PR consists changes that fixes many vulnerabilities and also adds multi arch support