Repository navigation

25 of 134 components are vulnerable?! #374

Closed

opened

Can you explain this at least? Transparency is everything.
https://hub.docker.com/r/library/node/tags/7/

chorrell commented on Apr 4, 2017
chorrell
on Apr 4, 2017
Contributor
See also:

docker-library/official-images#2740
#219
#195 (comment)
Reacted by Tianon Gravi
chorrell commented on Apr 4, 2017
chorrell
on Apr 4, 2017
Contributor
The TLDR; is that the Docker Hubs reporting of vulnerabilities isn't entirely accurate.

CVE-2014-9761 for instance (as noted in docker-library/official-images/issues/2740) is marked as a "Minor issue" by the Debian Security team. See https://security-tracker.debian.org/tracker/CVE-2014-9761

CVE-2016-5180 was patched directly in node with nodejs/node#8849
Reacted by Tianon Gravi
chorrell
closed this as completed on Jan 7, 2018

to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Assignees

No one assigned

Labels

No labels

No labels

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests