Skip to content

New release with updated dependencies and linux base-image #730

Open

Description

@bschlapsi4tf

When do you plan to release a new release with updated dependencies and updates linux?
The different security scanners show a lot of Vulnerabilities for the last release from March 2023

Activity

  1. Enrice commented on Nov 2, 2023

    @Enrice
    Contributor

    I would highly appreciate that as well. LDAPS is missing in V1.11, and broken in the latest docker image (I wonder on what commit this was based on).

  2. jendib commented on Nov 2, 2023

    @jendib
    Member

    A PR would be appreciated if anyone can spend the time to do this.

  3. Enrice commented on Nov 3, 2023

    @Enrice
    Contributor

    I would highly appreciate that as well. LDAPS is missing in V1.11, and broken in the latest docker image (I wonder on what commit this was based on).

    turned out to be a browser caching problem - sry.

  4. sukalpomitra commented on Jan 23, 2024

    @sukalpomitra
    Contributor

    hi @jendib I have raised a PR -> sismics/docker-ubuntu#1 that will update the ubuntu base image.

    The PR shows the before and after reports.

  5. jendib commented on Jan 23, 2024

    @jendib
    Member

    @sukalpomitra I think it would make more sense to dump the sismics/ubuntu-jetty base image and have a self contained Teedy Dockerfile based on the official Ubuntu 22 image.

  6. sukalpomitra commented on Jan 24, 2024

    @sukalpomitra
    Contributor

    @jendib sure let me address your comments in my PR and then I can club the ubuntu-jav and uuntu-jetty into one Dockerfile and add it in the docs repo Dockerfile. Did I understand you correctly?

  7. jendib commented on Jan 24, 2024

    @jendib
    Member

    Exactly

  8. sukalpomitra commented on Jan 24, 2024

    @sukalpomitra
    Contributor

    @jendib Consider it done boss :P

  9. sukalpomitra commented on Jan 25, 2024

    @sukalpomitra
    Contributor

    @jendib Please check this PR for the self contained Teedy docker image

  10. sukalpomitra commented on Jan 30, 2024

    @sukalpomitra
    Contributor

    @jendib I have achieved 0 vulnerability. Once you merge the self contained docker PR, then I will raise another PR to fix the vulnerabilities

  11. sukalpomitra commented on Jun 7, 2024

    @sukalpomitra
    Contributor

    hi @jendib this PR consists changes that fixes many vulnerabilities and also adds multi arch support

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions