New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

The latest image (4.10.0-fpm-alpine) has vulnerabilities #287

Closed

jwal8 opened this issue May 20, 2022 · 1 comment

jwal8 commented May 20, 2022 •

edited

Loading

It would be highly appreciated if you updated the xz and curl packages in the next version.

For those who cant wait and want a patched and more secure version av the matomo image just make your own.

Ex. of a Dockerfile to patch the image with the upgraded versions of xz and curl

FROM matomo:4.10.0-fpm-alpine RUN apk upgrade xz curl USER www-data

and then run docker build etc

The text was updated successfully, but these errors were encountered:

Collaborator

J0WI commented Nov 26, 2022

https://github.com/docker-library/faq#why-does-my-security-scanner-show-that-an-image-has-cves

J0WI closed this as completed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment