docker-rust image in dockerhub (1.64.0-slim-bullseye) has 2 Critical Vulnerabilities
Nobody has claimed this yet.
Assessment
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Newbie friendliness
- 25/100
Research direction
Start by inspecting how the 1.64.0-slim-bullseye image is built and how its Debian packages are selected, then verify the reported libarchive13 and libdb5.3 vulnerabilities against the image. Done means the image is rebuilt with those critical vulnerabilities addressed and the vulnerability scan no longer reports them.
Written by the indexing model from the issue text.
Description
│ libarchive13 │ CVE-2022-26280 │ CRITICAL │ 3.4.3-2+deb11u1 │ │ libarchive: an out-of-bounds read via the component │
│ │ │ │ │ │ zipx_lzma_alone_init │
│ │ │ │ │ │ https://avd.aquasec.com/nvd/cve-2022-26280
───────────────────────────────────────────────┤
│ libdb5.3 │ CVE-2019-8457 │ CRITICAL │ 5.3.28+dfsg1-0.8 │ │ sqlite: heap out-of-bound read in function rtreenode() │
│ │ │ │ │ │ https://avd.aquasec.com/nvd/cve-2019-8457 │
- Dominant language
- Dockerfile
- Stars
- 537
- Forks
- 111
- Avg merge
- 1d 39m
- Merged PRs (30d)
- 4
Getting set up
This project ships no dev container, Dockerfile or contributing guide, so setting up is up to you: start from its README, and see our first-contribution guide for the general steps.
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from rust-lang/docker-rust
-
Difficulty 1/5 Under an hour Newbie friendliness 68/100
rust-lang/docker-rust#159 · 1 reaction ·
-
Difficulty 3/5 1-2 days Newbie friendliness 48/100
rust-lang/docker-rust#278 ·
-
Difficulty 5/5 Over a week Newbie friendliness 30/100
rust-lang/docker-rust#264 ·
-
Difficulty 3/5 1-2 days Newbie friendliness 52/100
rust-lang/docker-rust#263 ·
-
Difficulty 3/5 1-2 days Newbie friendliness 35/100
rust-lang/docker-rust#248 · 1 comment ·
All issues in rust-lang/docker-rust
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 70/100
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
gnosis/gnosis_vpn#540 ·
Maintainers usually reply within 1 day
-
e2e-failure ready-to-code
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
redhat-developer/rhdh-plugin-export-overlays#4261 · 1 comment ·
Maintainers usually reply within 1 day
-
Difficulty 1/5 Under an hour Newbie friendliness 86/100
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
ggml-org/whisper.cpp#4103 ·
Maintainers usually reply within 1 day