Vulnerabilities with Docker images

[antoniodasilvals]

My actions before raising this issue

• [X] Read/searched the docs
• [ ] Searched past issues

Hello, we did download your product with a prebuilt Docker image and did a scan of it with Harbor. The scan revealed that there are several packages with critical/high vulnerabilities. Do you plan to update or patch those vulnerabilities with a new Docker image?

Expected Behaviour

We (naively?) expected to get a Docker with updated versions.

Current Behaviour

Packages that show critical vulnerabilities: curl, freetype, libcurl, pcre2, etc.

Possible Solution

Update packages?

Steps to Reproduce (for bugs)

We used last version of Harbor

Context

As it is, we can't deploy it in our environment

Your Environment

Linux farm

Next steps

Simply wanted to know if you plan to update it or not... Thanks,

[nmanovic]

@antoniodasilvals , please use images from the dockerhub: https://hub.docker.com/r/cvat

[nmanovic]

Need to organize scanning of CVAT images using a solution (for example, dockerHub Vulnerability Reporting)