Michael Simons
Michael Simons
> There will be one false positive vulnerability in 8.0.300 release. Correct? Yes > Which will be addressed in June? That is what we are working towards.
> Thanks a lot. Once last question please. Which false positive vulnerability that will be remediated in June? CVE name? Please see my [earlier response](https://github.com/dotnet/dotnet-docker/issues/5325#issuecomment-2088727576).
There is a [related issue](https://github.com/dotnet/release/issues/419) in the private dotnet/release repo.
Any progress on a fix for this?
> Source build images: > External: Ubuntu 20.04 > Internal: Azure Linux 3.0 Can you explain the thinking here more? I see this section is under managed builds. Are you...
> This is how to images for source build are configured in ASP.NET today: https://github.com/dotnet/arcade/blob/main/eng/common/templates-official/job/source-build.yml#L49-L56 . I assume that the internal builds are configured to use Mariner for a reason....
cc @NikolaMilosavljevic
@lbussell - Can help out here?
> @MichaelSimons do you think we need a note somewhere in our documentation about this with a link to an issue (perhaps in [this sample](https://github.com/dotnet/dotnet-docker/tree/main/samples/complexapp) where we have a test...
> @MichaelSimons Are you able to help here? The .NET team does not own these images, they are produced by the devcontainers team (and are based on the .NET images)....