docker-alpine

docker-alpine copied to clipboard

Busybox 1.34.1-r4 has Vulnerability CVE-2022-28391

6

Hello! Hope this is the place to report security warnings [Blackduck](https://www.synopsys.com/software-integrity/security-testing/software-composition-analysis.html) reports security warning about the busybox and ssl_client libraries in the alpine image. We currently use the following from...

dao1202

github.com not reachable from alpine image

26

Using the latest alpine `3.13` I'm unable to reach github. Have tried this on Docker for Mac and a ubuntu 20.04 with rootless docker. See here some things I tried...

marcofranssen

I know there are tools like apline-make-rootfs can do similar thing. after I try out several combination I found the closest thing is `./alpine-make-rootfs --branch edge -p apk-tools -p alpine-keys`....

braindevices

Alpine Images are packed with a netcat binary installed at /usr/bin/nc While netcat do have legitimate use cases but they are often being exploited by the hackers specially abusing the...

dibsy

awk vulnerability (CVE-2022-30065)

24

https://nvd.nist.gov/vuln/detail/CVE-2022-30065 is showing up (in Black Duck scans) as a vulnerability in the version of busybox used by Alpine 3.16.0. I'm somewhat surprised that this hasn't been mentioned yet here,...

eli-darkly

For ubuntu and alpine

shakaran

shakaran

apk update - ERROR: https://dl-cdn.alpinelinux.org/alpine/edge/main: Permission denied

41

Hi, sorry, if this bug is reported towards the wrong repo. We hit following errors in edge: ``` Alpine latest: [root@dockerserver ~]# docker run -it --rm alpine:latest /bin/sh / #...

ronnicek

curl vulnerability CVE-2022-32207

2

Alpine 3.16.x and 3.15.x currently provide packaging up to 7.83.1 for Curl. Curl 7.84.0 is currently in [edge](https://pkgs.alpinelinux.org/package/edge/main/x86_64/curl) but most users and downstream users would need to wait till it...

david-yu

the difference between source in alpine 3.10 and 3.16 after add bash

2

build machine env: ``` [root@sre-tools daoren]# cat /etc/os-release NAME="CentOS Linux" VERSION="7 (Core)" ID="centos" ID_LIKE="rhel fedora" VERSION_ID="7" PRETTY_NAME="CentOS Linux 7 (Core)" ANSI_COLOR="0;31" CPE_NAME="cpe:/o:centos:centos:7" HOME_URL="https://www.centos.org/" BUG_REPORT_URL="https://bugs.centos.org/" CENTOS_MANTISBT_PROJECT="CentOS-7" CENTOS_MANTISBT_PROJECT_VERSION="7" REDHAT_SUPPORT_PRODUCT="centos" REDHAT_SUPPORT_PRODUCT_VERSION="7" [root@sre-tools daoren]#...

oldthreefeng