docker-alpine

docker-alpine copied to clipboard

libxml2 vulnerablility CVE-2022-2309 in alpine:3.16.0

7

Hi, I noticed in alpine:3.16.0 the libxml2 version is 2.9.14-r0, does this version fix the vulnerability? Many thanks

fred214

New medium priority openssl vulnerability: CVE-2022-2097

16

There is a new vulnerability being reported by azure/container-scan and trivy on our builds: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2097 Also flagged by Snyk at: https://snyk.io/test/docker/alpine:3.16.0 I cannot find any workarounds. Looks like the alpine...

post-svejk

If we build & distribute our product using alpine linux docker image do we need to open source our source code because of busybox GPL license

divagartech

A fatal error has been detected by the Java Runtime Environment

4

Hello, we're running into a `SIGSEGV` on Alpine, when using the latest [GCP Java PubSub Library ](https://github.com/googleapis/java-pubsub/issues/947) I'm able to reproduce on Alpine 3.10 and 3.15. I'm attaching the log,...

busches

pcre2 vulnerability (CVE-2022-1586 & CVE-2022-1587)

4

The updated package (10.40-r0) is already available in https://pkgs.alpinelinux.org/packages?name=pcre2&branch=v3.16 https://pkgs.alpinelinux.org/packages?name=pcre2&branch=v3.15

AndreiMuresan

gpg: not found in docker alpine:3.16.0

1

> image: `alpine:latest` [](https://hub.docker.com/_/alpine) ```bash /bin/sh: 1: gpg: not found ``` 

TCCinTaiwan

where to find source for alpine-minirootfs-3.14.6-x86_64.tar.gz

1

Hello, where can one find the source used for tarballs e.g. alpine-minirootfs-3.14.6-x86_64.tar.gz https://github.com/alpinelinux/docker-alpine/blob/acdada9286850d1b48abd8944ca4f8f8ea909372/x86_64/Dockerfile

trevor-webster

Zlib CVE-2018-25032 vulnerability

1

There is vulnerability in zlib library https://nvd.nist.gov/vuln/detail/CVE-2018-25032 The alpine image is vulnerable to this. Is it possible to update the base image and latest tag?

snemets

Only first response from DNS is used

6

### Summary When docker host machine has several DNS servers, only first response is used by applications in alpine container. ### Details I have debian host with networkmanager and openvpn...

vsevolod-fedorov

DNS lookups broken in 3.13

12

DNS lookups seem broken in the `alpine:3.13` docker image. ``` $ sudo docker run -ti --rm alpine:3.13 ping -c 1 google.com ping: bad address 'google.com' $ sudo docker run -ti...

carlosefr