docker-tor
docker-tor copied to clipboard
lncm
Update base image
When doing a docker scan lncm/tor, the report throws out a LOT of critical vulnerabilities that need patching. At the bottom of the report, it recommends updating to Debian:11-slim to get rid of most of them
Project name: docker-image|lncm/tor
Docker image: lncm/tor
Platform: linux/amd64
Base image: debian:10.10-slim
**Tested 85 dependencies for known vulnerabilities, found 61 vulnerabilities.**
Base Image Vulnerabilities Severity
debian:10.10-slim 61 10 high, 6 medium, 45 low
Recommendations for base image upgrade:
Major upgrades
Base Image Vulnerabilities Severity
debian:11-slim 37 1 high, 2 medium, 34 low
Testing this out. You may try nolim1t/tor:0.4.6.7 if you have an arm64 architecture, but will probably build 0.4.7.1-alpha soon for all architectures
@nolim1t , man, you're absolutelly awesome! Thanks a lot for building this. I'm switching NOW.
Why did the image grew 20 MB from 0.4.6 to 0.4.7? Did you leave any temp files in the build process in the final image maybe?
you can also wait for lncm/tor:0.4.7.1-alpha if you wanna live on the edge a little
you can also wait for
lncm/tor:0.4.7.1-alphaif you wanna live on the edge a little
I'm using your Dockerfile and changing it to 4.7.1-alpha (using tor-0.4.7.1-alpha.tar.gz ) ...... i can't wait to live on the edge :)
Project name: docker-image|lncm/tor Docker image: lncm/tor Platform: linux/amd64 Base image: debian:10.10-slim
Tested 85 dependencies for known vulnerabilities, found 61 vulnerabilities.
Base Image Vulnerabilities Severity debian:10.10-slim 61 10 high, 6 medium, 45 low
Recommendations for base image upgrade:
Major upgrades Base Image Vulnerabilities Severity debian:11-slim 37 1 high, 2 medium, 34 low
This is still happening in your latest Dockerfile, as the base image is the same.
Just replace all references from debian:buster-slim to debian:11-slim
Project name: docker-image|lncm/tor Docker image: lncm/tor Platform: linux/amd64 Base image: debian:10.10-slim Tested 85 dependencies for known vulnerabilities, found 61 vulnerabilities. Base Image Vulnerabilities Severity debian:10.10-slim 61 10 high, 6 medium, 45 low Recommendations for base image upgrade: Major upgrades Base Image Vulnerabilities Severity debian:11-slim 37 1 high, 2 medium, 34 low
This is still happening in your latest Dockerfile, as the base image is the same.
Just replace all references from
debian:buster-slimtodebian:11-slim
yes that is still being built.
You'll have to wait if you want the amd64 image