pulsarctl icon indicating copy to clipboard operation
pulsarctl copied to clipboard

Published 20 hours ago • verified publisher icon streamnative

Critical security vulnerability CVE-2022-37434 in alpine:3.16.0

Open utahkay opened this issue 2 years ago • 2 comments

Snyk reports a critical CVE (CVE-2022-37434) in docker/amd64-linux.Dockerfile

It is because of zlib in the base image alpine:3.16.0

More context in Snyk.io here

utahkay avatar Aug 22 '22 16:08 utahkay

I think the maintainer of zlib has made a fix in the code, but has not made a release containing the fix

https://github.com/madler/zlib/issues/686

utahkay avatar Aug 22 '22 20:08 utahkay

@madler has done the new build, the 1.2.13 has been released with the CVE-2022-37434 fix.

Neustradamus avatar Oct 14 '22 08:10 Neustradamus