Vien

> Hi, I noticed in alpine:3.16.0 the libxml2 version is 2.9.14-r0, does this version fix the vulnerability? Many thanks The same to me when using the alpine:latest (3.16.2) ``` docker...

It seems to be fixed in 3.16-main with libxml2-2.9.14.-r1 https://security.alpinelinux.org/srcpkg/libxml2

I think we should upgrade to libxml2 with version 2.10.2 for fixing other CVEs https://github.com/alpinelinux/aports/blob/master/main/libxml2/APKBUILD

Hi @ncopa, could you please help to have a look? Thank you!

> > Oddly, as of today I'm no longer getting warnings from Trivy about this in Alpine 3.16.1. > > Yeah, I tested about 24 hours ago and I didn't...

> ``` > busybox-1.35.0-r15 - Size optimized toolbox of many common UNIX utilities > ``` The same with apline:3.16 & alpine:3.16.0 which have been found by Microsoft Defender for Cloud....

The same with https://github.com/Azure/acr/issues/548

> Hi @vienleidl > > In the `az containerapp compose create` command, if the specified environment name does not exist in the resource group or the environment resource Id does...

> Hi @vienleidl > > With `az containerapp compose create` the auto created environment(if specified environment does not exit) is not support vnet option, recommend using `az containerapp env create`,...

It's fixed by this PR https://github.com/atmoz/sftp/pull/372