GithubHelp home page GithubHelp logo

base's Issues

Vulnerabilities showing up in GCR scan

Severity CVSS Fix available Package Documentation
Critical 9.3 Yes Multiple CVE-2017-16997
High 7.5 Yes Multiple CVE-2018-6485
High 7.5 Yes Multiple CVE-2018-1000120
High 7.5 Yes Multiple CVE-2018-15688
High 7.5 Yes Multiple CVE-2018-12910
High 7.5 Yes Multiple CVE-2018-18311
High 7.5 Yes Multiple CVE-2015-9262
Medium 4.3 Yes binutils CVE-2018-7568
Medium 4.3 Yes binutils CVE-2018-7569
Medium 4.6 Yes setup CVE-2018-1113
Medium 5 Yes Multiple CVE-2018-1000007
Medium 6.8 Yes binutils CVE-2018-7208
Medium 4.3 Yes binutils CVE-2018-13033
Medium 5 Yes Multiple CVE-2018-1000121
Medium 6.8 Yes Multiple CVE-2018-11236
Medium 4.3 Yes binutils CVE-2018-10373
Medium 4.3 Yes binutils CVE-2018-10535
Medium 4.3 Yes Multiple CVE-2018-13988
Medium 4.3 Yes Multiple CVE-2018-10733
Medium 6.8 Yes binutils CVE-2018-7643
Medium 5 Yes Multiple CVE-2018-10767
Medium 5 Yes Multiple CVE-2018-10768
Medium 4.3 Yes binutils CVE-2018-8945
Medium 4.3 Yes Multiple CVE-2017-18267
Medium 6.4 Yes Multiple CVE-2018-1000122
Medium 5 Yes Multiple CVE-2018-1061
Medium 4.3 Yes binutils CVE-2018-10372
Medium 6.5 Yes krb5-libs CVE-2018-5729
Medium 4.3 Yes binutils CVE-2018-7642
Medium 4.3 Yes binutils CVE-2018-10534
Medium 6.4 Yes Multiple CVE-2018-1000301
Medium 5 Yes Multiple CVE-2018-1060
Medium 4.6 Yes Multiple CVE-2018-11237
Medium 5.5 Yes krb5-libs CVE-2018-5730
Unspecified 0 Yes Multiple CVE-2019-3815
Unspecified 0 Yes bind-license CVE-2018-5742
Unspecified 0 Yes Multiple CVE-2018-16864
Unspecified 0 Yes Multiple CVE-2018-16865

Permissions on /opt/jboss are too restrictive

$ ls -l /opt/
drwx------. 6 jboss jboss 4096 Jun 26 13:16 jboss

On a restrictive environment like OSE3 this means that no apps can run as they run under an arbitrary UID. Changing this to 755 would be a simple fix.

Update to CentOS 8?

Hi,

the base image is currently based on CentOS 7. Are there any plans to provide a base image that is based on CentOS 8?

xmlstarlet

It seems that the latest builds are no longer including xmlstarlet because it isn't in the CentOS repositories, but it was in the Fedora repositories.

The tool is in the EPEL repositories, so one fix is to do the following:

yum install -y epel-release && yum install -y xmlstarlet

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.