Update to glibc 2.25 about alpine-pkg-glibc

[dennybaa]

v2.25 has been already released!

[sgerrand]

ETA for it showing up on the release page?
https://github.com/sgerrand/alpine-pkg-glibc/releases

@willfarrell: Now. 😉

[frol]

Just for the reference, I have pushed glibc 2.25 into frolvlad/alpine-glibc:alpine-3.5_glibc-2.25, and glibc 2.24 into frolvlad/alpine-glibc:alpine-3.5_glibc-2.24 (just in case someone needs it). The :latest tag still points to the glibc 2.23 based image. I will test a few of my apps with glibc 2.25 myself before I make it "stable" (:latest).

[CodingFabian]

by now we would need 2.25 :)

[andyshinn]

I don't really have time to work on this these days (hence why I migrated it to someone else). Though, it looks like I have write access. If a pull request is opened (and it builds fine in Circle CI) then I can merge it.

[dennybaa]

@frol https://github.com/stackfeed/alpine-pkg-glibc/releases/
@sgerrand originally wanted to fix /lib location, but come up with my own repo, since seems that you've been busy for a few month. Anyways #36

[sgerrand]

Agreed, it's an important update. Thy will be done!

[platten]

👍

[gzm55]

+1

[g1franc]

+1

[frol]

@sgerrand Is there a road blocker in making the package? Can we help somehow?

[frol]

@andyshinn It would be great if you can help somehow with the update.

[sgerrand]

I'm happy to continue work on this, life just got in the way last year.

[willfarrell]

I'm hoping for v2.25.
Docker Security scanner complains about: glibc 2.23
CVE-2016-3075 (Major) - patched in v2.24
CVE-2016-6323 (Major) - patched in v2.25
Nothing critical, but nice to have.

[willfarrell]

It has? Awesome! ETA for it showing up on the release page?
https://github.com/sgerrand/alpine-pkg-glibc/releases

[sgerrand]

📝 Released here: https://github.com/sgerrand/alpine-pkg-glibc/releases/tag/2.25-r0

[willfarrell]

Docker Says: "Your image is clean! No known vulnerabilities were found."
It's all about the wins. Thanks!