3 ms·
> the legendary security support from upstream Debian Anytime I do a vulnerability scan of a Debian image (updated via apt) using AWS ECR I get a laundry list
by topspin 5y ago
> the legendary security support from upstream Debian
Anytime I do a vulnerability scan of a Debian image (updated via apt) using AWS ECR I get a laundry list of open issues including a few high severity CVEs. Meanwhile images based on Amazon Linux, Alpine or Oracle Linux are clear or have only few lower severity CVEs. I haven't looked at AlmaLinux recently but I'll need to soon; if it is anything like CentOS I expect the scan will be fairly clean.
Whatever rationale there might be for this it is difficult to explain to stake holders. In any case 'legendary' seems a stretch comparatively speaking.
- moffkalast 5y agoDebian is legendary for being the most widely used Linux distro, and as such it has the most support. And that is probably the most important thing, but security is not one of its strengths.
- oynqr 5y agoVulnerability scanners love false positives.
- goodpoint 5y agoYou really need a better vulnerability scanner then. Debian is one of the most security-centric distributions.