3 ms·
Some google-managed base images would be helpful. The last time I checked, some of the major public docker images were still shellshock-vulnerable. Pre-installe
by philip1209 12y ago
Some google-managed base images would be helpful. The last time I checked, some of the major public docker images were still shellshock-vulnerable. Pre-installed GCE tools would be helpful. Perhaps automated environment variables about region, etc.
- 23david 12y agoWhich images are still shellshock vulnerable? Wasn't aware that was an issue if we stick to the docker-managed images.
- voltagex_ 12y agoWhich? See https://gist.github.com/voltagex/582473e3b86ee5ae4438 https://gist.github.com/voltagex/582473e3b86ee5ae4438 - I ran some tests on the three most popular (?) official base images.
- shykes 12y agoIf you have found an official Docker image that is still shellshock vulnerable, the library maintainers [1] would love to hear from you as they take that stuff quite seriously. As far as I know the entire library is fully patched. [1] https://github.com/docker-library/official-images https://github.com/docker-library/official-images
- tianon 12y agoAs one of the maintainers in question, I'd absolutely mirror this whole statement: if any of the image upstreams have an important update available that isn't applied, we're very interested in rectifying that.