Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore(php-fpm): update base image to the latest Ubuntu Noble #806

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

chore(php-fpm): update base image to the latest Ubuntu Noble #806

wants to merge 1 commit into from
+4 −4

Conversation

sjinks
Copy link
Member

@sjinks sjinks commented Jul 4, 2024

No description provided.

@sjinks sjinks requested a review from a team as a code owner July 4, 2024 12:54
@sjinks sjinks self-assigned this Jul 4, 2024
@github-actions GitHub Actions
Copy link

github-actions bot commented Jul 4, 2024 •
edited
Loading

Trivy Scan Report

ghcr.io/automattic/vip-container-images/php-fpm:8.3 (ubuntu 24.04)

Package Vulnerability ID Severity Installed Version Fixed Version Links
libgssapi-krb5-2 CVE-2024-37370 MEDIUM 1.20.1-6ubuntu2 1.20.1-6ubuntu2.1 https://avd.aquasec.com/nvd/cve-2024-37370
libgssapi-krb5-2 CVE-2024-37371 MEDIUM 1.20.1-6ubuntu2 1.20.1-6ubuntu2.1 https://avd.aquasec.com/nvd/cve-2024-37371
libk5crypto3 CVE-2024-37370 MEDIUM 1.20.1-6ubuntu2 1.20.1-6ubuntu2.1 https://avd.aquasec.com/nvd/cve-2024-37370
libk5crypto3 CVE-2024-37371 MEDIUM 1.20.1-6ubuntu2 1.20.1-6ubuntu2.1 https://avd.aquasec.com/nvd/cve-2024-37371
libkrb5-3 CVE-2024-37370 MEDIUM 1.20.1-6ubuntu2 1.20.1-6ubuntu2.1 https://avd.aquasec.com/nvd/cve-2024-37370
libkrb5-3 CVE-2024-37371 MEDIUM 1.20.1-6ubuntu2 1.20.1-6ubuntu2.1 https://avd.aquasec.com/nvd/cve-2024-37371
libkrb5support0 CVE-2024-37370 MEDIUM 1.20.1-6ubuntu2 1.20.1-6ubuntu2.1 https://avd.aquasec.com/nvd/cve-2024-37370
libkrb5support0 CVE-2024-37371 MEDIUM 1.20.1-6ubuntu2 1.20.1-6ubuntu2.1 https://avd.aquasec.com/nvd/cve-2024-37371

@sjinks
Copy link
Member Author

sjinks commented Jul 11, 2024

See: https://launchpad.net/~ondrej/+archive/ubuntu/php/+packages?field.name_filter=&field.status_filter=published&field.series_filter=noble

@sjinks
Copy link
Member Author

sjinks commented Jul 11, 2024

8.1 and 8.2 will need

deluser --remove-home --quiet ubuntu

@sjinks sjinks added the Blocked label Jul 12, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@rebeccahum rebeccahum rebeccahum approved these changes

Assignees

@sjinks sjinks

Labels
Blocked
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@sjinks @rebeccahum