ThomasKroghMortensen opened a new issue, #231: URL: https://github.com/apache/couchdb-docker/issues/231
## Expected Behavior No Critical (or High CVE reported for image couchdb:3.2.2. ## Current Behavior Multiple CVEs are reported from Trivy scan of eh couchdb:3.2.2 [couchdb-3.2.2(2023-01-10).zip](https://github.com/apache/couchdb-docker/files/10380801/couchdb-3.2.2.2023-01-10.zip) Especially the Following Critical CVEs: <html> <body> <!--StartFragment--><div class="table-wrap" style="outline: none !important; margin: 0px; padding: 0px; color: rgb(23, 43, 77); font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Oxygen, Ubuntu, "Fira Sans", "Droid Sans", "Helvetica Neue", sans-serif; font-size: 14px; font-style: normal; font-variant-ligatures: normal; font-variant-caps: normal; font-weight: 400; letter-spacing: normal; orphans: 2; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; background-color: rgb(255, 255, 255); text-decoration-thickness: initial; text-decoration-style: initial; text-decoration-color: initial;"> Image | CVE | Severity | Age (days) | Comments | -- | -- | -- | -- | -- couchdb_3.2.2.tar|[CVE-2021-46848](https://security-tracker.debian.org/tracker/CVE-2021-46848)|critical|71| | couchdb_3.2.2.tar|[CVE-2022-32221](https://security-tracker.debian.org/tracker/CVE-2022-32221)|critical|29| | couchdb_3.2.2.tar|[CVE-2022-47629](https://security-tracker.debian.org/tracker/CVE-2022-47629)|critical|14| | ## Possible Solution Update the affected libs. See [couchdb-3.2.2(2023-01-10).zip](https://github.com/apache/couchdb-docker/files/10380801/couchdb-3.2.2.2023-01-10.zip) ## Steps to Reproduce (for bugs) Run a new image scan ## Context Security issues to deploy image ## Your Environment <!--- Include as many relevant details about the environment you experienced the bug in --> * Version used: (couchdb:3.2.2 (debian 11.6)) build ~2023-01-03 :  -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
