Comments (3)
alessfg
commented on August 17, 2024
There's no plans to release a new version of stable NGINX for the time being. I would recommend using the latest mainline NGINX release if you want to use a version that addresses that CVE.
from docker-nginx-unprivileged.
ingokofler
commented on August 17, 2024
@alessfg Thanks for the clarification. Just one final question. According to https://www.nginx.com/blog/nginx-1-16-1-17-released/ it states that 1.16 will get security updates.
"Stable receives fixes for high‑severity bugs, but is not updated with new features"
Is there any threshold for the CVE score or is this decided on a case-by-case basis?
from docker-nginx-unprivileged.
alessfg
commented on August 17, 2024
It is indeed decided on a case-by-case basis and it's been determined that that CVE is not a high-severity CVE.
from docker-nginx-unprivileged.
Related Issues (20)
- Please add bookworm-stable tag with current stable version based on Debian 12 HOT 5
- Non-container guide HOT 2
- Allow contaiener root user to start nginx process and its workers when used in rootless podman HOT 1
- Publish image to a registry that is not rate-limited HOT 4
- nginx defaults to 8080 even if we tell otherwise HOT 8
- Add `;` in readme for Line 35
- Update image to mitigate CVE-2023-44487 vulnerability HOT 3
- Improve local testing docs
- Does image build include installing security updates? HOT 1
- Add another common issue to the README section
- proxy_bind transparent whithout root user HOT 1
- Clarify how to use the different base image versions. HOT 1
- Alpine 3.19 Upgrade HOT 1
- Stable Perl images using mainline nginx? HOT 1
- Upgrade Base Image of nginxinc/docker-nginx-unprivileged from stable-bullseye to stable-bookworm HOT 6
- Container images pushed to Dockerhub are changing checksums without changing version HOT 3
- nginxplus version HOT 2
- Images with tags fixing alpine versions are missing HOT 2
- Pack and run Vue Application based on nginx-unprivileged in Kubernetes HOT 3
- CVE-2023-50387 in systemd 252.22 in nginxinc/nginx-unprivileged:latest
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from docker-nginx-unprivileged.