Skip to content

Vulnerability issue legacy python versions are present <python 2/python 3.6> #721

@sivankumar86

Description

@sivankumar86

Our security scan flags the image that it has old python version related packges. Could you clean up old python packages which is having EOL ? i.e Remove python 2.x and python 3.6.x related libs.

yum list | grep python3-libs

Tested in below version as well.

docker run --rm -it --entrypoint /bin/sh confluentinc/[cp-kafka-connect-base](https://confluentinc.atlassian.net/browse/CP-kafka-connect-base):7.7.1

verified latest version and it is still contain python 3.6 which is no longer supported

sh-4.4# ls /lib/python3.*
/lib/python3.6:
site-packages

/lib/python3.9:
site-packages
sh-4.4#

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions