Closed
Description
Hi
i have this on line in my dockerfile: FROM openjdk:8-alpine
and my aqua scanner detects these vulnerabilities
what changes i can make in my dockerfile to get latest or specific version to resolve at least few if not all vulnerabilities?
| Name | Resource | Severity | Score | Fix Version |
|---|---|---|---|---|
| CVE-2019-14697 | musl | high | 7.5 | 1.1.20-r5 |
| CVE-2018-1000654 | libtasn1 | high | 7.1 | 4.14-r0 |
| CVE-2019-12900 | libbz2 | high | 7.5 | 1.0.6-r7 |
| CVE-2019-17371 | libpng | medium | 4.3 | None |
| CVE-2019-15133 | giflib | medium | 4.3 | None |
| CVE-2018-14498 | libjpeg-turbo | medium | 4.3 | 1.5.3-r5 |
| CVE-2019-2745 | openjdk8 | low | 1.9 | 8.222.10-r0 |
| CVE-2019-2762 | openjdk8 | medium | 5 | 8.222.10-r0 |
| CVE-2019-2766 | openjdk8 | low | 2.6 | 8.222.10-r0 |
| CVE-2019-2769 | openjdk8 | medium | 5 | 8.222.10-r0 |
| CVE-2019-2786 | openjdk8 | low | 2.6 | 8.222.10-r0 |
| CVE-2019-2816 | openjdk8 | medium | 5.8 | 8.222.10-r0 |
| CVE-2019-2842 | openjdk8 | medium | 4.3 | 8.222.10-r0 |
| CVE-2019-7317 | openjdk8 | low | 2.6 | 8.222.10-r0 |