KiviDB refreshes 1.1.0 images, cutting seven Debian-fixable CVEs
A GitHub commit dated October 17th adds a workflow to update released container images with Debian security patches. KiviDB's Trivy scan fell from four critical and 62 high findings to one critical and 58 high; the project says Debian had no fixes for the remaining findings.
By Ryan Merket · Published
Primary source: Hacker News
Why it matters
KiviDB's October 17th commit documents a workflow for updating released container images with Debian security patches without changing the released KiviDB binary. Its reported scan still had 59 critical and high findings, which the project said had no Debian fix available.
A KiviDB commit dated October 17th in the project repository adds a workflow for refreshing released container images with Debian security updates. For version 1.1.0, the project reports that its Trivy scan fell from four critical and 62 high findings to one critical and 58 high after applying Debian's fix for seven findings, including an update to perl-base 5.36.0-7+deb12u4.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.