Address CVE-2023-4622, CVE-2023-4623, CVE-2023-4921, CVE-2023-20569

*Ignored CVE-2023-4622, CVE-2023-4623, CVE-2023-4921, because they are kernel issues and not container issues * Ignore CVE-2023-20569, because it is an issue of the host system (AMD CPUs) can't be fixed for the container image
exasol · Sep 29, 2023 · e7eed72 · e7eed72
1 parent 3dcfadb
commit e7eed72
Show file tree

Hide file tree

Showing 3 changed files with 15 additions and 0 deletions.
diff --git a/flavors/python-3.8-minimal-EXASOL-6.2.0/flavor_base/security_scan/.trivyignore b/flavors/python-3.8-minimal-EXASOL-6.2.0/flavor_base/security_scan/.trivyignore
@@ -15,6 +15,11 @@ CVE-2023-3390
 CVE-2023-3611
 CVE-2023-3776
 CVE-2023-3609
+CVE-2023-4622
+CVE-2023-4623
+CVE-2023-4921
+# CVE-2023-20569 does not have a fix and is a problem of host system (amd cpus)
+CVE-2023-20569 
 #CVE-2022-23648 is a bug in containerd, not issue for containers
 CVE-2022-23648
 #issue in cgroups, but no threat for ScriptLanguageContainer

diff --git a/flavors/template-Exasol-all-python-3.8-conda/flavor_base/security_scan/.trivyignore b/flavors/template-Exasol-all-python-3.8-conda/flavor_base/security_scan/.trivyignore
@@ -11,6 +11,11 @@ CVE-2022-43945
 CVE-2023-3611
 CVE-2023-3776
 CVE-2023-3609
+CVE-2023-4622
+CVE-2023-4623
+CVE-2023-4921
+# CVE-2023-20569 does not have a fix and is a problem of host system (amd cpus)
+CVE-2023-20569 
 #CVE-2022-23648 is a bug in containerd, not issue for containers
 CVE-2022-23648
 #issue in cgroups, but no threat for ScriptLanguageContainer

diff --git a/flavors/template-Exasol-all-python-3.8-cuda-conda/flavor_base/security_scan/.trivyignore b/flavors/template-Exasol-all-python-3.8-cuda-conda/flavor_base/security_scan/.trivyignore
@@ -11,6 +11,11 @@ CVE-2022-43945
 CVE-2023-3611
 CVE-2023-3776
 CVE-2023-3609
+CVE-2023-4622
+CVE-2023-4623
+CVE-2023-4921
+# CVE-2023-20569 does not have a fix and is a problem of host system (amd cpus)
+CVE-2023-20569 
 #CVE-2022-23648 is a bug in containerd, not issue for containers
 CVE-2022-23648
 #issue in cgroups, but no threat for ScriptLanguageContainer