Updating packages within default docker images

Moderator: mike

Post Reply
lwhitworth
Posts: 1
Joined: Tue Dec 14, 2021 4:17 pm

Updating packages within default docker images

Post by lwhitworth » Fri Jan 21, 2022 8:39 am

Hi all,

Our in house vulnerability scanner is flagging large numbers of java vulnerabilities in the docker volume system (e.g. /var/lib/docker/overlay2/98ab9119f41fae65be2b160eb61a61159f9f549988a93bc9a92d3068311ec373/diff/usr/lib/jvm/java-8-oracle/jre/lib/rt.jar). Is there any way I can update the packages in the default docker containers listed below and get it to persist?

root@eve-ng-pro:~# docker -H tcp://127.0.0.1:4243 images -a
REPOSITORY TAG IMAGE ID CREATED SIZE
registry 2 b8604a3fe854 2 months ago 26.2MB
eve-wireshark latest 513dbb9fd3c4 4 months ago 1.58GB
eve-desktop latest ca1333621bd7 19 months ago 3.65GB
eve-gui-server latest 9db19c879a17 19 months ago 3.84GB
eve-firefox latest 0266d108a1bb 20 months ago 2.12GB

If not we'll probably just end up getting users to run native tools and have to remove these. Is this possible? I've played around with "apt purge eve-ng-dockers" but the images persisted seemingly.

Cheers,

Luke

Uldis (UD)
Posts: 5068
Joined: Wed Mar 15, 2017 4:44 pm
Location: London
Contact:

Re: Updating packages within default docker images

Post by Uldis (UD) » Sat Feb 12, 2022 5:42 pm

Kasey07 wrote:
Fri Feb 11, 2022 11:06 am
I'm still pondering the thought of using EVE-NG. I'm curious as to those using EVE-NG, which EDITION (not version) you are using (Community or Pro https://testmyspeed.onl/) and why.
Post deleted because of spam links posted in text body

Post Reply