UNCLASSIFIED - NO CUI

Skip to content

Resolve "test updated base-image"

Neil Prestemon requested to merge 18-test-updated-base-image into development

#18 (closed)

If this is your first merge, please use the Initialization Template.

Due to numerous unfixed CVE's in the base-image's aspnet and dotnet packages (including cve-2024-20672), we will build a new version of this application on top of a redhat/ubi/ubi9 image using the patched Microsoft aspnetcore. This CVE is fixed in kb 5033734 according to: (https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20672). Image will omit the labels 'latest-121' and 'latest' in order to permit testing of this published iron bank version, prior to tagging it as the latest available release.

For more information please visit Iron Bank Documentation

Note: Please be sure you create an issue related to this merge request and the issue is labeled StatusReview, this will initiate a CHT member review of your merge request.
Edited by Neil Prestemon

Merge request reports