[CASSANDRA-15785] 3.11.6 Image Vulnerabilities

• Type: Bug
• Status: Resolved
• Priority: Normal
• Resolution: Won't Fix
• Component/s: Build
• Platform: All
• Assignee: Unassigned
• Reporter: Gil Tohar
• Created: 04/May/20 18:07
• Updated: 06/May/20 16:18
• Resolved: 05/May/20 16:13

Description

My team has taken the Bitnami Cassandra image, 3.11.6, and scanned it using our image vulnerability scanner, and discovered 4 issues. These are CVE-2019-5436, CVE-2019-5481, CVE-2019-5482, CVE-2020-1967. The solutions entail updating 1) curl and 2) openssl in the image, as described in the attached image.