From 5a7ccdf02fb7779626c95543d144c8022a1d8594 Mon Sep 17 00:00:00 2001 From: Thomas Ubensee <34603111+tomuben@users.noreply.github.com> Date: Mon, 13 May 2024 10:51:21 -0300 Subject: [PATCH] #891: Ignored Kernel CVE (#893) fixes #891 --- .current_gitmodules | 2 +- doc/changes/changes_8.0.0.md | 2 ++ .../flavor_base/security_scan/.trivyignore | 1 + .../standard-EXASOL-all/flavor_base/security_scan/.trivyignore | 1 + .../flavor_base/security_scan/.trivyignore | 1 + script-languages | 2 +- 6 files changed, 7 insertions(+), 2 deletions(-) diff --git a/.current_gitmodules b/.current_gitmodules index 99f481b1..16c360a7 100644 --- a/.current_gitmodules +++ b/.current_gitmodules @@ -1 +1 @@ -160000 1cc8270766eb0b389f8ad63b9581822f942a6cbe 0 script-languages +160000 2a63b6926cb9a2c137e45252e4311b204ec6b7f7 0 script-languages diff --git a/doc/changes/changes_8.0.0.md b/doc/changes/changes_8.0.0.md index d086aa4e..7f0a4844 100644 --- a/doc/changes/changes_8.0.0.md +++ b/doc/changes/changes_8.0.0.md @@ -34,6 +34,7 @@ n/a - #867: Fixed conda-based SLC builds, updated packages and ignore Kernel CVEs - #879: Updated package + - #891: Ignored Kernel CVE Attention: The CVE's below can't be fixed by the container itself, rather need to be addressed by the host system executing them. @@ -44,3 +45,4 @@ Attention: The CVE's below can't be fixed by the container itself, rather need t - CVE-2024-26583 - CVE-2024-26828 - CVE-2024-26865 + - CVE-2024-26585 \ No newline at end of file diff --git a/flavors/r-4-minimal-EXASOL-6.2.0/flavor_base/security_scan/.trivyignore b/flavors/r-4-minimal-EXASOL-6.2.0/flavor_base/security_scan/.trivyignore index d28ae0e0..77a77c9d 100644 --- a/flavors/r-4-minimal-EXASOL-6.2.0/flavor_base/security_scan/.trivyignore +++ b/flavors/r-4-minimal-EXASOL-6.2.0/flavor_base/security_scan/.trivyignore @@ -22,6 +22,7 @@ CVE-2024-1086 CVE-2024-26597 CVE-2024-26828 CVE-2024-26865 +CVE-2024-26585 #CVE-2022-23648 is a bug in containerd, not issue for containers CVE-2022-23648 #issue in cgroups, but no threat for ScriptLanguageContainer diff --git a/flavors/standard-EXASOL-all/flavor_base/security_scan/.trivyignore b/flavors/standard-EXASOL-all/flavor_base/security_scan/.trivyignore index 1355ac39..00c9b4d7 100644 --- a/flavors/standard-EXASOL-all/flavor_base/security_scan/.trivyignore +++ b/flavors/standard-EXASOL-all/flavor_base/security_scan/.trivyignore @@ -23,6 +23,7 @@ CVE-2024-26597 CVE-2024-26583 CVE-2024-26828 CVE-2024-26865 +CVE-2024-26585 #CVE-2022-23648 is a bug in containerd, not issue for containers CVE-2022-23648 #issue in cgroups, but no threat for ScriptLanguageContainer diff --git a/flavors/template-Exasol-all-java-17/flavor_base/security_scan/.trivyignore b/flavors/template-Exasol-all-java-17/flavor_base/security_scan/.trivyignore index d28ae0e0..77a77c9d 100644 --- a/flavors/template-Exasol-all-java-17/flavor_base/security_scan/.trivyignore +++ b/flavors/template-Exasol-all-java-17/flavor_base/security_scan/.trivyignore @@ -22,6 +22,7 @@ CVE-2024-1086 CVE-2024-26597 CVE-2024-26828 CVE-2024-26865 +CVE-2024-26585 #CVE-2022-23648 is a bug in containerd, not issue for containers CVE-2022-23648 #issue in cgroups, but no threat for ScriptLanguageContainer diff --git a/script-languages b/script-languages index 1cc82707..2a63b692 160000 --- a/script-languages +++ b/script-languages @@ -1 +1 @@ -Subproject commit 1cc8270766eb0b389f8ad63b9581822f942a6cbe +Subproject commit 2a63b6926cb9a2c137e45252e4311b204ec6b7f7