Branch: refs/heads/2.1.0 Home: https://github.com/tribe29/checkmk Commit: 33f8288e98a4a5a30a048713e85dfc0730d48eaf https://github.com/tribe29/checkmk/commit/33f8288e98a4a5a30a048713e85dfc073… Author: Maximilian Wirtz <maximilian.wirtz(a)tribe29.com> Date: 2022-11-02 (Wed, 02 Nov 2022) Changed paths: A .werks/14918 M buildscripts/docker_image_aliases/IMAGE_CMK_BASE/Dockerfile M buildscripts/docker_image_aliases/IMAGE_CMK_BASE/meta.yml M buildscripts/scripts/test-docker-integration.jenkins M docker/Dockerfile M docker/Makefile M tests/docker/test_docker.py Log Message: ----------- 14918 SEC Change base image of docker container With this Werk we change the base image of the Checkmk docker container from Debian buster to Ubuntu jammy. Ubuntu jammy has more up to date packages. This should reduce the amount of "vulnerabilities" found in the docker container by ~90%. Please note that these vulnerabilities are either fixed by a backport of the fix or the configuration did not allow a exploitation. The packages in the container were updated whenever a new container was build. Unfortunately not all vulnerability-scanners were able to recognise this. To our knowledge none of the vulnerabilities were exploitable. We rate this with a CVSS of 0 (None) (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N). This CVSS is primarily meant to please automatic scanners. Change-Id: I9129099f9f5bb814c3c9a5893f7be1229eaa7d8d