Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[BUG] Vulnerability in docker v27.03 used in k3d #1482

Closed
louisnow opened this issue Aug 6, 2024 · 0 comments · Fixed by #1519
Closed

[BUG] Vulnerability in docker v27.03 used in k3d #1482

louisnow opened this issue Aug 6, 2024 · 0 comments · Fixed by #1519
Labels
bug Something isn't working

Comments

@louisnow
Copy link

louisnow commented Aug 6, 2024

What did you do

  • How was the cluster created?

    • Installed k3d using the install script command and ran a vulnerability scanner on it.
    • It reported a critical vulnerability in docker v27.0.3 which is what the project uses.

    https://avd.aquasec.com/nvd/2024/cve-2024-41110/

    It's been fixed in v27.1.1

What did you expect to happen

Can we evaluate if we can upgrade the the docker version?

Screenshots or terminal output

If applicable, add screenshots or terminal output (code block) to help explain your problem.

Screenshot 2024-08-06 at 4 08 51 PM

Which OS & Architecture

  • alpine:latest

Which version of k3d

5.7.3

Which version of docker

The k3d binary uses the older library v27.0.3 which we likely need to upgrade

@louisnow louisnow added the bug Something isn't working label Aug 6, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

Successfully merging a pull request may close this issue.

1 participant