Resolve vulnerabilities in docker images

[othomann]

Hi,

from https://hub.docker.com/layers/library/sonarqube/lts-community/images/sha256-a05a6ffb12f12058671fd24316faab24b238543502a4d631cd3908700ef2f796?context=repo&tab=vulnerabilities, I can see that the latest images in docker hub contains quite a few vulnerabilities (2 critical, 11 high etc.).
Do you have any plans to fix them ? Some of the packages have fixable versions to resolve them according to docker hub.
Thanks.

[carminevassallo]

Hi @othomann,

thanks for raising this issue.

Could you please post your question in our community forum? It will then get triaged to the right team :)

[othomann]

@carminevassallo hi, in what forum specifically should I post the message ? Thanks.

[carminevassallo]

Hi again @othomann,

I was referring to this community forum. Do you have access to the link?

[othomann]

yes, but I mean what forum ? I was about to post a new topic in Product Manager for a Day topics under sonarqube category. Is this the right place ?

Thanks.

[othomann]

I posted https://community.sonarsource.com/t/resolve-vulnerabilities-in-docker-images/115223