From beee089be3b7cf051fbfde1fa1ab9d38bd25d306 Mon Sep 17 00:00:00 2001 From: Thomas Ubensee <34603111+tomuben@users.noreply.github.com> Date: Wed, 29 May 2024 10:24:24 -0300 Subject: [PATCH] #904: Ignored Kernel CVE (#905) fixes #904 --- .current_gitmodules | 2 +- doc/changes/changes_8.1.0.md | 6 ++++-- .../flavor_base/security_scan/.trivyignore | 1 + .../flavor_base/security_scan/.trivyignore | 1 + .../flavor_base/security_scan/.trivyignore | 1 + script-languages | 2 +- 6 files changed, 9 insertions(+), 4 deletions(-) diff --git a/.current_gitmodules b/.current_gitmodules index eaf1662a..6dc79d59 100644 --- a/.current_gitmodules +++ b/.current_gitmodules @@ -1 +1 @@ -160000 e3dac0f02518e40f456fe80335e45df994d15f62 0 script-languages +160000 8b1d674d3148b4aa0b11c8a196778e0b3194cec7 0 script-languages diff --git a/doc/changes/changes_8.1.0.md b/doc/changes/changes_8.1.0.md index c6568f98..66f4017b 100644 --- a/doc/changes/changes_8.1.0.md +++ b/doc/changes/changes_8.1.0.md @@ -30,7 +30,8 @@ n/a ## Security -- #898: Ignored new Linux Kernel CVE's +- #898: Ignored new Linux Kernel CVE's +- #904: Ignored Kernel CVE Attention: The CVE's below can't be fixed by the container itself, rather need to be addressed by the host system executing them. @@ -49,4 +50,5 @@ Attention: The CVE's below can't be fixed by the container itself, rather need t - CVE-2024-26921 - CVE-2024-26923 - CVE-2024-26924 - - CVE-2024-26925 \ No newline at end of file + - CVE-2024-26925 + - CVE-2024-27397 \ No newline at end of file diff --git a/flavors/standard-EXASOL-all/flavor_base/security_scan/.trivyignore b/flavors/standard-EXASOL-all/flavor_base/security_scan/.trivyignore index 2d4d2b62..8203926f 100644 --- a/flavors/standard-EXASOL-all/flavor_base/security_scan/.trivyignore +++ b/flavors/standard-EXASOL-all/flavor_base/security_scan/.trivyignore @@ -32,6 +32,7 @@ CVE-2024-26921 CVE-2024-26923 CVE-2024-26924 CVE-2024-26925 +CVE-2024-27397 #CVE-2022-23648 is a bug in containerd, not issue for containers CVE-2022-23648 #issue in cgroups, but no threat for ScriptLanguageContainer diff --git a/flavors/template-Exasol-all-java-17/flavor_base/security_scan/.trivyignore b/flavors/template-Exasol-all-java-17/flavor_base/security_scan/.trivyignore index 97dd3b28..644852f9 100644 --- a/flavors/template-Exasol-all-java-17/flavor_base/security_scan/.trivyignore +++ b/flavors/template-Exasol-all-java-17/flavor_base/security_scan/.trivyignore @@ -31,6 +31,7 @@ CVE-2024-26921 CVE-2024-26923 CVE-2024-26924 CVE-2024-26925 +CVE-2024-27397 #CVE-2022-23648 is a bug in containerd, not issue for containers CVE-2022-23648 #issue in cgroups, but no threat for ScriptLanguageContainer diff --git a/flavors/template-Exasol-all-r-4/flavor_base/security_scan/.trivyignore b/flavors/template-Exasol-all-r-4/flavor_base/security_scan/.trivyignore index 97dd3b28..644852f9 100644 --- a/flavors/template-Exasol-all-r-4/flavor_base/security_scan/.trivyignore +++ b/flavors/template-Exasol-all-r-4/flavor_base/security_scan/.trivyignore @@ -31,6 +31,7 @@ CVE-2024-26921 CVE-2024-26923 CVE-2024-26924 CVE-2024-26925 +CVE-2024-27397 #CVE-2022-23648 is a bug in containerd, not issue for containers CVE-2022-23648 #issue in cgroups, but no threat for ScriptLanguageContainer diff --git a/script-languages b/script-languages index e3dac0f0..8b1d674d 160000 --- a/script-languages +++ b/script-languages @@ -1 +1 @@ -Subproject commit e3dac0f02518e40f456fe80335e45df994d15f62 +Subproject commit 8b1d674d3148b4aa0b11c8a196778e0b3194cec7