-
Type: Bug
-
Resolution: Works as Designed
-
Priority: Major - P3
-
None
-
Affects Version/s: None
-
Component/s: None
-
None
Problem Statement/Rationale
bsondump appears to be relying on Golang 1.19.6 which is susceptible for CVE https://nvd.nist.gov/vuln/detail/CVE-2023-24540
UHG is a large POD customer that uses docker images extensively in their local development (as part of docker compose). Recently their security team has been being more restrictive and has started to block some images due to this and other CVE's.
Steps to Reproduce
CVE link provides details for to validate the error.
Expected Results
Update bsondump to use Golang that has been patched against this CVE. This also needs to then be updated in the official docker images for Enterprise Advanced so that it can pass security screenings.
Actual Results
What do you observe is happening?
Additional Notes
Any additional information that may be useful to include.
- related to
-
SERVER-77623 Update docker images for enterprise-server
- Closed