Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Image contains bind-license package #152

Open
joshbressers opened this issue Jun 13, 2019 · 0 comments
Open

Image contains bind-license package #152

joshbressers opened this issue Jun 13, 2019 · 0 comments

Comments

@joshbressers
Copy link

I recently had a hit from an automated scanner for a bind security flaw in the latest CentOS container image. A little digging revealed the bind-license package is installed, but not needed for anything (I imagine it's a leftover from something else).

➜  ~ docker run -it elasticsearch:7.1.1 rpm -q bind-license               
bind-license-9.9.4-73.el7_6.noarch
➜  ~ docker run -it elasticsearch:7.1.1 rpm -ql bind-license
/usr/share/doc/bind-license-9.9.4
/usr/share/doc/bind-license-9.9.4/COPYRIGHT
➜  ~ docker run -it elasticsearch:7.1.1 rpm -ql --whatrequires bind-license
no package requires bind-license

It would be helpful if this package was removed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant