tiangolo / uvicorn-gunicorn-fastapi-docker

Docker image with Uvicorn managed by Gunicorn for high-performance FastAPI web applications in Python with performance auto-tuning.

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

How to fix vulnerability: CVE-2019-19816

jovana opened this issue · comments

Hey, In this image: https://hub.docker.com/r/tiangolo/uvicorn-gunicorn-fastapi/tags?page=1&ordering=last_updated there are two Vulnerabilities:

For this one is already a fix (patch):
https://security-tracker.debian.org/tracker/CVE-2019-19816
Is there a way to solve this vulnerability, apt update & apt upgrade does not solve this?

The other is still not solved, so this is only for your information:
https://security-tracker.debian.org/tracker/CVE-2019-19814

Update:
One note, according to the Ubuntu team this is a low priority issue:
https://ubuntu.com/security/CVE-2019-19816
This because it has been fixed in Ubuntu 20.x.

Hey there, that would be for an old version of this image, right? I suspect that's already solved... 🤔

Sorry for the long delay! 🙈 I wanted to personally address each issue/PR and they piled up through time, but now I'm checking each one in order.

Assuming the original issue was solved, it will be automatically closed now. But feel free to add more comments or create new issues.