News for hackers. Stuff that matters.

A comment on Google Launches Managed Service for Running Docker Apps on Its Platform. Parent comment

Re:Google Launches Managed Service for Running Docker Apps o... by philip1209 on Tuesday November 04, 2014 @12:51PM (#8557928)
Some google-managed base images would be helpful. The last time I checked, some of the major public docker images were still shellshock-vulnerable. Pre-installed GCE tools would be helpful. Perhaps automated environment variables about region, etc.
[ Parent | on HN ]
Re:Google Launches Managed Service for Running Docker Apps o... by shykes on Tuesday November 04, 2014 @09:33PM (#8560255)
If you have found an official Docker image that is still shellshock vulnerable, the library maintainers [1] would love to hear from you as they take that stuff quite seriously. As far as I know the entire library is fully patched.

[1] https://github.com/docker-library/official-images

[ Parent | on HN ]
Re:Google Launches Managed Service for Running Docker Apps o... by tianon on Wednesday November 05, 2014 @11:14AM (#8562466)
As one of the maintainers in question, I'd absolutely mirror this whole statement: if any of the image upstreams have an important update available that isn't applied, we're very interested in rectifying that.
[ Parent | on HN ]
Re:Google Launches Managed Service for Running Docker Apps o... by 23david on Tuesday November 04, 2014 @02:32PM (#8558550)
Which images are still shellshock vulnerable? Wasn't aware that was an issue if we stick to the docker-managed images.
[ Parent | on HN ]
Re:Google Launches Managed Service for Running Docker Apps o... by voltagex_ on Tuesday November 04, 2014 @06:48PM (#8559761)
Which?

See https://gist.github.com/voltagex/582473e3b86ee5ae4438 - I ran some tests on the three most popular (?) official base images.

[ Parent | on HN ]