#6170: respin f21 Docker Base image for security update

Fedora Release Engineering rel-eng at fedoraproject.org
Thu May 14 20:12:48 UTC 2015


#6170: respin f21 Docker Base image for security update
------------------------------+-----------------------
  Reporter:  walters          |      Owner:  rel-eng@…
      Type:  task             |     Status:  new
 Milestone:  Fedora 22 Final  |  Component:  other
Resolution:                   |   Keywords:
Blocked By:                   |   Blocking:
------------------------------+-----------------------

Comment (by walters):

 So I'm a moron and have been looking at /etc/passwd when obviously I meant
 /etc/shadow.  Let's try this again!

 Current F21 respun Docker image: FIXED!

 # docker run --rm -ti Fedora-Docker-Base-21-20150506.x86_64 grep root
 /etc/shadow
 root:locked::0:99999:7:::

 # Old F21 Docker image: VULNERNABLE

 # docker run --rm -ti Fedora-Docker-Base-20141203-21.x86_64 grep root
 /etc/shadow
 root:$6$DoHwMNPipK/gAVGn$qseLnsvYNGkBBQQDoKfuYWdHR/b6jLMjDwbT32ad97.EvspmbtfqhyQezyYFrqN0Bk/iNTey1upR5i816bGMR1::0:99999:7:::


 So we do need to get this new base image published.

-- 
Ticket URL: <https://fedorahosted.org/rel-eng/ticket/6170#comment:11>
Fedora Release Engineering <http://fedorahosted.org/rel-eng>
Release Engineering for the Fedora Project


More information about the rel-eng mailing list