Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Added Oracle Linux 7.1 #568

Merged
merged 1 commit into from
Mar 19, 2015
Merged

Added Oracle Linux 7.1 #568

merged 1 commit into from
Mar 19, 2015

Conversation

Djelibeybi
Copy link
Contributor

Also switched the oraclelinux:latest and oraclelinux:7 tags to 7.1.

@yosifkit
Copy link
Member

Build test of #568; fff0a48 (oraclelinux):

$ url="https://raw.githubusercontent.com/docker-library/official-images/fff0a489c62034fb1698d968dda6e5393908e7ae/library/oraclelinux"
$ bashbrew build "$url"
Cloning oraclelinux (git://github.com/oracle/docker.git) ...
Processing oraclelinux:latest ...
Processing oraclelinux:7 ...
Processing oraclelinux:7.1 ...
Processing oraclelinux:7.0 ...
Processing oraclelinux:6 ...
Processing oraclelinux:6.6 ...
Processing oraclelinux:5 ...
Processing oraclelinux:5.11 ...
$ bashbrew list "$url" | xargs test/run.sh
testing oraclelinux:latest
    'utc' [1/2]...passed
    'cve-2014--shellshock' [2/2]...passed
testing oraclelinux:7
    'utc' [1/2]...passed
    'cve-2014--shellshock' [2/2]...passed
testing oraclelinux:7.1
    'utc' [1/2]...passed
    'cve-2014--shellshock' [2/2]...passed
testing oraclelinux:7.0
    'utc' [1/2]...passed
    'cve-2014--shellshock' [2/2]...passed
testing oraclelinux:6
    'utc' [1/2]...passed
    'cve-2014--shellshock' [2/2]...passed
testing oraclelinux:6.6
    'utc' [1/2]...passed
    'cve-2014--shellshock' [2/2]...passed
testing oraclelinux:5
    'utc' [1/2]...passed
    'cve-2014--shellshock' [2/2]...passed
testing oraclelinux:5.11
    'utc' [1/2]...passed
    'cve-2014--shellshock' [2/2]...passed

@yosifkit
Copy link
Member

It looks like version 6 has OpenSSL 1.0.1e-fips and version 5 has OpenSSL 0.9.8e-fips-rhel5; do they need updates re #569 (aka the 11 CVE's for SSL today)?

@ewindisch
Copy link
Contributor

@yosifkit - RHEL 5 has "deferred" fixes.

RHEL6 is still vulnerable as I understand it. It seems unlikely that the oraclelinux images are updated yet.

@yosifkit
Copy link
Member

The real question then is for @Djelibeybi, do we want to hold this PR for any of the openSSL fixes, or merge it and have another PR when they are available?

@yosifkit
Copy link
Member

(in case it was not clear) 7.0 and 7.1 are not applicable in the openSSL vulnerabilities since it is not bundled in.

@Djelibeybi
Copy link
Contributor Author

Please merge this PR.

We will send another PR with updated OL5 and OL6 images once the OpenSSL fixes have passed QA and been published.

@yosifkit
Copy link
Member

LGTM

1 similar comment
@daghack
Copy link
Contributor

daghack commented Mar 19, 2015

LGTM

yosifkit added a commit that referenced this pull request Mar 19, 2015
@yosifkit yosifkit merged commit 947af92 into docker-library:master Mar 19, 2015
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants