8000 update postgres version from 10 to 10.9 due to a critical security bug by rdhariwal · Pull Request #141 · postgis/docker-postgis · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

update postgres version from 10 to 10.9 due to a critical security bug #141

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
wants to merge 2 commits into from
Closed

update postgres version from 10 to 10.9 due to a critical security bug #141

wants to merge 2 commits into from

Conversation

rdhariwal
Copy link

A critical security vulnerability was found in postgres 10, 11 and 12. The community is recommending upgrading postgres 10 to 10.9. For more information please see this link to postgresql.org

@ImreSamu
Copy link
Member

imho:

  • in you fix - the 2 input docker image ( FROM postgres:10˙ --> FROM postgres:10.9 ) has a same hash . sha256:28190f73fba07ccee28c70e8aa66bae05072e7485c3f6fc59ab984dcfd8babe9
    so you will receive the same result.
$ docker pull postgres:10.9
10.9: Pulling from library/postgres
Digest: sha256:28190f73fba07ccee28c70e8aa66bae05072e7485c3f6fc59ab984dcfd8babe9
Status: Image is up to date for postgres:10.9
docker.io/library/postgres:10.9

$ docker pull postgres:10
10: Pulling from library/postgres
Digest: sha256:28190f73fba07ccee28c70e8aa66bae05072e7485c3f6fc59ab984dcfd8babe9
Status: Image is up to date for postgres:10
docker.io/library/postgres:10

see https://hub.docker.com/_/postgres?tab=tags

@rdhariwal
Copy link
Author

imho:

  • in you fix - the 2 input docker image ( FROM postgres:10˙ --> FROM postgres:10.9 ) has a same hash . sha256:28190f73fba07ccee28c70e8aa66bae05072e7485c3f6fc59ab984dcfd8babe9
    so you will receive the same result.
$ docker pull postgres:10.9
10.9: Pulling from library/postgres
Digest: sha256:28190f73fba07ccee28c70e8aa66bae05072e7485c3f6fc59ab984dcfd8babe9
Status: Image is up to date for postgres:10.9
docker.io/library/postgres:10.9

$ docker pull postgres:10
10: Pulling from library/postgres
Digest: sha256:28190f73fba07ccee28c70e8aa66bae05072e7485c3f6fc59ab984dcfd8babe9
Status: Image is up to date for postgres:10
docker.io/library/postgres:10

see https://hub.docker.com/_/postgres?tab=tags

Ahh looks like postgres:10 has been upgraded to run postgres engine 10.9 as of 4 hours ago. So I will close this PR, thanks for looking at it @ImreSamu

@rdhariwal rdhariwal closed this Jul 10, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@rdhariwal @ImreSamu
0