medium10 pts · first answer countsdevsecopscontainer-securityvulnerability-management

CVE with a fixed version available

A scan shows a high CVE in openssl from your base image, with "fixed in" a newer package version. Your app code has not changed. What should you do?

A.Wait for the next feature release to rebuildB.Mark it accepted, since the app code is cleanC.Rebuild on an updated base image and redeployD.Upgrade openssl inside the running containers

Discussion 0

Join free to post in the discussion.

CVE with a fixed version available

Discussion 0

Related questions