Docker hub image for PostgreSQL version 12.4 contains cryptominer

https://github.com/docker-library/postgres/issues/770

by antender • 6 years ago

4 7 6 years ago

antender4• 6 years ago

I know that using public docker images is a problem by itself, but this one is "official" in Docker Hub ...

mtmail3• 6 years ago

It looks like you didn't accept the answers in the previous github issue https://github.com/docker-library/postgres/issues/767 and opened a new one with the same claim adding '[confirmed]' without further proof.

antender4• 6 years ago

Proof was in description. Maintainers claimed that problem wasn't related to image but rather to infrastructure, so we changed the base image to prove that infrastructure was totally fine. Also i personally don't actually care that much if issue with this particular image is resolved, we switched to bitnami one for the time being (and will build our own one from sources when we have time to do so). It's more of a warning for other companies/people to check for the same problem.

mtmail3• 6 years ago

The claim, not proof, was in the description. The maintainer is responsive and asks for details to reproduce. You keep ignoring the questions. "We sandboxed the entire VM using VM-level settings." Great, tell the maintainer what kind of VM you used and how it was configured. Without the maintainer will give up, close the issue as not reproducible and move on.

Docker hub image for PostgreSQL version 12.4 contains cryptominer

Related Stories