Skip to content

Vulnerability issue legacy python versions are present <python 2/python 3.6> #721

@sivankumar86

Description

@sivankumar86

Our security scan flags the image that it has old python version related packges. Could you clean up old python packages which is having EOL ? i.e Remove python 2.x and python 3.6.x related libs.

yum list | grep python3-libs

Tested in below version as well.

docker run --rm -it --entrypoint /bin/sh confluentinc/[cp-kafka-connect-base](https://confluentinc.atlassian.net/browse/CP-kafka-connect-base):7.7.1

verified latest version and it is still contain python 3.6 which is no longer supported

sh-4.4# ls /lib/python3.*
/lib/python3.6:
site-packages

/lib/python3.9:
site-packages
sh-4.4#

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions