X-Original-To: alpine-devel@mail.alpinelinux.org Delivered-To: alpine-devel@mail.alpinelinux.org Received: from mail.alpinelinux.org (dallas-a1.alpinelinux.org [127.0.0.1]) by mail.alpinelinux.org (Postfix) with ESMTP id CBB77DC029D for ; Thu, 24 Mar 2016 20:34:46 +0000 (UTC) Received: from mail-lf0-f44.google.com (mail-lf0-f44.google.com [209.85.215.44]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mail.alpinelinux.org (Postfix) with ESMTPS id 38088DC003D for ; Thu, 24 Mar 2016 20:34:45 +0000 (UTC) Received: by mail-lf0-f44.google.com with SMTP id d82so43525038lfe.3 for ; Thu, 24 Mar 2016 13:34:45 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=coreos.com; s=google; h=from:mime-version:date:message-id:subject:to; bh=z9wCucx/kUeyHIIqaLxeTU53kyI3r8jGgv9ok5TzWU8=; b=cu+yG3C2LULqU3tKfYE8T4208IvX8XhgyIrNPNj1xSI6VIOtk2MYmRYn8g+K+1PI8C AWevNEiKF4OKnhnAy9hBPQ5VlqUiXqA9KSgiVjnDFi3AYKYIOYc4I48daY0wpwvgiAZN AOwGJ5RaNo/CGsunKL0IOhyrbSseMsNoirowQ= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:from:mime-version:date:message-id:subject:to; bh=z9wCucx/kUeyHIIqaLxeTU53kyI3r8jGgv9ok5TzWU8=; b=how1HhSNckJOV98wlYJuj1X/wCfXEZidoEHZ4t4GnrYReOaUEFksWi7PPTpqCc6gwZ ouAgEi7+5cyLxL8X4sRcQwfvUWz8axwc/EZzYrqH2+vX6CtYvgSIBLmgflqXhC9/+Zfg GsNjPLF74qSewsdmGTLlti4rn+D0bdXP38sFHCG4zEo+QVwYKQnQWjHzKOzvUF41Gh+N RGve0e4uO7zDpKOam3YxLGl937+3RF8SLoZGQy8oEGLAzLo9t6tprj5QarAwx5/0MI6c ZRAEYGB17KNa9JDYrqTlWebiQ40oVBWASOs036TfGS2lE+PFWrzqoLXPLVj1wV6+1uJi ohpA== X-Gm-Message-State: AD7BkJLwNlR7n8gwmY3VTDsB6p/MKYxJ2RsF4PS17Ne394p8uU+MY3tHAjC9dxx1HYwZQUuiC+rAn7YRjKohgOjd X-Received: by 10.25.15.162 with SMTP id 34mr4360492lfp.152.1458851683668; Thu, 24 Mar 2016 13:34:43 -0700 (PDT) Received: from 1058052472880 named unknown by gmailapi.google.com with HTTPREST; Thu, 24 Mar 2016 16:34:43 -0400 From: Quentin Machu X-Mailer: Airmail Beta (353) X-Mailinglist: alpine-devel Precedence: list List-Id: Alpine Development List-Unsubscribe: List-Post: List-Help: List-Subscribe: MIME-Version: 1.0 Date: Thu, 24 Mar 2016 16:34:43 -0400 Message-ID: Subject: [alpine-devel] Alpine security tracker To: alpine-devel@lists.alpinelinux.org Content-Type: multipart/alternative; boundary=001a113fa1ce62acb9052ed160ac X-Virus-Scanned: ClamAV using ClamSMTP --001a113fa1ce62acb9052ed160ac Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Hi, My name=E2=80=99s Quentin Machu and I am the primary maintainer of Clair [1= ], an open source project for the static analysis of vulnerabilities in containers, by CoreOS. The project, which aim at bringing security awareness to everyone, recently went 1.0 [2] and is considerably well received by the community. As Alpine grows more and more popular, especially for containers to which it becomes a really common base image, I believe that it would be extremely valuable for Alpine to track vulnerabilities that may affect its packages. Several Linux distributions, such as Debian [3][4], Ubuntu [5][6], RHEL [7][8], Arch [9], already do through advisories and parsable databases. Since the very beginning of Clair, the community has shown a significant interest in being informed about the potential security flaws that may threaten their Alpine-based containers [10]. [1]: https://github.com/coreos/clair [2]: https://coreos.com/blog/clair-v1.html [3]: https://www.debian.org/security/ [4]: https://security-tracker.debian.org/tracker/ [5]: http://www.ubuntu.com/usn/ [6]: https://bazaar.launchpad.net/~ubuntu-security/ubuntu-cve-tracker/ [7]: https://rhn.redhat.com/errata/ [8]: https://www.redhat.com/security/data/oval/ [9]: https://wiki.archlinux.org/index.php/CVE [10]: https://github.com/coreos/clair/issues/12 Best Regards, Quentin Machu --001a113fa1ce62acb9052ed160ac Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable =

Hi,


My name=E2=80=99s Quentin Machu and I am the primary mainta= iner of Clair [1], =C2=A0an open = source project for the static analysis of vulnerabilities in containers, by= CoreOS. The project, which aim at bringing security awareness to everyone,= recently went 1.0 [2] and is considerably well received by the community.<= /span>


As Alpine grows more and m= ore popular, especially for containers to which it becomes a really common = base image, I believe that it would be extremely valuable for Alpine to tra= ck vulnerabilities that may affect its packages. Several Linux distribution= s, such as Debian [3][4], Ubuntu [5][6], RHEL [7][8], Arch [9], already do = through advisories and parsable databases.


Since the very beginning of Clair, the community has shown= a significant interest in being informed about the potential security flaw= s that may threaten their Alpine-based containers [10].


[1]: h= ttps://github.com/coreos/clair

[2]: https://coreos.com/blog/clair-v1.html<= /p>

[3]: https://www.debian.org/security/

[4]: https://security-tracker.de= bian.org/tracker/

[5]: http://www.ubuntu.com/usn/

[6]: https://bazaar.launchpad.net/~= ubuntu-security/ubuntu-cve-tracker/

[7]: https://rhn.redha= t.com/errata/

[8]: https://www.redhat.com/secu= rity/data/oval/

[9]: https://wiki.archlinux.org/= index.php/CVE

[10]: https://github.com/coreos/c= lair/issues/12


Best Regards,
Quentin Machu
--001a113fa1ce62acb9052ed160ac-- --- Unsubscribe: alpine-devel+unsubscribe@lists.alpinelinux.org Help: alpine-devel+help@lists.alpinelinux.org ---