{"action":"opened","issue":{"url":"https://api.github.com/repos/gliderlabs/docker-alpine/issues/299","repository_url":"https://api.github.com/repos/gliderlabs/docker-alpine","labels_url":"https://api.github.com/repos/gliderlabs/docker-alpine/issues/299/labels{/name}","comments_url":"https://api.github.com/repos/gliderlabs/docker-alpine/issues/299/comments","events_url":"https://api.github.com/repos/gliderlabs/docker-alpine/issues/299/events","html_url":"https://github.com/gliderlabs/docker-alpine/issues/299","id":237441805,"number":299,"title":"node:6.9.4-alpine - zlib vulnerability","user":{"login":"IdanAdar","id":7255583,"avatar_url":"https://avatars3.githubusercontent.com/u/7255583?v=3","gravatar_id":"","url":"https://api.github.com/users/IdanAdar","html_url":"https://github.com/IdanAdar","followers_url":"https://api.github.com/users/IdanAdar/followers","following_url":"https://api.github.com/users/IdanAdar/following{/other_user}","gists_url":"https://api.github.com/users/IdanAdar/gists{/gist_id}","starred_url":"https://api.github.com/users/IdanAdar/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/IdanAdar/subscriptions","organizations_url":"https://api.github.com/users/IdanAdar/orgs","repos_url":"https://api.github.com/users/IdanAdar/repos","events_url":"https://api.github.com/users/IdanAdar/events{/privacy}","received_events_url":"https://api.github.com/users/IdanAdar/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2017-06-21T07:40:00Z","updated_at":"2017-06-21T07:40:00Z","closed_at":null,"body":"Hello,\r\nIn my Dockerfile I use `FROM node:6.9.4-alpine`.\r\n\r\nIBM Bluemix provides a Vulnerability Advisor feature that can scan images and provide a report.\r\nI was notified of the following:\r\n\r\n<pre>\r\nPACKAGE   SUMMARY                                                                                                                                                                          URL   \r\nzlib      inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.                                              \r\n          inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging improper pointer arithmetic.                                               \r\n          The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving left shifts of negative integers.      \r\n          The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact via vectors involving big-endian CRC calculation.  \r\n</pre>\r\n\r\nHow can I address this? \r\nThanks,"}}
{"actor":{"display_login":"IdanAdar"}}