Problem: rsync vulnerability CVE-2024-12084 detected in Docker image

[bedla]

Issue

Hi,
security scanner Trivy detecting in semaphore Docker image rsync vulnerability CVE-2024-12084 https://sysdig.com/blog/detecting-and-mitigating-cve-2024-12084-rsync-remote-code-execution/
Is there impact or it is false positive? Or do you have plan to fix it?
Thank you
Ivos

Impact

Docker

Installation method

Docker

Database

No response

Browser

No response

Semaphore Version

v2.11.2
v2.12.0-beta3

Ansible Version

Logs & errors

No response

Manual installation - system information

No response

Configuration

No response

Additional information

No response

[fiftin]

rsync 3.2.7 used in image. So, yes, looks like it is true.

rsync installed from alpine3.19 registry. So, the issue can be fixed by upgrading base image.