# Security vulnerability in dremio 25.1.0

**URL:** <https://community.dremio.com/t/security-vulnerability-in-dremio-25-1-0/12287>\
**Category:** Uncategorized\
**Created:** [September 11, 2024, 9:47am UTC](https://community.dremio.com/t/security-vulnerability-in-dremio-25-1-0/12287 "2024-09-11T09:47:24Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![abkul](https://avatars.discourse-cdn.com/v4/letter/a/7feea3/32.png) [@abkul](https://community.dremio.com/u/abkul)\
**Post date:** [September 11, 2024, 9:47am UTC](https://community.dremio.com/t/security-vulnerability-in-dremio-25-1-0/12287/1 "2024-09-11T09:47:24Z")

</div>

Hi Team, we have found some security vulnerabilities in dremio 25.1.0. Can you please provide fix plan for the same  
libidn2-0\_2.3.2-2build1\_amd64.deb  
libpcre2-8-0\_10.39-3ubuntu0.1\_amd64.deb  
zlib1g\_1.2.11.dfsg-2ubuntu9.2\_amd64.deb  
dpkg\_1.21.1ubuntu2.2\_amd64.deb

regards  
Abhilash

---

<div class="post-metadata">

**Author:** ![dacopan](https://sea2.discourse-cdn.com/flex020/user_avatar/community.dremio.com/dacopan/32/4289_2.png) [@dacopan](https://community.dremio.com/u/dacopan)\
**Post date:** [September 11, 2024, 2:22pm UTC](https://community.dremio.com/t/security-vulnerability-in-dremio-25-1-0/12287/2 "2024-09-11T14:22:05Z")

</div>

Hello, the packages you mentioned are about OS not for Dremio, you can only update your OS, is not Dremio related

---

<div class="post-metadata">

**Author:** ![abkul](https://avatars.discourse-cdn.com/v4/letter/a/7feea3/32.png) [@abkul](https://community.dremio.com/u/abkul)\
**Post date:** [October 8, 2024, 10:24am UTC](https://community.dremio.com/t/security-vulnerability-in-dremio-25-1-0/12287/3 "2024-10-08T10:24:35Z")

</div>

Hi dcaopan,  
we understand that they are system packages, but since we are pulling the dremio image along with OS component, it still affects us. Below are the vulnerabilities from the OS  
util-linux\_2.37.2-4ubuntu3\_amd64.deb  
libpam-modules\_1.4.0-11ubuntu2.3\_amd64.deb  
libmount1\_2.37.2-4ubuntu3\_amd64.deb  
libpcre2-8-0\_10.39-3ubuntu0.1\_amd64.deb  
mount\_2.37.2-4ubuntu3\_amd64.deb  
libuuid1\_2.37.2-4ubuntu3\_amd64.deb  
libpam-modules-bin\_1.4.0-11ubuntu2.3\_amd64.deb  
libblkid1\_2.37.2-4ubuntu3\_amd64.deb  
bsdutils\_2.37.2-4ubuntu3\_amd64.deb  
libpcre2-8-0\_10.39-3ubuntu0.1\_amd64.deb  
zlib1g\_1.2.11.dfsg-2ubuntu9.2\_amd64.deb  
bash\_5.1-6ubuntu1\_amd64.deb  
libidn2-0\_2.3.2-2build1\_amd64.deb  
libpng16-16\_1.6.37-3build5\_amd64.deb  
zlib1g\_1.2.11.dfsg-2ubuntu9.2\_amd64.deb  
libsmartcols1\_2.37.2-4ubuntu3\_amd64.deb  
libmount1\_2.37.2-4ubuntu3\_amd64.deb  
libuuid1\_2.37.2-4ubuntu3\_amd64.deb  
libpcre3\_8.39-13ubuntu0.22.04.1\_amd64.deb  
bash\_5.1-6ubuntu1\_amd64.deb  
libblkid1\_2.37.2-4ubuntu3\_amd64.deb  
bsdutils\_2.37.2-4ubuntu3\_amd64.deb  
libsmartcols1\_2.37.2-4ubuntu3\_amd64.deb  
util-linux\_2.37.2-4ubuntu3\_amd64.deb  
libpam0g\_1.4.0-11ubuntu2.3\_amd64.deb  
mount\_2.37.2-4ubuntu3\_amd64.deb  
curl\_7.81.0-1ubuntu1.15\_amd64.deb  
curl\_7.81.0-1ubuntu1.15\_amd64.deb

Is there any plan to upgrade the ubuntu image used ?

regards  
Abhilash

---

<div class="post-metadata">

**Author:** ![dacopan](https://sea2.discourse-cdn.com/flex020/user_avatar/community.dremio.com/dacopan/32/4289_2.png) [@dacopan](https://community.dremio.com/u/dacopan)\
**Post date:** [October 8, 2024, 1:45pm UTC](https://community.dremio.com/t/security-vulnerability-in-dremio-25-1-0/12287/4 "2024-10-08T13:45:22Z")

</div>

if you are using image containers to run Dremio using Docker o Podman you can create a custom Dockerfile that extends from dremio and update any packages that you want