go through list of Qualys image scan security findings

[mmguero]

Similar to #236 only this list is provided by INL IM.
apps.malcolm.dashboards-dashboards.details.csv
apps.malcolm.dashboards-helper-dashboards-helper.details.csv
apps.malcolm.dirinit-dirinit.details.csv
apps.malcolm.nginx-proxy-nginx-proxy.details.csv
apps.malcolm.opensearch-opensearch.details.csv
apps.malcolm.postgresql-postgresql.details.csv
apps.malcolm.redis-cache-redis-cache.details.csv
apps.malcolm.redis-redis.details.csv

[mmguero]

Here are the ones we need to look into (will strikeout as I complete them):

• Java (Maven) Security Update for org.json:json (GHSA-rm7j-f5g5-27vv) - fixed by updating to opensearch v2.11.1 which includes org.json 20231013
• NodeJs (Npm) Security Update for @babel/traverse (GHSA-67hx-6x53-jw92) - fixed by updating to opensearch v2.11.1 release which includes 7.23.2
• Alpine Linux Security Update for libx11 - fixed by removing libx11 dependency from container (not used by Malcolm)
• Amazon Linux Security Advisory for vim : ALAS2-2023-2319 and Amazon Linux Security Advisory for vim : ALAS2-2023-2319 - fixed by removing vim from container
• Alpine Linux Security Update for Open Secure Sockets Layer (OpenSSL) - fixed through release of alpine:3.18.4 which contains the updated patched packages
• Amazon Linux Security Advisory for python : ALAS2-2023-2330 - fixed through release of updated amazonlinux:2 image which contains the patched packages
• Amazon Linux Security Advisory for zlib : ALAS2-2023-2320 - fixed through release of updated amazonlinux:2 image which contains the patched packages

[mmguero]

cves.ods

[mmguero]

as far as I can tell I've addressed all of these. closing for now, will reopen if the scan I get back (probably later today) finds any others.