Skip to content
This repository has been archived by the owner on Jun 27, 2024. It is now read-only.

fix(dependencies): apk-tools upgrade to fix CVE-2021-36159 #73

Merged
merged 2 commits into from
Aug 4, 2021
Merged

fix(dependencies): apk-tools upgrade to fix CVE-2021-36159 #73

Changes from 1 commit
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
1f92562
fix: apk-tools upgrade to fix CVE-2021-36159
lholota Aug 4, 2021
7fe7235
fix: Build
lholota Aug 4, 2021
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Next Next commit
fix: apk-tools upgrade to fix CVE-2021-36159
  • Loading branch information
@lholota
lholota committed Aug 4, 2021
commit 1f92562362ae2cd78b47b0536a996382a2e84f10
5 changes: 3 additions & 2 deletions alpine/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,17 +1,18 @@
FROM alpine:3.14.0
FROM

LABEL maintainer="Lukas Holota <[email protected]>"

ENV S6_VERSION="v1.22.1.0"
ENV CPU_ARCH="amd64"

ENV PUID=7077
ENV PGID=7077
ENV S6_BEHAVIOUR_IF_STAGE2_FAILS=2

ADD https://github.com/just-containers/s6-overlay/releases/download/${S6_VERSION}/s6-overlay-${CPU_ARCH}.tar.gz /tmp/

RUN tar xzf /tmp/s6-overlay-${CPU_ARCH}.tar.gz -C / && \
# This package is included in the base image. It's explicitly upgrade to avoid CVE-2021-36159
apk add --no-cache apk-tools=2.12.7-r0 && \
apk add --no-cache shadow=4.8.1-r0 && \
rm /tmp/s6-overlay-${CPU_ARCH}.tar.gz

Expand Down