From 99a798175065ec4104aebd9424ab08ef37aceccf Mon Sep 17 00:00:00 2001 From: snyk-bot Date: Sat, 15 Feb 2025 07:30:59 +0000 Subject: [PATCH] fix: Dockerfile to reduce vulnerabilities The following vulnerabilities are fixed with an upgrade: - https://snyk.io/vuln/SNYK-ALPINE318-BUSYBOX-5890990 - https://snyk.io/vuln/SNYK-ALPINE318-BUSYBOX-5890990 - https://snyk.io/vuln/SNYK-ALPINE318-BUSYBOX-5890990 - https://snyk.io/vuln/SNYK-ALPINE318-OPENSSL-6032386 - https://snyk.io/vuln/SNYK-ALPINE318-OPENSSL-6032386 --- Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index b6e60ae..240f12e 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,7 +1,7 @@ #------------------------------------------------------------------------------------------ # Stage 1: Build container #------------------------------------------------------------------------------------------ -FROM alpine:3.18.2 as builder +FROM alpine:3.19.6 as builder # Install ssl dependencies RUN apk --no-cache add openssl @@ -13,7 +13,7 @@ RUN openssl req -newkey rsa:2048 -nodes -keyout /root/stunnel.pem -x509 -days 36 #------------------------------------------------------------------------------------------ # Stage 2: Final container #------------------------------------------------------------------------------------------ -FROM alpine:3.18.2 +FROM alpine:3.19.6 RUN apk --no-cache add stunnel openjdk17-jre-headless setpriv shadow