Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bumped Alpine version from 3.16.2 to 3.16.9 to fix vulnerabilities #525

Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Bumped Alpine version from 3.16.2 to 3.16.9 to fix vulnerabilities #525

wants to merge 1 commit into from

Conversation

rociomroman
Copy link

What this PR does / why we need it:

  • Fix the High Severity vulnerabilities found in Alpine 3.16.2:

https://nvd.nist.gov/vuln/detail/CVE-2023-0215
https://nvd.nist.gov/vuln/detail/CVE-2022-4450
https://nvd.nist.gov/vuln/detail/CVE-2023-0286

Which issue this PR fixes: fixes #524

Special notes for your reviewer: N/A

Checklist:

@rociomroman rociomroman force-pushed the experiment-alpine-vulnerability-fix branch from e9fe19d to 381d6d8 Compare July 2, 2024 20:47
@rociomroman
Copy link
Author

Please take a look at my PR when you get the chance! thanks.
@ksatchit @ispeakc0de @uditgaurav

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@imrajdas imrajdas imrajdas approved these changes

@namkyu1999 namkyu1999 namkyu1999 approved these changes

At least 2 approving reviews are required to merge this pull request.

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

Upgrade version in custom/hardened-alpine/experiment/Dockerfile to reduce vulnerabilities
3 participants
@rociomroman @imrajdas @namkyu1999