Merge pull request #111 from cyberark/upgrade-nginx-dockerfile

Upgrade base image in nginx Dockerfile
cyberark · May 19, 2022 · d6b0d53 · d6b0d53
2 parents 620d5bc + e50822d
commit d6b0d53
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -6,6 +6,10 @@ and this project adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.
 
 ## [Unreleased]
 
+### Security
+- Upgraded nginx Dockerfile base image to fix CVE-2022-0778 and CVE-2022-1292.
+  [cyberark/conjur-api-java#111](https://github.com/cyberark/conjur-api-java/pull/111)
+
 ## [3.0.2] - 2020-10-28
 ### Fixed
 - Multiple unused transitive dependencies, such as `exec-maven-plugin`, were removed. 

diff --git a/Dockerfile.nginx b/Dockerfile.nginx
@@ -1,4 +1,4 @@
-FROM nginx:1.21.4
+FROM nginx:1.21.6
 
 MAINTAINER Conjur Inc