From 209bc0bcd8c74787fdca81392aa168b1b7168569 Mon Sep 17 00:00:00 2001 From: cschp Date: Wed, 8 Nov 2023 08:59:19 -0600 Subject: [PATCH 1/2] patching issue 344 vulnerabilities including GHSA-m425-mq94-257g Signed-off-by: cschp --- build/Dockerfile | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/build/Dockerfile b/build/Dockerfile index cc88a88e..085c4a6c 100644 --- a/build/Dockerfile +++ b/build/Dockerfile @@ -29,8 +29,10 @@ RUN CGO_ENABLED=0 \ RUN echo ${RELEASE} -FROM alpine:3.18.3 +FROM alpine:3.18.4 +RUN apk update --no-cache && \ + apk add --upgrade --no-cache libssl3=3.1.4-r0 libcrypto3=3.1.4-r0 RUN rm -rf /var/cache/apk/* ARG BIN_NAME="falcoctl" From ead861d0cd5a3fce58df853d260e03dfc07ffb2d Mon Sep 17 00:00:00 2001 From: cschp Date: Wed, 8 Nov 2023 09:21:09 -0600 Subject: [PATCH 2/2] update to remove hardcoded versions from libssl and librcrypto3 Signed-off-by: cschp Signed-off-by: cschp --- build/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build/Dockerfile b/build/Dockerfile index 085c4a6c..453da1ce 100644 --- a/build/Dockerfile +++ b/build/Dockerfile @@ -32,7 +32,7 @@ RUN echo ${RELEASE} FROM alpine:3.18.4 RUN apk update --no-cache && \ - apk add --upgrade --no-cache libssl3=3.1.4-r0 libcrypto3=3.1.4-r0 + apk add --upgrade --no-cache libssl3 libcrypto3 RUN rm -rf /var/cache/apk/* ARG BIN_NAME="falcoctl"