Skip to content

Commit

Permalink
[Snyk] Security upgrade alpine from 3.17.1 to 3.17
Browse files Browse the repository at this point in the history
Keeping your Docker base image up-to-date means you’ll benefit from
security fixes in the latest version of your chosen image.

#### Changes included in this PR 


- docker/Dockerfile

We recommend upgrading to `alpine:3.17`, as this image has only 0 known
vulnerabilities. To do this, merge this pull request, then verify your
application still works as expected.



Some of the most important vulnerabilities in your base image include:

| Severity | Priority Score / 1000 | Issue | Exploit Maturity |
| :------: | :-------------------- | :---- | :--------------- |
| ![critical
severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/c.png
"critical severity") | **500** | Out-of-bounds Read
<br/>[SNYK-ALPINE317-OPENSSL-3314648](https://snyk.io/vuln/SNYK-ALPINE317-OPENSSL-3314648)
| No Known Exploit |
| ![critical
severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/c.png
"critical severity") | **500** | Out-of-bounds Read
<br/>[SNYK-ALPINE317-OPENSSL-3314648](https://snyk.io/vuln/SNYK-ALPINE317-OPENSSL-3314648)
| No Known Exploit |
| ![high
severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png
"high severity") | **400** | Use After Free
<br/>[SNYK-ALPINE317-OPENSSL-3314650](https://snyk.io/vuln/SNYK-ALPINE317-OPENSSL-3314650)
| No Known Exploit |
| ![high
severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png
"high severity") | **511** | Access of Resource Using Incompatible Type
(&#x27;Type Confusion&#x27;)
<br/>[SNYK-ALPINE317-OPENSSL-3314651](https://snyk.io/vuln/SNYK-ALPINE317-OPENSSL-3314651)
| No Known Exploit |
| ![high
severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/h.png
"high severity") | **511** | Access of Resource Using Incompatible Type
(&#x27;Type Confusion&#x27;)
<br/>[SNYK-ALPINE317-OPENSSL-3314651](https://snyk.io/vuln/SNYK-ALPINE317-OPENSSL-3314651)
| No Known Exploit |



---

**Note:** _You are seeing this because you or someone else with access
to this repository has authorized Snyk to open fix PRs._

For more information: <img
src="https://api.segment.io/v1/pixel/track?data=eyJ3cml0ZUtleSI6InJyWmxZcEdHY2RyTHZsb0lYd0dUcVg4WkFRTnNCOUEwIiwiYW5vbnltb3VzSWQiOiJlNDMzODQ5Zi0xOWE3LTRkNDItOGY0NS1jMTQ2NzIzYmQxZGMiLCJldmVudCI6IlBSIHZpZXdlZCIsInByb3BlcnRpZXMiOnsicHJJZCI6ImU0MzM4NDlmLTE5YTctNGQ0Mi04ZjQ1LWMxNDY3MjNiZDFkYyJ9fQ=="
width="0" height="0"/>
🧐 [View latest project
report](https://app.snyk.io/org/eschercloudai/project/759cab70-637a-4e03-ad51-10aecd2e25e9?utm_source&#x3D;github&amp;utm_medium&#x3D;referral&amp;page&#x3D;fix-pr)

🛠 [Adjust project
settings](https://app.snyk.io/org/eschercloudai/project/759cab70-637a-4e03-ad51-10aecd2e25e9?utm_source&#x3D;github&amp;utm_medium&#x3D;referral&amp;page&#x3D;fix-pr/settings)

[//]: #
'snyk:metadata:{"prId":"e433849f-19a7-4d42-8f45-c146723bd1dc","prPublicId":"e433849f-19a7-4d42-8f45-c146723bd1dc","dependencies":[{"name":"alpine","from":"3.17.1","to":"3.17"}],"packageManager":"dockerfile","projectPublicId":"759cab70-637a-4e03-ad51-10aecd2e25e9","projectUrl":"https://app.snyk.io/org/eschercloudai/project/759cab70-637a-4e03-ad51-10aecd2e25e9?utm_source=github&utm_medium=referral&page=fix-pr","type":"user-initiated","patch":[],"vulns":["SNYK-ALPINE317-OPENSSL-3314651","SNYK-ALPINE317-OPENSSL-3314648","SNYK-ALPINE317-OPENSSL-3314650"],"upgrade":["SNYK-ALPINE317-OPENSSL-3314648","SNYK-ALPINE317-OPENSSL-3314648","SNYK-ALPINE317-OPENSSL-3314650","SNYK-ALPINE317-OPENSSL-3314651","SNYK-ALPINE317-OPENSSL-3314651"],"isBreakingChange":false,"env":"prod","prType":"fix","templateVariants":["updated-fix-title","priorityScore"],"priorityScoreList":[511,500,400]}'

---

**Learn how to fix vulnerabilities with free interactive lessons:**

🦉 [Learn about vulnerability in an interactive lesson of Snyk
Learn.](https://learn.snyk.io/?loc&#x3D;fix-pr)
  • Loading branch information
snyk-bot committed Mar 8, 2023
1 parent 1c1e976 commit 5932897
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion docker/Dockerfile
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
FROM alpine:3.17.1
FROM alpine:3.17

RUN apk update --no-cache
RUN apk add bash build-base jq curl git python3 py3-pip openssh-client
Expand Down

0 comments on commit 5932897

Please sign in to comment.