Skip to content
This repository has been archived by the owner on Nov 1, 2022. It is now read-only.

Commit

Permalink
Bump Alpine version from v3.6 to v3.9
Browse files Browse the repository at this point in the history
We have multiple nightly builds (from `44874ead` up to and including
`c9cda8ab` at time of this commit) with gnupg 2.1.20-r1 baked in to
them which is effected by CVE-2018-12020 (patched in >=2.2.3-r1).

As there is no newer version of gnupg available in the Alpine
main/v3.6 repository, and 3.6 is only receiving security updates
(but with a delay?), and supports for 3.6 ends on 2019-05-01,
this bump is mandatory.
  • Loading branch information
hiddeco committed Mar 7, 2019
1 parent c9cda8a commit 73b3a64
Show file tree
Hide file tree
Showing 2 changed files with 2 additions and 2 deletions.
2 changes: 1 addition & 1 deletion docker/Dockerfile.flux
@@ -1,4 +1,4 @@
FROM alpine:3.6
FROM alpine:3.9

WORKDIR /home/flux

Expand Down
2 changes: 1 addition & 1 deletion docker/Dockerfile.helm-operator
@@ -1,4 +1,4 @@
FROM alpine:3.6
FROM alpine:3.9

WORKDIR /home/flux

Expand Down

0 comments on commit 73b3a64

Please sign in to comment.