Skip to content

Commit

Permalink
fix: update glibc because of CVE
Browse files Browse the repository at this point in the history
Upgrading glibc manually because parent image doesn't contain fix yet

Signed-off-by: dirgim <kpavic@redhat.com>
  • Loading branch information
dirgim committed May 28, 2024
1 parent 861adfd commit a7322b0
Showing 1 changed file with 3 additions and 0 deletions.
3 changes: 3 additions & 0 deletions Dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -38,6 +38,9 @@ FROM registry.access.redhat.com/ubi8/ubi-minimal:8.10-896
COPY --from=builder /opt/app-root/src/manager /
COPY --from=builder /opt/app-root/src/snapshotgc /

# workaround, fixing glibc CVE which prevents us to release; remove this when new parent image is released
RUN microdnf upgrade -y glibc && microdnf clean all

# It is mandatory to set these labels
LABEL name="integration-service"
LABEL com.redhat.component="konflux-integration-service"
Expand Down

0 comments on commit a7322b0

Please sign in to comment.