From 648643966eede90b575a5d5f0f2df2d02dc6a486 Mon Sep 17 00:00:00 2001 From: Charlie Voiselle <464492+angrycub@users.noreply.github.com> Date: Tue, 13 May 2025 16:38:07 +0000 Subject: [PATCH] chore: update alpine 3.21.2 => 3.21.3 (#17773) Resolves 3 CVEs in base container (1 High, 2 Medium) | CVE ID | CVSS Score | Package / Version | | -------------- | ---------- | ------------------------------ | | CVE-2025-26519 | 8.1 High | apk / alpine/musl / 1.2.5-r8 | | CVE-2024-12797 | 6.3 Medium | apk / alpine/openssl / 3.3.2-r4 | | CVE-2024-13176 | 4.1 Medium | apk / alpine/openssl / 3.3.2-r4 | --- scripts/Dockerfile.base | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/scripts/Dockerfile.base b/scripts/Dockerfile.base index fdadd87e55a3a..6c8ab5a544e30 100644 --- a/scripts/Dockerfile.base +++ b/scripts/Dockerfile.base @@ -1,7 +1,7 @@ # This is the base image used for Coder images. It's a multi-arch image that is # built in depot.dev for all supported architectures. Since it's built on real # hardware and not cross-compiled, it can have "RUN" commands. -FROM alpine:3.21.2 +FROM alpine:3.21.3 # We use a single RUN command to reduce the number of layers in the image. # NOTE: Keep the Terraform version in sync with minTerraformVersion and