repos/docker-radius
6
0
Fork 0
Code Issues 1 Pull Requests Actions Packages Releases 2 Activity

[Snyk] Security upgrade alpine from 3.21.0 to 3.22.0 #6

Closed
luketainton wants to merge 1 commits from snyk-fix-8ea5a04995b81941b6ba3f2247e50aa0 into master
pull from: snyk-fix-8ea5a04995b81941b6ba3f2247e50aa0
merge into: repos:master
Conversation 0 Commits 1 Files Changed 1 +1 -1
luketainton commented 2025-06-06 20:21:27 +00:00 (Migrated from github.com)
Copy Link

snyk-top-banner

Snyk has created this PR to fix 3 vulnerabilities in the dockerfile dependencies of this project.

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Snyk changed the following file(s):

  • Dockerfile

We recommend upgrading to alpine:3.22.0, as this image has only 0 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Vulnerabilities that will be fixed with an upgrade:

Issue Score
low severity CVE-2025-26519
SNYK-ALPINE321-MUSL-8720634		   54  
low severity CVE-2025-26519
SNYK-ALPINE321-MUSL-8720634		   54  
low severity CVE-2024-13176
SNYK-ALPINE321-OPENSSL-8690014		   54  
low severity CVE-2024-13176
SNYK-ALPINE321-OPENSSL-8690014		   54  
low severity CVE-2024-12797
SNYK-ALPINE321-OPENSSL-8710358		   54  

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

![snyk-top-banner](https://res.cloudinary.com/snyk/image/upload/r-d/scm-platform/snyk-pull-requests/pr-banner-default.svg) ### Snyk has created this PR to fix 3 vulnerabilities in the dockerfile dependencies of this project. Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image. #### Snyk changed the following file(s): - `Dockerfile` We recommend upgrading to `alpine:3.22.0`, as this image has only **0** known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected. #### Vulnerabilities that will be fixed with an upgrade: | | Issue | Score | :-------------------------:|:-------------------------|:------------------------- ![low severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/l.png 'low severity') | CVE-2025-26519 <br/>[SNYK-ALPINE321-MUSL-8720634](https://snyk.io/vuln/SNYK-ALPINE321-MUSL-8720634) | &nbsp;&nbsp;**54**&nbsp;&nbsp; ![low severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/l.png 'low severity') | CVE-2025-26519 <br/>[SNYK-ALPINE321-MUSL-8720634](https://snyk.io/vuln/SNYK-ALPINE321-MUSL-8720634) | &nbsp;&nbsp;**54**&nbsp;&nbsp; ![low severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/l.png 'low severity') | CVE-2024-13176 <br/>[SNYK-ALPINE321-OPENSSL-8690014](https://snyk.io/vuln/SNYK-ALPINE321-OPENSSL-8690014) | &nbsp;&nbsp;**54**&nbsp;&nbsp; ![low severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/l.png 'low severity') | CVE-2024-13176 <br/>[SNYK-ALPINE321-OPENSSL-8690014](https://snyk.io/vuln/SNYK-ALPINE321-OPENSSL-8690014) | &nbsp;&nbsp;**54**&nbsp;&nbsp; ![low severity](https://res.cloudinary.com/snyk/image/upload/w_20,h_20/v1561977819/icon/l.png 'low severity') | CVE-2024-12797 <br/>[SNYK-ALPINE321-OPENSSL-8710358](https://snyk.io/vuln/SNYK-ALPINE321-OPENSSL-8710358) | &nbsp;&nbsp;**54**&nbsp;&nbsp; --- > [!IMPORTANT] > > - Check the changes in this PR to ensure they won't cause issues with your project. > - Max score is 1000. Note that the real score may have changed since the PR was raised. > - This PR was automatically created by Snyk using the credentials of a real user. --- **Note:** _You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs._ For more information: <img src="https://api.segment.io/v1/pixel/track?data=eyJ3cml0ZUtleSI6InJyWmxZcEdHY2RyTHZsb0lYd0dUcVg4WkFRTnNCOUEwIiwiYW5vbnltb3VzSWQiOiI5M2M4YmQyMC0zYmM3LTQ2ZmEtYTBlOS02Y2VjYzI4OGVkZTgiLCJldmVudCI6IlBSIHZpZXdlZCIsInByb3BlcnRpZXMiOnsicHJJZCI6IjkzYzhiZDIwLTNiYzctNDZmYS1hMGU5LTZjZWNjMjg4ZWRlOCJ9fQ==" width="0" height="0"/> 🧐 [View latest project report](https://app.snyk.io/org/luketainton/project/40c3db53-812a-4cbd-b7a7-2c776508a967?utm_source&#x3D;github&amp;utm_medium&#x3D;referral&amp;page&#x3D;fix-pr) 📜 [Customise PR templates](https://docs.snyk.io/scan-using-snyk/pull-requests/snyk-fix-pull-or-merge-requests/customize-pr-templates?utm_source=github&utm_content=fix-pr-template) 🛠 [Adjust project settings](https://app.snyk.io/org/luketainton/project/40c3db53-812a-4cbd-b7a7-2c776508a967?utm_source&#x3D;github&amp;utm_medium&#x3D;referral&amp;page&#x3D;fix-pr/settings) 📚 [Read about Snyk's upgrade logic](https://docs.snyk.io/scan-with-snyk/snyk-open-source/manage-vulnerabilities/upgrade-package-versions-to-fix-vulnerabilities?utm_source=github&utm_content=fix-pr-template) --- **Learn how to fix vulnerabilities with free interactive lessons:** 🦉 [Learn about vulnerability in an interactive lesson of Snyk Learn.](https://learn.snyk.io/?loc&#x3D;fix-pr) [//]: # 'snyk:metadata:{"customTemplate":{"variablesUsed":[],"fieldsUsed":[]},"dependencies":[{"name":"alpine","from":"3.21.0","to":"3.22.0"}],"env":"prod","issuesToFix":["SNYK-ALPINE321-MUSL-8720634","SNYK-ALPINE321-MUSL-8720634","SNYK-ALPINE321-OPENSSL-8690014","SNYK-ALPINE321-OPENSSL-8710358","SNYK-ALPINE321-OPENSSL-8690014"],"prId":"93c8bd20-3bc7-46fa-a0e9-6cecc288ede8","prPublicId":"93c8bd20-3bc7-46fa-a0e9-6cecc288ede8","packageManager":"dockerfile","priorityScoreList":[54,54,54],"projectPublicId":"40c3db53-812a-4cbd-b7a7-2c776508a967","projectUrl":"https://app.snyk.io/org/luketainton/project/40c3db53-812a-4cbd-b7a7-2c776508a967?utm_source=github&utm_medium=referral&page=fix-pr","prType":"fix","templateFieldSources":{"branchName":"default","commitMessage":"default","description":"default","title":"default"},"templateVariants":["updated-fix-title","priorityScore"],"type":"auto","upgrade":["SNYK-ALPINE321-MUSL-8720634","SNYK-ALPINE321-MUSL-8720634","SNYK-ALPINE321-OPENSSL-8690014","SNYK-ALPINE321-OPENSSL-8690014","SNYK-ALPINE321-OPENSSL-8710358"],"vulns":["SNYK-ALPINE321-MUSL-8720634","SNYK-ALPINE321-OPENSSL-8690014","SNYK-ALPINE321-OPENSSL-8710358"],"patch":[],"isBreakingChange":false,"remediationStrategy":"vuln"}'

Pull request closed

This pull request cannot be reopened because the branch was deleted.
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
Compat/Breaking
Breaking change that won't be backward compatible
 Kind/Bug
Something is not working
 Kind/Documentation
Documentation changes
 Kind/Enhancement
Improve existing functionality
 Kind/Feature
New functionality
 Kind/Security
This is security issue
 Kind/Testing
Issue or pull request related to testing
Priority
Critical
The priority is critical
Priority
High
The priority is high
Priority
Low
The priority is low
Priority
Medium
The priority is medium
Reviewed
Confirmed
Issue has been confirmed
Reviewed
Duplicate
This issue or pull request already exists
Reviewed
Invalid
Invalid issue
Reviewed
Won't Fix
This issue won't be fixed
Status
Abandoned
Somebody has started to work on this but abandoned work
Status
Blocked
Something is blocking this issue or pull request
Status
Need More Info
Feedback is required to reproduce issue or to continue work
No Label
Milestone
No items
No Milestone
Assignees
Clear assignees
Alexander.Lyall ai-review-bot flows-bot gitea-actions-bot luke renovate-bot
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: repos/docker-radius#6
Delete Branch "snyk-fix-8ea5a04995b81941b6ba3f2247e50aa0"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?