docksal / ci-agent

CI agent Docker image for Docksal Sandboxes
MIT License
9 stars 16 forks source link

Security Vulnerability: Update Alpine Linux version #30

Closed nplowman closed 6 years ago

nplowman commented 6 years ago

This security advisory came out recently: https://justi.cz/security/2018/09/13/alpine-apk-rce.html

It looks like this has been fixed in version 3.8, but it looks like the ci-agent image is still running 3.7 and may be vulnerable.

lmakarov commented 6 years ago

Done in 00bfa66c00eca80d866e707cdb32c3a81ef4fd8c