search

senthilrch / kube-fledged

A kubernetes operator for creating and managing a cache of container images directly on the cluster worker nodes, so application pods start almost instantly
Apache License 2.0
1.24k stars 118 forks source link

fix: update ALPINE_VERISON to 3.13.9 #158

Closed democracytoday closed 2 years ago

democracytoday commented 2 years ago

Use the latest patch version of the currently used Alpine Linux minor release. This includes many bugfixes, including those with CVEs, such as https://security.alpinelinux.org/vuln/CVE-2018-25032 and https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-36159

I'm happy to bump this higher, such as to the actual latest release 3.15.3.

democracytoday commented 2 years ago

I'd be happy to help set up https://github.com/dependabot to periodically create pull requests to keep package & container versions up to date if you're interested.