Details
-
Bug
-
Status: Closed (View Workflow)
-
P2
-
Resolution: Done
-
DevOps Sprint 142, DevOps Sprint 144, DevOps Sprint 145
-
FOLIO DevOps
-
TBD
Description
nginx:stable-alpine in https://github.com/folio-org/folio-ansible/blob/master/roles/stripes-docker/templates/Dockerfile.j2 contains
pcre2/pcre2@10.39-r0
that has Out-of-bounds Read vulnerabilities:
A fix is available:
pcre2/pcre2@10.40-r0
However, nginx:stable-alpine doesn't immediately get security fixes: https://github.com/nginxinc/docker-nginx/issues/671
Therefore RUN apk --no-cache upgrade is needed.