[1.10]] CVE fix (#8015)

* first commit * changelog move * bump alpine further * typo * typo
solo-io · Mar 27, 2023 · 7f68575 · 7f68575
1 parent 8512168
commit 7f68575
Show file tree

Hide file tree

Showing 13 changed files with 19 additions and 12 deletions.
diff --git a/changelog/v1.10.47/cves.yaml b/changelog/v1.10.47/cves.yaml
@@ -0,0 +1,7 @@
+changelog:
+  - type: DEPENDENCY_BUMP
+    dependencyOwner: linux
+    dependencyRepo: alpine
+    dependencyTag: 3.17.2
+    description: Bump alpine to fix CVE-2022-4450
+    issueLink: https://github.com/solo-io/gloo/issues/8005
diff --git a/docs/content/guides/dev/writing_auth_plugins/_index.md b/docs/content/guides/dev/writing_auth_plugins/_index.md
@@ -387,7 +387,7 @@ RUN chmod +x $VERIFY_SCRIPT
 RUN $VERIFY_SCRIPT -pluginDir plugins -manifest plugins/plugin_manifest.yaml
 
 # This stage builds the final image containing just the plugin .so files. It can really be any linux/amd64 image.
-FROM alpine:3.15.6
+FROM alpine:3.17.2
 
 # Copy compiled plugin file from previous stage
 RUN mkdir /compiled-auth-plugins

diff --git a/docs/content/guides/security/tls/Dockerfile b/docs/content/guides/security/tls/Dockerfile
@@ -1,4 +1,4 @@
-FROM alpine:3.15.6
+FROM alpine:3.17.2
 
 COPY cert.pem /cert.pem
 COPY key.pem /key.pem

diff --git a/docs/examples/session-affinity/Dockerfile b/docs/examples/session-affinity/Dockerfile
@@ -1,4 +1,4 @@
-FROM alpine:3.15.6
+FROM alpine:3.17.2
 
 RUN apk upgrade --update-cache \
     && apk add ca-certificates \

diff --git a/docs/examples/xslt-guide/Dockerfile b/docs/examples/xslt-guide/Dockerfile
@@ -1,4 +1,4 @@
-FROM alpine:3.15.6
+FROM alpine:3.17.2
 
 RUN apk upgrade --update-cache \
     && apk add ca-certificates curl \

diff --git a/example/proxycontroller/Dockerfile b/example/proxycontroller/Dockerfile
@@ -1,4 +1,4 @@
-FROM alpine:3.15.6
+FROM alpine:3.17.2
 
 COPY proxycontroller-linux-amd64 /usr/local/bin/proxycontroller
 

diff --git a/jobs/certgen/cmd/Dockerfile b/jobs/certgen/cmd/Dockerfile
@@ -1,4 +1,4 @@
-FROM alpine:3.15.6
+FROM alpine:3.17.2
 
 ARG GOARCH=amd64
 

diff --git a/projects/accesslogger/cmd/Dockerfile b/projects/accesslogger/cmd/Dockerfile
@@ -1,4 +1,4 @@
-FROM alpine:3.15.6
+FROM alpine:3.17.2
 
 ARG GOARCH=amd64
 RUN apk -U upgrade && apk add ca-certificates && rm -rf /var/cache/apk/*

diff --git a/projects/discovery/cmd/Dockerfile b/projects/discovery/cmd/Dockerfile
@@ -1,4 +1,4 @@
-FROM alpine:3.15.6
+FROM alpine:3.17.2
 
 ARG GOARCH=amd64
 

diff --git a/projects/examples/services/sleeper/Dockerfile b/projects/examples/services/sleeper/Dockerfile
@@ -1,4 +1,4 @@
-FROM alpine:3.15.6
+FROM alpine:3.17.2
 
 RUN apk upgrade --update-cache \
     && apk add ca-certificates \

diff --git a/projects/gateway/cmd/Dockerfile b/projects/gateway/cmd/Dockerfile
@@ -1,4 +1,4 @@
-FROM alpine:3.15.6
+FROM alpine:3.17.2
 
 ARG GOARCH=amd64
 

diff --git a/projects/ingress/cmd/Dockerfile b/projects/ingress/cmd/Dockerfile
@@ -1,4 +1,4 @@
-FROM alpine:3.15.6
+FROM alpine:3.17.2
 
 ARG GOARCH=amd64
 

diff --git a/projects/sds/cmd/Dockerfile b/projects/sds/cmd/Dockerfile
@@ -1,4 +1,4 @@
-FROM alpine:3.15.6
+FROM alpine:3.17.2
 
 ARG GOARCH=amd64