Browse Source

upgrade alpine base image v3.13.2->3.13.3 including openssh-server package upgrade v8.4_p1-r2->v8.4_p1-r3 (diff links below, CVE-2020-14145 only relevant for clients)

https://ubuntu.com/security/CVE-2020-14145

https://git.alpinelinux.org/aports/commit/main/openssh?id=3a797aaebe72b0c92b602223a960d273986cbc46
https://git.alpinelinux.org/aports/commit/main/openssh?id=c73bf359dd445e718165b219c14a4bd3779cede2
Fabian Peter Hammerle 3 years ago
parent
commit
a36338c425
3 changed files with 4 additions and 2 deletions
  1. 2 2
      Dockerfile
  2. 1 0
      openssh-package-log.url
  3. 1 0
      openssh-release-notes.url

+ 2 - 2
Dockerfile

@@ -1,6 +1,6 @@
-FROM alpine:3.13.2
+FROM alpine:3.13.3
 
-ARG OPENSSH_SERVER_PACKAGE_VERSION=8.4_p1-r2
+ARG OPENSSH_SERVER_PACKAGE_VERSION=8.4_p1-r3
 RUN apk add --no-cache openssh-server=$OPENSSH_SERVER_PACKAGE_VERSION
 
 ENV SSHD_HOST_KEYS_DIR /etc/ssh/host_keys

+ 1 - 0
openssh-package-log.url

@@ -0,0 +1 @@
+https://git.alpinelinux.org/aports/log/main/openssh

+ 1 - 0
openssh-release-notes.url

@@ -0,0 +1 @@
+https://www.openssh.com/releasenotes.html