You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
We are currently using dex 38.0. It has some vulnerabilities related to open ssl, and the alpine linux has resolved this in their new release.
Impacted packages are:
libcrypto3 3.1.4-r2 need to update to 3.1.4-r5
libssl3 3.1.4-r2 need to update to 3.1.4-r5
I am planning to do below until we have new version 39.0 of dex.
Clone the dex repo from github.
Have a local copy of dockerfile in our repo.
Change the docker file to have alpine:3.19.1@sha256:6457d53fb065d6f250e1504b9bc42d5b6c65941d57532c072d929dd0628977d0.
Run the docker build providing path to this new local docker file.
Use the image it builds.
Please confirm and let me know if this should work and if I am missing any other steps.
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
-
Hi,
We are currently using dex 38.0. It has some vulnerabilities related to open ssl, and the alpine linux has resolved this in their new release.
Impacted packages are:
I am planning to do below until we have new version 39.0 of dex.
Clone the dex repo from github.
Have a local copy of dockerfile in our repo.
Change the docker file to have alpine:3.19.1@sha256:6457d53fb065d6f250e1504b9bc42d5b6c65941d57532c072d929dd0628977d0.
Run the docker build providing path to this new local docker file.
Use the image it builds.
Please confirm and let me know if this should work and if I am missing any other steps.
Thanks.
Beta Was this translation helpful? Give feedback.
All reactions