Merge pull request #586 from Automattic/fix/cve

security(nginx): fix CVE-2023-43785, CVE-2023-43786, CVE-2023-43787
Automattic · Nov 10, 2023 · 47fc2ac · 47fc2ac
2 parents f1749c6 + 2bfe8a8
commit 47fc2ac
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/nginx/Dockerfile b/nginx/Dockerfile
@@ -1,5 +1,5 @@
 FROM nginx:1.25.3-alpine@sha256:db353d0f0c479c91bd15e01fc68ed0f33d9c4c52f3415e63332c3d0bf7a4bb77
 
-RUN apk add --no-cache shadow
+RUN apk upgrade --no-cache && apk add --no-cache shadow
 
 COPY default.conf /etc/nginx/conf.d/default.conf