Skip to content

Commit 7f43d34

Browse files
committed
fix(docker): upgrade alpine packages to patch CVE-2026-27135 (nghttp2)
1 parent d72da40 commit 7f43d34

3 files changed

Lines changed: 6 additions & 0 deletions

File tree

docker/nginx/Dockerfile

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,7 @@
11
FROM nginx:alpine
22

3+
RUN apk upgrade --no-cache
4+
35
COPY docker/nginx/api.conf /etc/nginx/conf.d/default.conf
46

57
# Copy Symfony public directory for static assets

docker/node/Dockerfile.prod

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -11,6 +11,8 @@ RUN npx ng build --configuration=production
1111
# --- Serve with nginx ---
1212
FROM nginx:alpine
1313

14+
RUN apk upgrade --no-cache
15+
1416
RUN rm -rf /usr/share/nginx/html/*
1517
COPY --from=builder /app/dist/frontend/browser /usr/share/nginx/html
1618
RUN if [ -f /usr/share/nginx/html/index.csr.html ] && [ ! -f /usr/share/nginx/html/index.html ]; then \

docker/php/Dockerfile.prod

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,7 @@
11
FROM php:8.4-fpm-alpine
22

3+
RUN apk upgrade --no-cache
4+
35
RUN apk add --no-cache \
46
icu-dev \
57
libpq-dev \

0 commit comments

Comments
 (0)