Skip to content

Commit 01be882

Browse files
authored
Remove pinned deps for fixed CVEs (#4269)
1 parent c44bd3e commit 01be882

File tree

1 file changed

+0
-4
lines changed

1 file changed

+0
-4
lines changed

build/Dockerfile.nginx

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -6,10 +6,6 @@ ADD --link --chown=101:1001 https://cs.nginx.com/static/keys/nginx_signing.rsa.p
66

77
FROM nginx:1.29.3-alpine-otel
88

9-
# the following apk update and add are to address CVE-2025-58050, CVE-2025-6021/CVE-2025-49795/CVE-2025-49794/CVE-2025-49796 respectively.
10-
# once a new base image is available with these package updates, they can be removed.
11-
RUN apk update && apk add --no-cache 'pcre2>=10.46-r0' 'libxml2>=2.13.9-r0'
12-
139
# renovate: datasource=github-tags depName=nginx/agent
1410
ARG NGINX_AGENT_VERSION=v3.5.0
1511
ARG NJS_DIR

0 commit comments

Comments
 (0)