Skip to content

Commit bc0a2c7

Browse files
aarthy-dkclaude
andcommitted
fix: bump UI Dockerfile to alpine3.23 and add apk upgrade for CVE-2026-22184
Bumps the nginx-unprivileged runtime base from alpine3.22 to alpine3.23 and adds apk upgrade to ensure zlib 1.3.2-r0 is installed, fixing the critical buffer overflow in the untgz utility. Ref: OBS-1995 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
1 parent 4ef27cd commit bc0a2c7

1 file changed

Lines changed: 5 additions & 1 deletion

File tree

deploy/docker/observability-ui.dockerfile

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,11 @@ COPY observability_ui/ /observability_ui
88
RUN yarn
99
RUN yarn build:ci
1010

11-
FROM ${BASE_IMAGE_URL}nginxinc/nginx-unprivileged:alpine3.22
11+
FROM ${BASE_IMAGE_URL}nginxinc/nginx-unprivileged:alpine3.23
12+
13+
USER root
14+
RUN apk upgrade --no-cache
15+
USER nginx
1216

1317
WORKDIR /observability_ui
1418

0 commit comments

Comments
 (0)