Sample Header Ad - 728x90

Unable to install or upgrade to specific version of alpine/expat 2.6.0-r0 in alpine docker image

0 votes
2 answers
2990 views
Due to latest vulnerability detected CVE-2023-52425, CVE-2023-52426, I need to upgrade alpine/expat 2.5.0-r2 to expat 2.6.0-r0 in my alpine docker image. I tried various ways (see below) to upgrade the expat package version during docker build, but the resulting image still shows alpine/expat 2.5.0-r2. I would appreciate any advice on how to do this. referencing : https://alpine.pkgs.org/3.19/alpine-main-x86_64/expat-2.6.0-r0.apk.html In my Dockerfile, I tried the following 3 ways to install expat 2.6.0-r0 to no avail: 1) RUN apk update && apk add --upgrade --no-cache expat 2) RUN curl -O http://dl-cdn.alpinelinux.org/alpine/v3.19/main/x86_64/expat-2.6.0-r0.apk RUN apk add --allow-untrusted expat-2.6.0-r0.apk 3) RUN apk add --upgrade --no-cache expat --repository='https://pkgs.alpinelinux.org/package/v3.19/main/x86_64/expat ' 4) RUN echo http://dl-cdn.alpinelinux.org/alpine/v3.19/main/x86_64/ >> /etc/apk/repositories RUN apk --no-cache --update add expatenter image description here
Asked by TJL (1 rep)
Feb 13, 2024, 02:33 PM
Last activity: Oct 1, 2024, 07:06 AM