Unable to install or upgrade to specific version of alpine/expat 2.6.0-r0 in alpine docker image
0
votes
2
answers
2990
views
Due to latest vulnerability detected CVE-2023-52425, CVE-2023-52426, I need to upgrade alpine/expat 2.5.0-r2 to expat 2.6.0-r0 in my alpine docker image.
I tried various ways (see below) to upgrade the expat package version during docker build, but the resulting image still shows alpine/expat 2.5.0-r2. I would appreciate any advice on how to do this.
referencing :
https://alpine.pkgs.org/3.19/alpine-main-x86_64/expat-2.6.0-r0.apk.html
In my Dockerfile, I tried the following 3 ways to install expat 2.6.0-r0 to no avail:
1) RUN apk update && apk add --upgrade --no-cache expat
2) RUN curl -O http://dl-cdn.alpinelinux.org/alpine/v3.19/main/x86_64/expat-2.6.0-r0.apk
RUN apk add --allow-untrusted expat-2.6.0-r0.apk
3) RUN apk add --upgrade --no-cache expat --repository='https://pkgs.alpinelinux.org/package/v3.19/main/x86_64/expat '
4) RUN echo http://dl-cdn.alpinelinux.org/alpine/v3.19/main/x86_64/ >> /etc/apk/repositories
RUN apk --no-cache --update add expat

Asked by TJL
(1 rep)
Feb 13, 2024, 02:33 PM
Last activity: Oct 1, 2024, 07:06 AM
Last activity: Oct 1, 2024, 07:06 AM