Skip to content

Commit a1a6659

Browse files
jpicklykclaude
andcommitted
fix: update libexpat and binutils to address CVE-2024-8176 and CVE-2025-0840
- Update libexpat to fix CVE-2024-8176 (CVSS 7.5) - Update binutils to fix CVE-2025-0840 (CVSS 6.3) - Explicitly upgrade vulnerable packages during runtime image build 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>
1 parent 525e9b3 commit a1a6659

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

Dockerfile

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -25,6 +25,9 @@ RUN ./gradlew build --no-daemon
2525
# Runtime stage
2626
FROM eclipse-temurin:23-jdk-alpine
2727

28+
# Update packages to fix CVEs: CVE-2024-8176 (libexpat) and CVE-2025-0840 (binutils)
29+
RUN apk update && apk upgrade libexpat binutils
30+
2831
WORKDIR /app
2932

3033
# Copy the built JAR from the builder stage

0 commit comments

Comments
 (0)