(skywalking-satellite) branch main updated: cves: bump alpine packages to fix busybox and zlib CVEs (#242)

[ke...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

kezhenxu94 pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/skywalking-satellite.git


The following commit(s) were added to refs/heads/main by this push:
     new 6f0e3de  cves: bump alpine packages to fix busybox and zlib CVEs (#242)
6f0e3de is described below

commit 6f0e3dead129b25f694e31eae93a556bf14546d9
Author: tetrate-ci[bot] <52...@users.noreply.github.com>
AuthorDate: Thu Apr 2 14:48:18 2026 +0800

    cves: bump alpine packages to fix busybox and zlib CVEs (#242)
    
    Run apk update and apk upgrade explicitly before apk add to ensure
    the latest Alpine packages are installed, fixing:
    - CVE-2025-60876: busybox 1.37.0-r14 → 1.37.0-r30
    - CVE-2026-27171: zlib 1.3.1-r2 → 1.3.2-r0
    
    Co-authored-by: CVE Fix Bot <cv...@example.com>
---
 docker/Dockerfile | 5 +++--
 1 file changed, 3 insertions(+), 2 deletions(-)

diff --git a/docker/Dockerfile b/docker/Dockerfile
index ea0f50c..e4731fd 100644
--- a/docker/Dockerfile
+++ b/docker/Dockerfile
@@ -30,8 +30,9 @@ RUN mv /src/bin/skywalking-satellite-${VERSION}-linux-${TARGETARCH} /src/bin/sky
 
 FROM alpine:3.23
 
-RUN apk add --no-cache ca-certificates && \
-    apk -U upgrade
+RUN apk update --no-cache && \
+    apk upgrade --no-cache && \
+    apk add --no-cache ca-certificates
 
 VOLUME /skywalking/configs