Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update liquibase - Fix CVE-2024-24791 on lpm package #17167

Merged
merged 1 commit into from
Jul 12, 2024

Conversation

jandroav
Copy link
Contributor

No description provided.

@jandroav jandroav requested a review from a team as a code owner July 12, 2024 07:57

This comment has been minimized.

Copy link

Diff for 70fb9c0:
diff --git a/_bashbrew-cat b/_bashbrew-cat
index 2ff3206..718c1a4 100644
--- a/_bashbrew-cat
+++ b/_bashbrew-cat
@@ -4,9 +4,9 @@ GitRepo: https://github.com/liquibase/docker.git
 
 Tags: 4.28, 4.28.0, 4.28.0.1, latest
 GitFetch: refs/heads/main
-GitCommit: fd4c7b81522d7956289e7534078390212b2f77f4
+GitCommit: 666d1c82ff5b6f3a282a7dc2767ae6d95be82ad3
 
 Tags: 4.28-alpine, 4.28.0-alpine, 4.28.0.1-alpine, alpine
 GitFetch: refs/heads/main
-GitCommit: fd4c7b81522d7956289e7534078390212b2f77f4
+GitCommit: 666d1c82ff5b6f3a282a7dc2767ae6d95be82ad3
 File: Dockerfile.alpine
diff --git a/liquibase_alpine/Dockerfile.alpine b/liquibase_alpine/Dockerfile.alpine
index 4ab6a5c..439d226 100644
--- a/liquibase_alpine/Dockerfile.alpine
+++ b/liquibase_alpine/Dockerfile.alpine
@@ -1,5 +1,5 @@
 # Use multi-stage build
-FROM alpine:3.19
+FROM alpine:3.20
 
 # Create liquibase user
 RUN addgroup --gid 1001 liquibase && \
@@ -26,9 +26,9 @@ RUN set -x && \
     ln -s /liquibase/docker-entrypoint.sh /usr/local/bin/docker-entrypoint.sh && \
     liquibase --version
 
-ARG LPM_VERSION=0.2.6
-ARG LPM_SHA256=0e1df6b8daf9d53a2d1d90fa8e48abbcbb8e885d249de7a09879a3a0276bebdf
-ARG LPM_SHA256_ARM=b1f6d5c8b21353b213ef828849c3d767d4214e13e8c0f4fbadd038c96ef93389
+ARG LPM_VERSION=0.2.7
+ARG LPM_SHA256=e831120c566c76a427c6d3489cd62d5447322444399393e3ef304db0c036c4a1
+ARG LPM_SHA256_ARM=720afb6bafb987ab502b86682f410d0e19da45fdf0119d947ed7bfa4e6a02665
 
 # Download and Install lpm
 RUN mkdir /liquibase/bin && \
diff --git a/liquibase_latest/Dockerfile b/liquibase_latest/Dockerfile
index 1f8e542..8513e92 100644
--- a/liquibase_latest/Dockerfile
+++ b/liquibase_latest/Dockerfile
@@ -25,9 +25,9 @@ RUN wget -q -O liquibase-${LIQUIBASE_VERSION}.tar.gz "https://github.com/liquiba
     ln -s /liquibase/docker-entrypoint.sh /usr/local/bin/docker-entrypoint.sh && \
     liquibase --version
 
-ARG LPM_VERSION=0.2.6
-ARG LPM_SHA256=0e1df6b8daf9d53a2d1d90fa8e48abbcbb8e885d249de7a09879a3a0276bebdf
-ARG LPM_SHA256_ARM=b1f6d5c8b21353b213ef828849c3d767d4214e13e8c0f4fbadd038c96ef93389
+ARG LPM_VERSION=0.2.7
+ARG LPM_SHA256=e831120c566c76a427c6d3489cd62d5447322444399393e3ef304db0c036c4a1
+ARG LPM_SHA256_ARM=720afb6bafb987ab502b86682f410d0e19da45fdf0119d947ed7bfa4e6a02665
 
 # Download and Install lpm
 RUN apt-get update && \

Relevant Maintainers:

@yosifkit yosifkit merged commit 03127bf into docker-library:master Jul 12, 2024
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants