Skip to content

Commit 37c734a

Browse files
committed
chore(docker): bump gosu to 1.19
Update gosu from version 1.16 to 1.19 in Dockerfile-15, Dockerfile-17, and Dockerfile-orioledb-17. This change aligns the Docker images with the official Docker Postgres image, which recently upgraded to gosu 1.19. Staying consistent with the upstream helps reduce potential security findings and maintain compatibility with the official base images. A Trivy scan on the previous image reported several medium to critical issues in the older gosu binary. Updating to the latest version helps minimize these potential risks. No functional changes beyond the version update.
1 parent fb79d32 commit 37c734a

File tree

3 files changed

+3
-3
lines changed

3 files changed

+3
-3
lines changed

Dockerfile-15

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -134,7 +134,7 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
134134
ca-certificates \
135135
&& rm -rf /var/lib/apt/lists/*
136136
# Download binary
137-
ARG GOSU_VERSION=1.16
137+
ARG GOSU_VERSION=1.19
138138
ARG GOSU_GPG_KEY=B42F6819007F00F88E364FD4036A9C25BF357DD4
139139
ADD https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$TARGETARCH \
140140
/usr/local/bin/gosu

Dockerfile-17

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -138,7 +138,7 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
138138
ca-certificates \
139139
&& rm -rf /var/lib/apt/lists/*
140140
# Download binary
141-
ARG GOSU_VERSION=1.16
141+
ARG GOSU_VERSION=1.19
142142
ARG GOSU_GPG_KEY=B42F6819007F00F88E364FD4036A9C25BF357DD4
143143
ADD https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$TARGETARCH \
144144
/usr/local/bin/gosu

Dockerfile-orioledb-17

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -138,7 +138,7 @@ RUN apt-get update && apt-get install -y --no-install-recommends \
138138
ca-certificates \
139139
&& rm -rf /var/lib/apt/lists/*
140140
# Download binary
141-
ARG GOSU_VERSION=1.16
141+
ARG GOSU_VERSION=1.19
142142
ARG GOSU_GPG_KEY=B42F6819007F00F88E364FD4036A9C25BF357DD4
143143
ADD https://github.com/tianon/gosu/releases/download/$GOSU_VERSION/gosu-$TARGETARCH \
144144
/usr/local/bin/gosu

0 commit comments

Comments
 (0)