Skip to content

Commit d72e44b

Browse files
authored
chore(proxy-init): bump zlib to address CVE-2026-27171 (#709)
This will need to be undone once alpine gets updated
1 parent 537fb96 commit d72e44b

1 file changed

Lines changed: 2 additions & 0 deletions

File tree

Dockerfile

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -23,6 +23,8 @@ FROM --platform=$TARGETPLATFORM alpine:3.23.3 as runtime
2323
RUN apk add iptables-legacy iptables libcap && \
2424
touch /run/xtables.lock && \
2525
chmod 0666 /run/xtables.lock
26+
# TODO: remove when CVE-2026-27171 gets addressed in alpine:3.23.3
27+
RUN apk upgrade --no-cache zlib
2628

2729
COPY --link --from=go /out/linkerd2-proxy-init /usr/local/bin/proxy-init
2830

0 commit comments

Comments
 (0)