Skip to content
This repository was archived by the owner on Feb 5, 2026. It is now read-only.

Comments

[Snyk] Security upgrade alpine from 3.12.0 to 3.23.3#60

Open
ayusuf-mq wants to merge 1 commit intomasterfrom
snyk-fix-93e20c481a9dedbfabc6664a6ca92350
Open

[Snyk] Security upgrade alpine from 3.12.0 to 3.23.3#60
ayusuf-mq wants to merge 1 commit intomasterfrom
snyk-fix-93e20c481a9dedbfabc6664a6ca92350

Conversation

@ayusuf-mq
Copy link

snyk-top-banner

Snyk has created this PR to fix 3 vulnerabilities in the dockerfile dependencies of this project.

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Snyk changed the following file(s):

  • modules/openapi-generator/src/main/resources/bash/Dockerfile.mustache

We recommend upgrading to alpine:3.23.3, as this image has only 0 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Vulnerabilities that will be fixed with an upgrade:

Issue Score
high severity Loop with Unreachable Exit Condition ('Infinite Loop')
SNYK-ALPINE312-OPENSSL-2426332
  721  
high severity Loop with Unreachable Exit Condition ('Infinite Loop')
SNYK-ALPINE312-OPENSSL-2426332
  721  
critical severity Out-of-bounds Read
SNYK-ALPINE312-APKTOOLS-1533753
  714  
critical severity Buffer Overflow
SNYK-ALPINE312-OPENSSL-1569452
  714  
critical severity Buffer Overflow
SNYK-ALPINE312-OPENSSL-1569452
  714  

Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • Max score is 1000. Note that the real score may have changed since the PR was raised.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic


Learn how to fix vulnerabilities with free interactive lessons:

🦉 Out-of-bounds Read

@ayusuf-mq
Copy link
Author

Merge Risk: High

This is a major OS upgrade across multiple stable releases, from a version that is no longer supported to a recent one. It includes significant breaking changes to core system libraries, runtimes, and package management.

Highlights:

  • System Library Changes: OpenSSL is upgraded from v1.1 to v3.0, which can break applications with dependencies on the older version. The musl C library was also updated, changing the time_t definition on 32-bit systems.
  • Runtime & Package Removals: Python 2 and PHP 7 have been removed. Redis was replaced by its fork, Valkey, due to a license change.

Source: Alpine Linux release notes
Recommendation: Rebuild the application on the new base image and conduct thorough testing. Validate application compatibility with updated runtimes and system libraries like OpenSSL 3.0.

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants