diff --git a/CHANGELOG.md b/CHANGELOG.md index 47b57bbc..a021f239 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -17,6 +17,7 @@ and this project adheres to ### Changed - ⬆️(dev) pin LiveKit server to v1.13.6 +- 🔒(frontend) upgrade base image to 1.30.4-alpine3.24 ### Fixed diff --git a/docker/dinum-frontend/Dockerfile b/docker/dinum-frontend/Dockerfile index 403d347c..8b997218 100644 --- a/docker/dinum-frontend/Dockerfile +++ b/docker/dinum-frontend/Dockerfile @@ -54,19 +54,11 @@ RUN npx webpack --mode production # ---- Front-end image ---- -FROM nginxinc/nginx-unprivileged:1.30.3-alpine3.23 AS frontend-production +FROM nginxinc/nginx-unprivileged:1.30.4-alpine3.24 AS frontend-production USER root - -# Security patches for known CVEs -RUN apk update && apk upgrade \ - libcrypto3>=3.5.7-r0 \ - libssl3>=3.5.7-r0 \ - musl \ - musl-utils \ - zlib>=1.3.2-r0 \ - libexpat>=2.8.4-r0 \ - && apk del curl +RUN apk del curl +USER nginx USER nginx diff --git a/src/frontend/Dockerfile b/src/frontend/Dockerfile index 8f37a892..2d35a320 100644 --- a/src/frontend/Dockerfile +++ b/src/frontend/Dockerfile @@ -42,20 +42,10 @@ ENV VITE_APP_TITLE=${VITE_APP_TITLE} RUN npm run build # ---- Front-end image ---- -FROM nginxinc/nginx-unprivileged:1.30.3-alpine3.23 AS frontend-production +FROM nginxinc/nginx-unprivileged:1.30.4-alpine3.24 AS frontend-production USER root - -# Security patches for known CVEs -RUN apk update && apk upgrade \ - libcrypto3>=3.5.7-r0 \ - libssl3>=3.5.7-r0 \ - musl \ - musl-utils \ - zlib>=1.3.2-r0 \ - libexpat>=2.8.4-r0 \ - && apk del curl - +RUN apk del curl USER nginx # Un-privileged user running the application