You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
How to update underlying vulnerable packages in keycloak 21.x or higher
#19375
I have looked through the issues and found some information on the image switch in v21 which does not include DNF anymore. When building our custom image I added
RUN microdnf update -y && microdnf clean all
This helped us until v20.x to clear any image vulnerabilities. However since this is not present in 21, how do I keep the underlying packages safe.
The registry reports now the following
How can I build an image which fixes the container vulnerabilities. Do I need to update the packages in the builder stage? Is there a base keycloak image that gets refreshed (not nightly) which fixes the issues? This is unclear to me, thanks for any help/feedback.
reacted with thumbs up emoji reacted with thumbs down emoji reacted with laugh emoji reacted with hooray emoji reacted with confused emoji reacted with heart emoji reacted with rocket emoji reacted with eyes emoji
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
Hi,
I have looked through the issues and found some information on the image switch in v21 which does not include DNF anymore. When building our custom image I added
RUN microdnf update -y && microdnf clean allThis helped us until v20.x to clear any image vulnerabilities. However since this is not present in 21, how do I keep the underlying packages safe.
The registry reports now the following
How can I build an image which fixes the container vulnerabilities. Do I need to update the packages in the builder stage? Is there a base keycloak image that gets refreshed (not nightly) which fixes the issues? This is unclear to me, thanks for any help/feedback.
All reactions