diff --git a/operator/build/Dockerfile b/operator/build/Dockerfile index 64c6582..08d9ded 100644 --- a/operator/build/Dockerfile +++ b/operator/build/Dockerfile @@ -25,6 +25,10 @@ ENV OPERATOR=/usr/local/bin/postgres-operator \ USER_UID=1001 \ USER_NAME=postgres-operator +# Upgrade zlib to fix CVE-2026-22184 (CRITICAL) and CVE-2026-27171 (MEDIUM) +# Temporal fix, will be removed when alpine will be fixed +RUN apk upgrade --no-cache zlib + # install operator binary COPY --from=builder /workspace/build/_output/bin/postgres-operator ${OPERATOR} COPY build/bin /usr/local/bin diff --git a/services/backup-daemon/Dockerfile b/services/backup-daemon/Dockerfile index 0749983..b77c192 100644 --- a/services/backup-daemon/Dockerfile +++ b/services/backup-daemon/Dockerfile @@ -43,7 +43,7 @@ RUN apt-get --no-install-recommends install -y comerr-dev \ openssl curl \ vim \ locales -RUN python3 -m pip install -U setuptools==78.1.1 wheel==0.38.0 +RUN python3 -m pip install -U setuptools==82.0.1 wheel==0.46.2 COPY docker/requirements.txt /root/requirements.txt RUN python3 -m pip install --no-cache-dir -r /root/requirements.txt \ @@ -51,6 +51,7 @@ RUN python3 -m pip install --no-cache-dir -r /root/requirements.txt \ && python3 -m pip install grpcio \ && python3 -m pip install opentelemetry-distro opentelemetry-exporter-otlp opentelemetry-api opentelemetry-sdk opentelemetry-instrumentation-flask \ && opentelemetry-bootstrap -a install \ + && python3 -m pip install "setuptools==82.0.1" "wheel==0.46.2" "jaraco.context==6.1.0" \ && pip3 uninstall -y pip \ && apt-get remove -y --purge gcc-12 \ && apt-get remove -y --purge python3-dev \ diff --git a/services/backup-daemon/docker/requirements.txt b/services/backup-daemon/docker/requirements.txt index aedcf29..87a5b4b 100644 --- a/services/backup-daemon/docker/requirements.txt +++ b/services/backup-daemon/docker/requirements.txt @@ -22,6 +22,7 @@ gunicorn==23.0.0 httplib2==0.21.0 idna==3.11 importlib-metadata==4.8.3 +jaraco.context==6.1.0 ipaddress==1.0.23 jmespath==1.1.0 kubernetes==31.0.0 @@ -50,5 +51,6 @@ tzlocal==4.3 uritemplate==4.1.1 urllib3==2.6.3 websocket-client==1.4.2 -Werkzeug==3.1.5 +Werkzeug==3.1.6 +wheel==0.46.2 zipp==3.23.0 \ No newline at end of file