Merge pull request kermitt2#1136 from kermitt2/fix-vulnerabilities

Reduce critical vulnerabilities in the grobid docker images
kp-forks · Jul 14, 2024 · e04048d · e04048d
2 parents 748a7f6 + b107dbc
commit e04048d
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/Dockerfile.crf b/Dockerfile.crf
@@ -18,6 +18,7 @@ FROM openjdk:17-jdk-slim as builder
 USER root
 
 RUN apt-get update && \
+    apt-get -y upgrade && \
     apt-get -y --no-install-recommends install unzip
 
 WORKDIR /opt/grobid-source
@@ -65,6 +66,7 @@ RUN rm -rf grobid-source
 FROM openjdk:17-slim
 
 RUN apt-get update && \
+    apt-get -y upgrade && \
     apt-get -y --no-install-recommends install libxml2 libfontconfig && \
     rm -rf /var/lib/apt/lists/*
 

diff --git a/Dockerfile.delft b/Dockerfile.delft
@@ -20,6 +20,7 @@ FROM openjdk:17-jdk-slim as builder
 USER root
 
 RUN apt-get update && \
+    apt-get -y upgrade && \
     apt-get -y --no-install-recommends install unzip
 
 WORKDIR /opt/grobid-source
@@ -86,6 +87,7 @@ ENTRYPOINT ["/tini", "-s", "--"]
 
 # install JRE, python and other dependencies
 RUN apt-get update && \
+    apt-get -y upgrade && \
     apt-get -y --no-install-recommends install apt-utils build-essential gcc libxml2 libfontconfig unzip curl \
     openjdk-17-jre-headless ca-certificates-java \
     musl gfortran \