From 8234149b5561531713aa7c5f772653307ad76a52 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 13 Jan 2023 08:00:31 +0000 Subject: [PATCH 1/2] build(deps): bump alpine from 3.17.0 to 3.17.1 Bumps alpine from 3.17.0 to 3.17.1. --- updated-dependencies: - dependency-name: alpine dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 5fdfb3b..9bea5fc 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM docker.io/alpine:3.17.0 +FROM docker.io/alpine:3.17.1 # nftables + dependencies add 2.3MB to image ARG TOR_PACKAGE_VERSION=0.4.7.12-r0 From 513e47eb0a17096882b58315a37df1dad9fadf97 Mon Sep 17 00:00:00 2001 From: Fabian Peter Hammerle Date: Fri, 13 Jan 2023 16:24:41 +0100 Subject: [PATCH 2/2] upgrade tor package from v0.4.7.12-r0 to v0.4.7.13-r0 (including fix for TROVE-2022-002, see below) https://web.archive.org/web/20230113153058/https://gitlab.torproject.org/tpo/core/tor/-/issues/40730 https://web.archive.org/web/20230113144848/https://gitweb.torproject.org/tor.git/plain/ChangeLog https://git.alpinelinux.org/aports/commit/community/tor?h=3.17-stable&id=06668be47f81efab97ab829785dd344dd73d250d https://github.com/fphammerle/docker-onion-service/commit/e9c3a5e14f4ce19cc073ebef386dbb6d8eab4763 --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index 9bea5fc..8a21059 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,7 +1,7 @@ FROM docker.io/alpine:3.17.1 # nftables + dependencies add 2.3MB to image -ARG TOR_PACKAGE_VERSION=0.4.7.12-r0 +ARG TOR_PACKAGE_VERSION=0.4.7.13-r0 ARG NFTABLES_PACKAGE_VERSION=1.0.5-r2 RUN apk add --no-cache \ nftables=$NFTABLES_PACKAGE_VERSION \