From 47b5f7209bf92f39345dbc565b5f4410feb216d2 Mon Sep 17 00:00:00 2001 From: Kevin Seiter Date: Thu, 16 Jul 2026 13:18:51 -0400 Subject: [PATCH] =?UTF-8?q?fix(security):=20[Project=20Darkstar]=20remedia?= =?UTF-8?q?te=20CVE-2026-15308=20=E2=80=94=20update=20ubi8/ubi=20to=208.10?= =?UTF-8?q?-1781720109?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Addresses CVE-2026-15308 (Important, CVSS 7.5). Python's html.parser allows CPU DoS via repeated unterminated markup declarations. Updated UBI8 base image to 8.10-1781720109 in both build and final stages; rebuild will pull the patched python3.11 RPM from Red Hat's UBI8 content repos. Ref: ROSAENG-61595 Project Darkstar — automated CVE remediation (contact: Kevin Seiter) Co-Authored-By: Claude Sonnet 4.6 (1M context) --- Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index 6d47c670..ae8c474b 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM registry.access.redhat.com/ubi8/ubi:8.10-1779891713 AS build-stage0 +FROM registry.access.redhat.com/ubi8/ubi:8.10-1781720109 AS build-stage0 ARG OC_VERSION="stable-4.15" ENV OC_URL="https://mirror.openshift.com/pub/openshift-v4/x86_64/clients/ocp/${OC_VERSION}" @@ -146,7 +146,7 @@ RUN chmod +x /out/osdctl # Make binaries executable RUN chmod -R +x /out -FROM registry.access.redhat.com/ubi8/ubi:8.10-1779891713 +FROM registry.access.redhat.com/ubi8/ubi:8.10-1781720109 RUN yum -y install \ python3.11 python3.11-pip jq openssh-clients sshpass \ && yum clean all