The Dockerfile runs apt-get update, and apt-get install, but it doesn't seem to run apt-get upgrade, so any vulnerable deb packages in the image passed as the BASE argument will end up in the final image.
I don't know much about databases, but this should be pretty easy to fix, would you like me to make a PR that makes the Dockerfile also run apt-get upgrade?
The Dockerfile runs
apt-get update, andapt-get install, but it doesn't seem to runapt-get upgrade, so any vulnerable deb packages in the image passed as theBASEargument will end up in the final image.I don't know much about databases, but this should be pretty easy to fix, would you like me to make a PR that makes the Dockerfile also run
apt-get upgrade?