From e14a5ddc459c7aba1e68677461facb1b1d31a41a Mon Sep 17 00:00:00 2001 From: "Peter A. Jonsson" Date: Thu, 20 Aug 2026 12:05:47 +0200 Subject: [PATCH] fix: run apt-get upgrade in Dockerfile This brings in the latest security updates from Debian when building the image. Fixes #494 Signed-off-by: Peter A. Jonsson --- Dockerfile | 3 +++ 1 file changed, 3 insertions(+) diff --git a/Dockerfile b/Dockerfile index 0b8b2a0c5..2ff3a214a 100644 --- a/Dockerfile +++ b/Dockerfile @@ -7,6 +7,7 @@ ARG PG_MAJOR ENV PATH=$PATH:/usr/lib/postgresql/$PG_MAJOR/bin RUN apt-get update && \ + apt-get upgrade -y && \ apt-get install -y --no-install-recommends postgresql-common ca-certificates gnupg && \ /usr/share/postgresql-common/pgdg/apt.postgresql.org.sh -y -c "${PG_MAJOR}" && \ apt-get install -y --no-install-recommends -o Dpkg::::="--force-confdef" -o Dpkg::::="--force-confold" postgresql-common && \ @@ -26,6 +27,7 @@ ARG EXTENSIONS ARG STANDARD_ADDITIONAL_POSTGRES_PACKAGES USER root RUN apt-get update && \ + apt-get upgrade -y && \ apt-get install -y --no-install-recommends locales-all ${STANDARD_ADDITIONAL_POSTGRES_PACKAGES} ${EXTENSIONS} && \ apt-get purge -y --auto-remove -o APT::AutoRemove::RecommendsImportant=false && \ rm -rf /var/lib/apt/lists/* /var/cache/* /var/log/* @@ -40,6 +42,7 @@ ENV PIP_BREAK_SYSTEM_PACKAGES=1 USER root RUN apt-get update && \ + apt-get upgrade -y && \ apt-get install -y --no-install-recommends \ # We require build-essential and python3-dev to build lz4 on arm64 since there isn't a pre-compiled wheel available build-essential python3-dev \