Merge branch 'release/v3.6.4-2'

Author: ppxl

CHANGELOG.md

@@ -6,6 +6,10 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [v3.6.4-2] - 2022-04-06
+### Change
+- Upgrade zlib package to fix CVE-2018-25032; #11
+
 ## [v3.6.4-1] - 2022-02-10
 ### Fixed
 - XML-Parser Expat (CVE-2022-23852) security issue

Dockerfile

@@ -1,11 +1,16 @@
-FROM registry.cloudogu.com/official/base:3.15.0-1
-LABEL name="official/postfix" \
-      version="3.6.4-1" \
+FROM registry.cloudogu.com/official/base:3.15.3-1
+LABEL NAME="official/postfix" \
+      VERSION="3.6.4-2" \
       [email protected]
 
 # INSTALL POSTFIX
-RUN apk add --update postfix openrc supervisor rsyslog \
-	&& rm -rf /var/cache/apk/*
+RUN set -o errexit \
+  && set -o nounset \
+  && set -o pipefail \
+  && apk update \
+  && apk upgrade \
+  && apk add --update postfix openrc supervisor rsyslog \
+  && rm -rf /var/cache/apk/*
 
 COPY resources /
 

dogu.json

@@ -1,6 +1,6 @@
 {
   "Name": "official/postfix",
-  "Version": "3.6.4-1",
+  "Version": "3.6.4-2",
   "DisplayName": "Postfix",
   "Description": "Postfix - Mail Transfer Agent",
   "Logo": "https://cloudogu.com/images/dogus/postfix.png",