From 40bb4c3735b41b24bc907dd1139ffd55c0f96b3c Mon Sep 17 00:00:00 2001
From: Pat Ledgerwood <pat.ledgerwood@statcan.gc.ca>
Date: Tue, 20 Aug 2024 17:18:11 -0400
Subject: [PATCH] fix: force latest package minizip for cve

---
 mpi-operator/Dockerfile | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/mpi-operator/Dockerfile b/mpi-operator/Dockerfile
index 74da9cf..9f59dac 100644
--- a/mpi-operator/Dockerfile
+++ b/mpi-operator/Dockerfile
@@ -7,7 +7,9 @@ FROM debian:bookworm
 
 ARG port=2222
 
-RUN apt update && apt install -y --no-install-recommends \
+RUN apt update \
+        && apt-get upgrade -y \
+        && apt install -y --no-install-recommends \
 			openssh-server \
 			openssh-client \
             libcap2-bin \
@@ -15,7 +17,7 @@ RUN apt update && apt install -y --no-install-recommends \
             sqlite3 \
             curl \
             ca-certificates \
-        &&  apt-get upgrade -y \
+            minizip \
 		&& rm -rf /var/lib/apt/lists/*
 
 # Add priviledge separation directoy to run sshd as root.