Merge pull request #412 from andyzhangx/fix-CVE-2021-3996
fix: CVE-2021-3996 in image build
This commit is contained in:
commit
4da71f982a
|
|
@ -12,12 +12,12 @@
|
|||
# See the License for the specific language governing permissions and
|
||||
# limitations under the License.
|
||||
|
||||
FROM k8s.gcr.io/build-image/debian-base:bullseye-v1.0.0
|
||||
FROM k8s.gcr.io/build-image/debian-base:bullseye-v1.1.0
|
||||
|
||||
RUN apt update && apt-mark unhold libcap2
|
||||
RUN clean-install ca-certificates cifs-utils util-linux e2fsprogs mount udev xfsprogs
|
||||
# install updated packages to fix CVE issues
|
||||
RUN clean-install libssl1.1 libgssapi-krb5-2 libk5crypto3 libkrb5-3 libkrb5support0 libgmp10
|
||||
RUN clean-install libgmp10 bsdutils
|
||||
|
||||
LABEL maintainers="andyzhangx"
|
||||
LABEL description="SMB CSI Driver"
|
||||
|
|
|
|||
Loading…
Reference in New Issue