From 83ee84f9175659698f92fe613157ad2b5452984e Mon Sep 17 00:00:00 2001 From: andyzhangx Date: Sun, 19 Dec 2021 02:43:37 +0000 Subject: [PATCH] fix: CVE-2021-43618 in Ubuntu image rename test --- .github/workflows/pluto.yaml | 2 +- pkg/blobplugin/Dockerfile | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/pluto.yaml b/.github/workflows/pluto.yaml index fe6bcfb55..648ff6855 100644 --- a/.github/workflows/pluto.yaml +++ b/.github/workflows/pluto.yaml @@ -1,4 +1,4 @@ -name: apiVersion deprecation test +name: k8s api version check on: pull_request: {} push: {} diff --git a/pkg/blobplugin/Dockerfile b/pkg/blobplugin/Dockerfile index d75b66c6b..5df7a2876 100644 --- a/pkg/blobplugin/Dockerfile +++ b/pkg/blobplugin/Dockerfile @@ -17,7 +17,7 @@ COPY ./_output/blobplugin /blobplugin RUN apt update && apt-mark unhold libcap2 RUN clean-install ca-certificates libfuse-dev libcurl4-gnutls-dev libgnutls28-dev uuid-dev libgcrypt20-dev util-linux mount udev wget e2fsprogs nfs-common netbase # install updated packages to fix CVE issues -RUN clean-install libssl1.1 libgssapi-krb5-2 libk5crypto3 libkrb5-3 libkrb5support0 +RUN clean-install libssl1.1 libgssapi-krb5-2 libk5crypto3 libkrb5-3 libkrb5support0 libgmp10 RUN mkdir /blobfuse-proxy/ COPY ./_output/blobfuse-proxy.deb /blobfuse-proxy/ # for compatibility, remove this after v1.6.0 release (todo)