Merge pull request #294 from andyzhangx/CVE-2022-0778

fix: CVE-2022-0778 in image build
This commit is contained in:
Andy Zhang 2022-03-16 16:13:43 +08:00 committed by GitHub
commit 35c7f09f1c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -23,6 +23,6 @@ COPY bin/${ARCH}/nfsplugin /nfsplugin
RUN apt update && apt-mark unhold libcap2
RUN clean-install ca-certificates mount nfs-common netbase
# install updated packages to fix CVE issues
RUN clean-install libgmp10 bsdutils
RUN clean-install libgmp10 bsdutils libssl1.1 openssl
ENTRYPOINT ["/nfsplugin"]