Merge pull request #272 from humblec/cve

update base image version of plugin binary to fix CVEs
This commit is contained in:
Kubernetes Prow Robot 2022-01-25 04:16:31 -08:00 committed by GitHub
commit 6c3baa7ea8
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -12,7 +12,7 @@
# See the License for the specific language governing permissions and
# limitations under the License.
FROM k8s.gcr.io/build-image/debian-base:bullseye-v1.0.0
FROM k8s.gcr.io/build-image/debian-base:bullseye-v1.1.0
# Architecture for bin folder
ARG ARCH
@ -23,6 +23,6 @@ COPY bin/${ARCH}/nfsplugin /nfsplugin
RUN apt update && apt-mark unhold libcap2
RUN clean-install ca-certificates mount nfs-common netbase
# install updated packages to fix CVE issues
RUN clean-install libssl1.1 libgssapi-krb5-2 libk5crypto3 libkrb5-3 libkrb5support0 libgmp10
RUN clean-install libssl1.1 libgssapi-krb5-2 libk5crypto3 libkrb5-3 libkrb5support0 libgmp10 bsdutils
ENTRYPOINT ["/nfsplugin"]