From 098813351657f69d7e9ee305fbafd6c3e2d12df5 Mon Sep 17 00:00:00 2001 From: Humble Chirammal Date: Tue, 25 Jan 2022 16:34:24 +0530 Subject: [PATCH] update base image version of plugin binary to fix CVEs Signed-off-by: Humble Chirammal --- Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index f9f5590a..06678d32 100644 --- a/Dockerfile +++ b/Dockerfile @@ -12,7 +12,7 @@ # See the License for the specific language governing permissions and # limitations under the License. -FROM k8s.gcr.io/build-image/debian-base:bullseye-v1.0.0 +FROM k8s.gcr.io/build-image/debian-base:bullseye-v1.1.0 # Architecture for bin folder ARG ARCH @@ -23,6 +23,6 @@ COPY bin/${ARCH}/nfsplugin /nfsplugin RUN apt update && apt-mark unhold libcap2 RUN clean-install ca-certificates mount nfs-common netbase # install updated packages to fix CVE issues -RUN clean-install libssl1.1 libgssapi-krb5-2 libk5crypto3 libkrb5-3 libkrb5support0 libgmp10 +RUN clean-install libssl1.1 libgssapi-krb5-2 libk5crypto3 libkrb5-3 libkrb5support0 libgmp10 bsdutils ENTRYPOINT ["/nfsplugin"]