Skip to content

Commit db22af3

Browse files
committed
Patchfix ARM rsync vulnerability in container
1 parent a7450ff commit db22af3

File tree

1 file changed

+13
-0
lines changed

1 file changed

+13
-0
lines changed

Dockerfile.arm

Lines changed: 13 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -345,6 +345,19 @@ COPY ./docs ./docs
345345
COPY --from=rust-env /usr/local/cargo /usr/local/cargo
346346
COPY --from=rust-env /usr/local/rustup /usr/local/rustup
347347

348+
# Remove security vuln with rsync on ARM systems:
349+
# https://ubuntu.com/security/CVE-2024-12084
350+
RUN <<EOF
351+
apt-get -y purge rsync
352+
wget https://download.samba.org/pub/rsync/src/rsync-3.4.1.tar.gz
353+
tar -xvzf rsync-3.4.1.tar.gz
354+
cd rsync-3.4.1
355+
./configure --disable-xxhash --disable-zstd --disable-lz4
356+
make && make install
357+
cd ..
358+
rm -rf rsync-3.4.1 rsync-3.4.1.tar.gz
359+
EOF
360+
348361

349362
# RUN rm -rf /usr/local/cargo /usr/local/rustup
350363
RUN chmod 777 -R /workspace/bionemo2/

0 commit comments

Comments
 (0)