Skip to content

Commit 78d2507

Browse files
committed
security: fix CVEs
- upgrading libc-bin due to CVE-2021-33574, CVE-2022-23218, CVE-2022-23219 and CVE-2021-43396 - upgrading libc6 due to CVE-2021-33574, CVE-2022-23218, CVE-2022-23219 and CVE-2021-43396 - upgrading libsystemd0 due to CVE-2021-3997 - upgrading libudev1 due to CVE-2021-3997 Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
1 parent 9e39ed6 commit 78d2507

File tree

1 file changed

+5
-1
lines changed

1 file changed

+5
-1
lines changed

docker/Dockerfile

Lines changed: 5 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,11 @@ COPY --from=builder /go/src/sigs.k8s.io/secrets-store-csi-driver/_output/secrets
3131
# upgrading libgmp10 due to CVE-2021-43618
3232
# upgrading bsdutils due to CVE-2021-3995 and CVE-2021-3996
3333
# upgrading libssl1.1 due to CVE-2022-0778 and CVE-2021-4160
34-
RUN clean-install ca-certificates mount libgmp10 bsdutils libssl1.1
34+
# upgrading libc-bin due to CVE-2021-33574, CVE-2022-23218, CVE-2022-23219 and CVE-2021-43396
35+
# upgrading libc6 due to CVE-2021-33574, CVE-2022-23218, CVE-2022-23219 and CVE-2021-43396
36+
# upgrading libsystemd0 due to CVE-2021-3997
37+
# upgrading libudev1 due to CVE-2021-3997
38+
RUN clean-install ca-certificates mount libgmp10 bsdutils libssl1.1 libc-bin libc6 libsystemd0 libudev1
3539

3640
LABEL maintainers="ritazh"
3741
LABEL description="Secrets Store CSI Driver"

0 commit comments

Comments
 (0)