container - fix CVE-2022-2097

This commit is contained in:
bunkerity 2022-07-06 14:04:38 +02:00
parent 429214727b
commit a5c98f7099
No known key found for this signature in database
GPG Key ID: 3D80806F12602A7C
1 changed files with 2 additions and 4 deletions

View File

@ -72,10 +72,8 @@ RUN apk add --no-cache bash python3 libgcc libstdc++ openssl git && \
ln -s /proc/1/fd/1 /var/log/nginx/jobs.log && \
ln -s /proc/1/fd/1 /var/log/letsencrypt/letsencrypt.log
# Fix CVE-2022-27405 and CVE-2022-27406
RUN apk add "freetype>=2.10.4-r3"
# Fix multiple CVE for curl/libcurl
RUN apk add "curl>=7.79.1-r2" "libcurl>=7.79.1-r2"
# Fix CVEs
RUN apk add "freetype>=2.10.4-r3" "curl>=7.79.1-r2" "libcurl>=7.79.1-r2" "openssl>=1.1.1q-r0"
VOLUME /data