From 18cba5cee4111729ab145b0b4c5f741e44b026d8 Mon Sep 17 00:00:00 2001 From: Michael Lando Date: Sun, 3 Jun 2018 18:06:57 +0300 Subject: Fix additional library CVEs Change-Id: I82aa5c334f365e6ebaf65d88abb79beb96472ef4 Issue-ID: SDC-1310 Signed-off-by: Michael Lando --- base_sdc-cassandra/Dockerfile | 15 ++++++++------- base_sdc-elasticsearch/Dockerfile | 2 +- base_sdc-jetty/Dockerfile | 4 ++-- base_sdc-kibana/Dockerfile | 12 ++++++------ base_sdc-python/Dockerfile | 2 +- base_sdc-sanity/Dockerfile | 2 +- base_sdc-vnc/Dockerfile | 2 +- pom.xml | 4 ++-- 8 files changed, 22 insertions(+), 21 deletions(-) diff --git a/base_sdc-cassandra/Dockerfile b/base_sdc-cassandra/Dockerfile index 052d9b8..e73d066 100644 --- a/base_sdc-cassandra/Dockerfile +++ b/base_sdc-cassandra/Dockerfile @@ -56,29 +56,30 @@ RUN echo "deb http://deb.debian.org/debian stretch main" >> /etc/apt/sources.lis apt-get -y --no-install-recommends install \ vim=2:7.4.488-7+deb8u3 vim-common=2:7.4.488-7+deb8u3 vim-runtime=2:7.4.488-7+deb8u3 \ apt-utils=1.0.9.8.4 \ - openjdk-8-jdk=8u162-b12-1~bpo8+1 \ + openjdk-8-jdk \ libavahi-client3=0.7-4 libavahi-common-data=0.7-4 libavahi-common3=0.7-4 \ - curl=7.58.0-2 libcurl3=7.58.0-2 \ + curl=7.60.0-2 libcurl4=7.60.0-2 \ krb5-locales=1.16-2 libgssapi-krb5-2=1.16-2 libkrb5-3=1.16-2 libkrb5support0=1.16-2 \ libtiff5=4.0.9-5 \ libx11-6=2:1.6.5-1 libx11-data=2:1.6.5-1 libx11-xcb1=2:1.6.5-1 \ - libxml2=2.9.4+dfsg1-6.1 \ + libxml2=2.9.4+dfsg1-7 \ libxtst6=2:1.2.3-1 \ - perl=5.26.2-3 \ + perl=5.26.2-5 \ python=2.7.15~rc1-1 \ libsqlite3-0=3.23.1-1 \ libdb5.3=5.3.28-13.1+b1 \ libcairo2=1.15.10-3 libcairo-gobject2=1.15.10-3 \ libc-bin=2.27-3 libc6=2.27-3 multiarch-support=2.27-3 \ libgtk2.0-0=2.24.32-1 libgtk2.0-common=2.24.32-1 \ - libharfbuzz0b=1.7.6-1 \ + libharfbuzz0b=1.7.6-1+b1 \ libgcrypt20=1.8.2-2 \ - libtasn1-6=4.13-2 \ + libtasn1-6=4.13-3 \ libxi6=2:1.7.9-1 \ libldap-2.4-2=2.4.44+dfsg-5+deb9u1 \ libpcre3=2:8.39-9 \ passwd=1:4.5-1 \ - zlib1g=1:1.2.8.dfsg-5 && \ + zlib1g=1:1.2.11.dfsg-1 \ + ntp=1:4.2.8p11+dfsg-1 && \ apt-get -y autoremove diff --git a/base_sdc-elasticsearch/Dockerfile b/base_sdc-elasticsearch/Dockerfile index 045cc4c..cb7382b 100644 --- a/base_sdc-elasticsearch/Dockerfile +++ b/base_sdc-elasticsearch/Dockerfile @@ -8,4 +8,4 @@ RUN set -ex && \ gem install chef:13.8.5 berkshelf:6.3.1 io-console:0.4.6 --no-document && \ echo "http://nl.alpinelinux.org/alpine/edge/main" >> /etc/apk/repositories && \ apk update && \ - apk add binutils=2.30-r1 curl=7.59.0-r1 libcurl=7.59.0-r1 libtasn1=4.13-r0 + apk add binutils=2.30-r1 curl=7.60.0-r1 libcurl=7.60.0-r1 libtasn1=4.13-r0 diff --git a/base_sdc-jetty/Dockerfile b/base_sdc-jetty/Dockerfile index d7be282..6a43ef0 100644 --- a/base_sdc-jetty/Dockerfile +++ b/base_sdc-jetty/Dockerfile @@ -7,8 +7,8 @@ USER root RUN set -ex && \ apk add --no-cache \ jq=1.5-r5 \ - curl=7.59.0-r0 \ - curl-dev=7.59.0-r0 \ + curl=7.60.0-r1 \ + curl-dev=7.60.0-r1 \ openssl-dev=1.0.2o-r0 \ vim=8.0.1359-r0 \ bash=4.4.19-r1 \ diff --git a/base_sdc-kibana/Dockerfile b/base_sdc-kibana/Dockerfile index cd9cadb..7151cc0 100644 --- a/base_sdc-kibana/Dockerfile +++ b/base_sdc-kibana/Dockerfile @@ -44,21 +44,21 @@ RUN echo "deb http://deb.debian.org/debian stretch main" >> /etc/apt/sources.lis apt-get -y --no-install-recommends install \ vim=2:7.4.488-7+deb8u3 vim-common=2:7.4.488-7+deb8u3 vim-runtime=2:7.4.488-7+deb8u3 \ bash=4.4.18-2+b1 \ - curl=7.58.0-2 libcurl3=7.58.0-2 \ + curl=7.60.0-2 libcurl4=7.60.0-2 \ krb5-locales=1.16-2 libgssapi-krb5-2=1.16-2 libkrb5-3=1.16-2 libkrb5support0=1.16-2 \ - openssl=1.1.0h-2 \ - perl-base=5.26.2-3 \ - systemd=238-4 \ + openssl=1.1.0h-4 \ + perl-base=5.26.2-5 \ + systemd=238-5 \ wget=1.19.5-1 \ libdb5.3=5.3.28-13.1+b1 \ libc-bin=2.27-3 libc6=2.27-3 multiarch-support=2.27-3 \ libgnutls30=3.5.18-1 \ libgcrypt20=1.8.2-2 \ - libtasn1-6=4.13-2 \ + libtasn1-6=4.13-3 \ libldap-2.4-2=2.4.44+dfsg-5+deb9u1 \ libpcre3=2:8.39-9 \ passwd=1:4.5-1 \ - zlib1g=1:1.2.8.dfsg-5 && \ + zlib1g=1:1.2.11.dfsg-1 && \ apt-get -y autoremove # install chef-solo diff --git a/base_sdc-python/Dockerfile b/base_sdc-python/Dockerfile index 7f6a8c4..443fd7b 100644 --- a/base_sdc-python/Dockerfile +++ b/base_sdc-python/Dockerfile @@ -14,4 +14,4 @@ RUN pip install 'influxdb==5.0.0' 'pycurl== 7.43.0.1' 'requests==2.18.4' && \ gem install chef:13.8.5 berkshelf:6.3.1 io-console:0.4.6 --no-document && \ echo "http://nl.alpinelinux.org/alpine/edge/main" >> /etc/apk/repositories && \ apk update && \ - apk add binutils=2.30-r1 jq=1.6_rc1-r1 libpng=1.6.34-r1 + apk add binutils=2.26-r1 jq=1.6_rc1-r1 libpng=1.6.34-r1 diff --git a/base_sdc-sanity/Dockerfile b/base_sdc-sanity/Dockerfile index 6eac58d..35dff60 100644 --- a/base_sdc-sanity/Dockerfile +++ b/base_sdc-sanity/Dockerfile @@ -6,4 +6,4 @@ RUN set -ex && \ gem install chef:13.8.5 berkshelf:6.3.1 io-console:0.4.6 --no-document && \ echo "http://nl.alpinelinux.org/alpine/edge/main" >> /etc/apk/repositories && \ apk update && \ - apk add binutils=2.30-r1 curl=7.59.0-r1 libcurl=7.59.0-r1 libtasn1=4.13-r0 + apk add binutils=2.30-r1 curl=7.60.0-r1 libcurl=7.60.0-r1 libtasn1=4.13-r0 diff --git a/base_sdc-vnc/Dockerfile b/base_sdc-vnc/Dockerfile index d24f319..a834498 100644 --- a/base_sdc-vnc/Dockerfile +++ b/base_sdc-vnc/Dockerfile @@ -2,7 +2,7 @@ FROM consol/ubuntu-xfce-vnc:1.3.0 USER 0 -RUN apt-get -y update && apt-get -y install curl=7.47.0-1ubuntu2.7 +RUN apt-get -y update && apt-get -y install curl=7.47.0-1ubuntu2.8 # install chef-solo RUN curl -L https://www.opscode.com/chef/install.sh | bash diff --git a/pom.xml b/pom.xml index bf81779..5c892f6 100644 --- a/pom.xml +++ b/pom.xml @@ -5,7 +5,7 @@ org.onap.sdc.sdc-docker-base sdc-docker-base pom - 1.3.1-SNAPSHOT + 1.3.2-SNAPSHOT sdc-sdc-docker-base @@ -129,7 +129,7 @@ ${project.basedir}/base_sdc-sanity - + onap/base_sdc-vnc base_sdc-vnc -- cgit 1.2.3-korg