From 28fc3deb05c170d4b4e08e5431bd37c29f3d64a1 Mon Sep 17 00:00:00 2001 From: Michael Lando Date: Sun, 3 Jun 2018 18:06:57 +0300 Subject: Fix additional library CVEs Change-Id: I44f9ca73c487eee8fb4bf19de4b4eaab6061a3c1 Issue-ID: SDC-1424 Signed-off-by: Michael Lando --- base_sdc-cassandra/Dockerfile | 6 +++--- base_sdc-elasticsearch/Dockerfile | 2 +- base_sdc-kibana/Dockerfile | 4 ++-- base_sdc-python/Dockerfile | 10 +++++----- 4 files changed, 11 insertions(+), 11 deletions(-) diff --git a/base_sdc-cassandra/Dockerfile b/base_sdc-cassandra/Dockerfile index e73d066..1ec1169 100644 --- a/base_sdc-cassandra/Dockerfile +++ b/base_sdc-cassandra/Dockerfile @@ -64,9 +64,9 @@ RUN echo "deb http://deb.debian.org/debian stretch main" >> /etc/apt/sources.lis libx11-6=2:1.6.5-1 libx11-data=2:1.6.5-1 libx11-xcb1=2:1.6.5-1 \ libxml2=2.9.4+dfsg1-7 \ libxtst6=2:1.2.3-1 \ - perl=5.26.2-5 \ - python=2.7.15~rc1-1 \ - libsqlite3-0=3.23.1-1 \ + perl=5.26.2-6 \ + python=2.7.15-3 \ + libsqlite3-0=3.24.0-1 \ libdb5.3=5.3.28-13.1+b1 \ libcairo2=1.15.10-3 libcairo-gobject2=1.15.10-3 \ libc-bin=2.27-3 libc6=2.27-3 multiarch-support=2.27-3 \ diff --git a/base_sdc-elasticsearch/Dockerfile b/base_sdc-elasticsearch/Dockerfile index cb7382b..249d87e 100644 --- a/base_sdc-elasticsearch/Dockerfile +++ b/base_sdc-elasticsearch/Dockerfile @@ -4,7 +4,7 @@ RUN mkdir -p /var/chef/nodes # Install Chef RUN set -ex && \ - apk add --no-cache curl vim bash=4.4.12-r2 build-base=0.5-r0 ruby=2.4.4-r0 ruby-dev=2.4.4-r0 libffi-dev=3.2.1-r4 libxml2-dev=2.9.7-r0 && \ + apk add --no-cache curl vim bash=4.4.19-r1 build-base=0.5-r0 ruby=2.4.4-r0 ruby-dev=2.4.4-r0 libffi-dev=3.2.1-r4 libxml2-dev=2.9.7-r0 && \ gem install chef:13.8.5 berkshelf:6.3.1 io-console:0.4.6 --no-document && \ echo "http://nl.alpinelinux.org/alpine/edge/main" >> /etc/apk/repositories && \ apk update && \ diff --git a/base_sdc-kibana/Dockerfile b/base_sdc-kibana/Dockerfile index 7151cc0..be6c77e 100644 --- a/base_sdc-kibana/Dockerfile +++ b/base_sdc-kibana/Dockerfile @@ -43,11 +43,11 @@ RUN echo "deb http://deb.debian.org/debian stretch main" >> /etc/apt/sources.lis apt-get -y update && \ apt-get -y --no-install-recommends install \ vim=2:7.4.488-7+deb8u3 vim-common=2:7.4.488-7+deb8u3 vim-runtime=2:7.4.488-7+deb8u3 \ - bash=4.4.18-2+b1 \ + bash=4.4.18-3 \ curl=7.60.0-2 libcurl4=7.60.0-2 \ krb5-locales=1.16-2 libgssapi-krb5-2=1.16-2 libkrb5-3=1.16-2 libkrb5support0=1.16-2 \ openssl=1.1.0h-4 \ - perl-base=5.26.2-5 \ + perl-base=5.26.2-6 \ systemd=238-5 \ wget=1.19.5-1 \ libdb5.3=5.3.28-13.1+b1 \ diff --git a/base_sdc-python/Dockerfile b/base_sdc-python/Dockerfile index 443fd7b..c774655 100644 --- a/base_sdc-python/Dockerfile +++ b/base_sdc-python/Dockerfile @@ -1,17 +1,17 @@ FROM python:2.7-alpine # Install packages only needed for building -RUN apk add --no-cache libcurl=7.59.0-r0 curl=7.59.0-r0 jq=1.5-r2 && \ - apk add --no-cache --virtual .build-dependencies build-base=0.4-r1 curl-dev=7.59.0-r0 +RUN apk add --no-cache libcurl=7.60.0-r1 curl=7.60.0-r1 jq=1.5-r5 libressl-dev=2.6.4-r2 && \ + apk add --no-cache --virtual .build-dependencies build-base=0.5-r0 curl-dev=7.60.0-r1 # Needed for pycurl ENV PYCURL_SSL_LIBRARY=openssl # Install Chef -RUN pip install 'influxdb==5.0.0' 'pycurl== 7.43.0.1' 'requests==2.18.4' && \ +RUN pip install 'influxdb==5.0.0' 'pycurl==7.43.0.1' 'requests==2.18.4' && \ set -ex && \ - apk add --no-cache bash=4.3.42-r5 ruby=2.3.7-r0 ruby-dev=2.3.7-r0 libffi-dev=3.2.1-r2 libxml2-dev=2.9.5-r0 && \ + apk add --no-cache bash=4.4.19-r1 ruby=2.4.4-r0 ruby-dev=2.4.4-r0 libffi-dev=3.2.1-r4 libxml2-dev=2.9.7-r0 && \ gem install chef:13.8.5 berkshelf:6.3.1 io-console:0.4.6 --no-document && \ echo "http://nl.alpinelinux.org/alpine/edge/main" >> /etc/apk/repositories && \ apk update && \ - apk add binutils=2.26-r1 jq=1.6_rc1-r1 libpng=1.6.34-r1 + apk add binutils=2.30-r1 jq=1.6_rc1-r1 libpng=1.6.34-r1 -- cgit 1.2.3-korg