Skip to content

Commit 9d1331a

Browse files
authored
Update packages for CVE-2022-1292 (#2695)
1 parent 0dfd10e commit 9d1331a

File tree

1 file changed

+4
-4
lines changed

1 file changed

+4
-4
lines changed

Diff for: build/Dockerfile

+4-4
Original file line numberDiff line numberDiff line change
@@ -9,8 +9,8 @@ FROM nginx:1.21.6 AS debian
99

1010
RUN apt-get update \
1111
&& apt-get install --no-install-recommends --no-install-suggests -y libcap2-bin \
12-
# temp fix for CVE-2018-25032
13-
&& apt-get install -y zlib1g \
12+
# temp fix for CVE-2018-25032 and CVE-2022-1292
13+
&& apt-get install -y zlib1g libssl1.1 \
1414
&& rm -rf /var/lib/apt/lists/* \
1515
&& echo $NGINX_VERSION > nginx_version
1616

@@ -46,8 +46,8 @@ RUN --mount=type=secret,id=nginx-repo.crt,dst=/etc/ssl/nginx/nginx-repo.crt,mode
4646
--mount=type=secret,id=nginx-repo.key,dst=/etc/ssl/nginx/nginx-repo.key,mode=0644 \
4747
apt-get update \
4848
&& apt-get install --no-install-recommends --no-install-suggests -y ca-certificates gnupg curl apt-transport-https libcap2-bin \
49-
# temp fix for CVE-2018-25032
50-
&& apt-get install -y zlib1g \
49+
# temp fix for CVE-2018-25032 and CVE-2022-1292
50+
&& apt-get install -y zlib1g libssl1.1 \
5151
&& curl -fsSL https://cs.nginx.com/static/keys/nginx_signing.key | gpg --dearmor > /etc/apt/trusted.gpg.d/nginx_signing.gpg \
5252
&& curl -fsSL -o /etc/apt/apt.conf.d/90pkgs-nginx https://cs.nginx.com/static/files/90pkgs-nginx \
5353
&& DEBIAN_VERSION=$(awk -F '=' '/^VERSION_CODENAME=/ {print $2}' /etc/os-release) \

0 commit comments

Comments
 (0)