security: fix CVE-2021-37750 (#200)
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
This commit is contained in:
Родитель
29378f6f6b
Коммит
34688df063
|
@ -1,7 +1,8 @@
|
|||
FROM --platform=${TARGETPLATFORM:-linux/amd64} k8s.gcr.io/build-image/debian-iptables:bullseye-v1.0.0
|
||||
|
||||
# upgrading libssl1.1 due to CVE-2021-3711
|
||||
RUN clean-install ca-certificates libssl1.1
|
||||
# upgrading libgssapi-krb5-2 and libk5crypto3 due to CVE-2021-37750
|
||||
RUN clean-install ca-certificates libssl1.1 libgssapi-krb5-2 libk5crypto3
|
||||
COPY ./init/init-iptables.sh /bin/
|
||||
RUN chmod +x /bin/init-iptables.sh
|
||||
# Kubernetes runAsNonRoot requires USER to be numeric
|
||||
|
|
Загрузка…
Ссылка в новой задаче