diff --git a/Dockerfile b/Dockerfile index 6b815cac3..badf48fa5 100644 --- a/Dockerfile +++ b/Dockerfile @@ -20,10 +20,10 @@ COPY lua/ /opt/lua COPY crowdsec/ /opt/crowdsec COPY prepare.sh /tmp/prepare.sh -RUN chmod +x /tmp/prepares.sh && /tmp/prepare.sh && rm -f /tmp/prepare.sh +RUN chmod +x /tmp/prepare.sh && /tmp/prepare.sh && rm -f /tmp/prepare.sh -# Fix CVE-2020-28928 & CVE-2020-8231 -RUN apk --no-cache add "musl-utils>1.1.24-r2" "curl>7.67.0-r1" +# Fix CVE-2020-28928, CVE-2020-8231 & CVE-2020-1971 +RUN apk --no-cache add "musl-utils>1.1.24-r2" "curl>7.67.0-r1" "libcrypto1.1>1.1.1g-r0" VOLUME /www /http-confs /server-confs /modsec-confs /modsec-crs-confs /cache diff --git a/Dockerfile-amd64 b/Dockerfile-amd64 index c886b2a8d..4a2389fd4 100644 --- a/Dockerfile-amd64 +++ b/Dockerfile-amd64 @@ -20,10 +20,10 @@ COPY lua/ /opt/lua COPY crowdsec/ /opt/crowdsec COPY prepare.sh /tmp/prepare.sh -RUN chmod +x /tmp/prepares.sh && /tmp/prepare.sh && rm -f /tmp/prepare.sh +RUN chmod +x /tmp/prepare.sh && /tmp/prepare.sh && rm -f /tmp/prepare.sh -# Fix CVE-2020-28928 & CVE-2020-8231 -RUN apk --no-cache add "musl-utils>1.1.24-r2" "curl>7.67.0-r1" +# Fix CVE-2020-28928, CVE-2020-8231 & CVE-2020-1971 +RUN apk --no-cache add "musl-utils>1.1.24-r2" "curl>7.67.0-r1" "libcrypto1.1>1.1.1g-r0" VOLUME /www /http-confs /server-confs /modsec-confs /modsec-crs-confs /cache diff --git a/Dockerfile-arm32v7 b/Dockerfile-arm32v7 index 0ad0cc8ce..021e626d9 100644 --- a/Dockerfile-arm32v7 +++ b/Dockerfile-arm32v7 @@ -27,10 +27,10 @@ COPY lua/ /opt/lua COPY crowdsec/ /opt/crowdsec COPY prepare.sh /tmp/prepare.sh -RUN chmod +x /tmp/prepares.sh && /tmp/prepare.sh && rm -f /tmp/prepare.sh +RUN chmod +x /tmp/prepare.sh && /tmp/prepare.sh && rm -f /tmp/prepare.sh -# Fix CVE-2020-28928 & CVE-2020-8231 -RUN apk --no-cache add "musl-utils>1.1.24-r2" "curl>7.67.0-r1" +# Fix CVE-2020-28928, CVE-2020-8231 & CVE-2020-1971 +RUN apk --no-cache add "musl-utils>1.1.24-r2" "curl>7.67.0-r1" "libcrypto1.1>1.1.1g-r0" VOLUME /www /http-confs /server-confs /modsec-confs /modsec-crs-confs /cache diff --git a/Dockerfile-arm64v8 b/Dockerfile-arm64v8 index 7d926d7e5..898767197 100644 --- a/Dockerfile-arm64v8 +++ b/Dockerfile-arm64v8 @@ -27,10 +27,10 @@ COPY lua/ /opt/lua COPY crowdsec/ /opt/crowdsec COPY prepare.sh /tmp/prepare.sh -RUN chmod +x /tmp/prepares.sh && /tmp/prepare.sh && rm -f /tmp/prepare.sh +RUN chmod +x /tmp/prepare.sh && /tmp/prepare.sh && rm -f /tmp/prepare.sh -# Fix CVE-2020-28928 & CVE-2020-8231 -RUN apk --no-cache add "musl-utils>1.1.24-r2" "curl>7.67.0-r1" +# Fix CVE-2020-28928, CVE-2020-8231 & CVE-2020-1971 +RUN apk --no-cache add "musl-utils>1.1.24-r2" "curl>7.67.0-r1" "libcrypto1.1>1.1.1g-r0" VOLUME /www /http-confs /server-confs /modsec-confs /modsec-crs-confs /cache diff --git a/Dockerfile-i386 b/Dockerfile-i386 index b336e593e..6eb0fb841 100644 --- a/Dockerfile-i386 +++ b/Dockerfile-i386 @@ -20,10 +20,10 @@ COPY lua/ /opt/lua COPY crowdsec/ /opt/crowdsec COPY prepare.sh /tmp/prepare.sh -RUN chmod +x /tmp/prepares.sh && /tmp/prepare.sh && rm -f /tmp/prepare.sh +RUN chmod +x /tmp/prepare.sh && /tmp/prepare.sh && rm -f /tmp/prepare.sh -# Fix CVE-2020-28928 & CVE-2020-8231 -RUN apk --no-cache add "musl-utils>1.1.24-r2" "curl>7.67.0-r1" +# Fix CVE-2020-28928, CVE-2020-8231 & CVE-2020-1971 +RUN apk --no-cache add "musl-utils>1.1.24-r2" "curl>7.67.0-r1" "libcrypto1.1>1.1.1g-r0" VOLUME /www /http-confs /server-confs /modsec-confs /modsec-crs-confs /cache diff --git a/autoconf/Dockerfile b/autoconf/Dockerfile index 479f4a35b..d2eba0149 100644 --- a/autoconf/Dockerfile +++ b/autoconf/Dockerfile @@ -10,6 +10,9 @@ COPY entrypoint/* /opt/entrypoint/ COPY autoconf/* /opt/entrypoint/ RUN chmod +x /opt/entrypoint/*.py /opt/entrypoint/*.sh +# Fix CVE-2020-1971 +RUN apk add "libcrypto1.1>1.1.1g-r0" + VOLUME /etc/nginx ENTRYPOINT ["/opt/entrypoint/entrypoint.py"] diff --git a/autoconf/Dockerfile-amd64 b/autoconf/Dockerfile-amd64 index 5cb24496c..2cf31d4ed 100644 --- a/autoconf/Dockerfile-amd64 +++ b/autoconf/Dockerfile-amd64 @@ -10,6 +10,9 @@ COPY entrypoint/* /opt/entrypoint/ COPY autoconf/* /opt/entrypoint/ RUN chmod +x /opt/entrypoint/*.py /opt/entrypoint/*.sh +# Fix CVE-2020-1971 +RUN apk add "libcrypto1.1>1.1.1g-r0" + VOLUME /etc/nginx ENTRYPOINT ["/opt/entrypoint/entrypoint.py"] diff --git a/autoconf/Dockerfile-arm32v7 b/autoconf/Dockerfile-arm32v7 index e8450b817..a9a182723 100644 --- a/autoconf/Dockerfile-arm32v7 +++ b/autoconf/Dockerfile-arm32v7 @@ -17,6 +17,9 @@ COPY entrypoint/* /opt/entrypoint/ COPY autoconf/* /opt/entrypoint/ RUN chmod +x /opt/entrypoint/*.py /opt/entrypoint/*.sh +# Fix CVE-2020-1971 +RUN apk add "libcrypto1.1>1.1.1g-r0" + VOLUME /etc/nginx ENTRYPOINT ["/opt/entrypoint/entrypoint.py"] diff --git a/autoconf/Dockerfile-arm64v8 b/autoconf/Dockerfile-arm64v8 index 227058a6d..ec4bc840c 100644 --- a/autoconf/Dockerfile-arm64v8 +++ b/autoconf/Dockerfile-arm64v8 @@ -17,6 +17,9 @@ COPY entrypoint/* /opt/entrypoint/ COPY autoconf/* /opt/entrypoint/ RUN chmod +x /opt/entrypoint/*.py /opt/entrypoint/*.sh +# Fix CVE-2020-1971 +RUN apk add "libcrypto1.1>1.1.1g-r0" + VOLUME /etc/nginx ENTRYPOINT ["/opt/entrypoint/entrypoint.py"] diff --git a/autoconf/Dockerfile-i386 b/autoconf/Dockerfile-i386 index 282759915..45b60b20b 100644 --- a/autoconf/Dockerfile-i386 +++ b/autoconf/Dockerfile-i386 @@ -10,6 +10,9 @@ COPY entrypoint/* /opt/entrypoint/ COPY autoconf/* /opt/entrypoint/ RUN chmod +x /opt/entrypoint/*.py /opt/entrypoint/*.sh +# Fix CVE-2020-1971 +RUN apk add "libcrypto1.1>1.1.1g-r0" + VOLUME /etc/nginx ENTRYPOINT ["/opt/entrypoint/entrypoint.py"] diff --git a/ui/Dockerfile b/ui/Dockerfile index 8ad0c061a..2d5b81394 100644 --- a/ui/Dockerfile +++ b/ui/Dockerfile @@ -10,6 +10,9 @@ COPY entrypoint/* /opt/entrypoint/ COPY ui/ /opt/entrypoint/ RUN chmod +x /opt/entrypoint/*.py /opt/entrypoint/*.sh +# Fix CVE-2020-1971 +RUN apk add "libcrypto1.1>1.1.1g-r0" + VOLUME /etc/nginx EXPOSE 5000 diff --git a/ui/Dockerfile-amd64 b/ui/Dockerfile-amd64 index aa06df5b3..811b19dee 100644 --- a/ui/Dockerfile-amd64 +++ b/ui/Dockerfile-amd64 @@ -10,6 +10,9 @@ COPY entrypoint/* /opt/entrypoint/ COPY ui/ /opt/entrypoint/ RUN chmod +x /opt/entrypoint/*.py /opt/entrypoint/*.sh +# Fix CVE-2020-1971 +RUN apk add "libcrypto1.1>1.1.1g-r0" + VOLUME /etc/nginx EXPOSE 5000 diff --git a/ui/Dockerfile-arm32v7 b/ui/Dockerfile-arm32v7 index 646e93c66..55e072ed5 100644 --- a/ui/Dockerfile-arm32v7 +++ b/ui/Dockerfile-arm32v7 @@ -17,6 +17,9 @@ COPY entrypoint/* /opt/entrypoint/ COPY ui/ /opt/entrypoint/ RUN chmod +x /opt/entrypoint/*.py /opt/entrypoint/*.sh +# Fix CVE-2020-1971 +RUN apk add "libcrypto1.1>1.1.1g-r0" + VOLUME /etc/nginx EXPOSE 5000 diff --git a/ui/Dockerfile-arm64v8 b/ui/Dockerfile-arm64v8 index 859f0d095..738f3c554 100644 --- a/ui/Dockerfile-arm64v8 +++ b/ui/Dockerfile-arm64v8 @@ -17,6 +17,9 @@ COPY entrypoint/* /opt/entrypoint/ COPY ui/ /opt/entrypoint/ RUN chmod +x /opt/entrypoint/*.py /opt/entrypoint/*.sh +# Fix CVE-2020-1971 +RUN apk add "libcrypto1.1>1.1.1g-r0" + VOLUME /etc/nginx EXPOSE 5000 diff --git a/ui/Dockerfile-i386 b/ui/Dockerfile-i386 index 53471b463..adb645700 100644 --- a/ui/Dockerfile-i386 +++ b/ui/Dockerfile-i386 @@ -10,6 +10,9 @@ COPY entrypoint/* /opt/entrypoint/ COPY ui/ /opt/entrypoint/ RUN chmod +x /opt/entrypoint/*.py /opt/entrypoint/*.sh +# Fix CVE-2020-1971 +RUN apk add "libcrypto1.1>1.1.1g-r0" + VOLUME /etc/nginx EXPOSE 5000