Elgato_dark/bunkerweb
1
0
Fork 0
mirror of https://github.com/bunkerity/bunkerweb synced 2026-05-24 09:28:37 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix: update Dockerfiles to address CVEs by adding required PostgreSQL client libraries

Browse source
This commit is contained in:
Théophile Diot 2024-11-18 17:54:08 +01:00
parent 2dbd99a181
commit c6fe29fe53
No known key found for this signature in database
GPG key ID: FA995104A0BA376A
2 changed files with 2 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
src/scheduler/Dockerfile
View file

@ -46,6 +46,7 @@ RUN apk add --no-cache bash unzip libgcc libstdc++ libpq openssl libmagic mariad
adduser -h /var/cache/nginx -g scheduler -s /bin/sh -G scheduler -D -H -u 101 scheduler
# Fix CVEs
RUN apk add --no-cache "libpq>=16.5-r0" "postgresql16-client>=16.5-r0" # CVE-2024-10976 CVE-2024-10977 CVE-2024-10978 CVE-2024-10979
# Cleanup
RUN rm -rf /var/cache/apk/*

1
src/ui/Dockerfile
View file

@ -47,6 +47,7 @@ RUN apk add --no-cache bash unzip libmagic mariadb-connector-c mariadb-client po
# Fix CVEs
RUN apk add --no-cache "libcrypto3>=3.3.2-r1" "libssl3>=3.3.2-r1" # CVE-2024-9143
RUN apk add --no-cache "libpq>=16.5-r0" "postgresql16-client>=16.5-r0" # CVE-2024-10976 CVE-2024-10977 CVE-2024-10978 CVE-2024-10979
# Copy dependencies
COPY --from=builder --chown=0:101 /usr/share/bunkerweb /usr/share/bunkerweb