fix CVE-2020-1971

Dockerfile

@@ -20,10 +20,10 @@ COPY lua/ /opt/lua
 COPY crowdsec/ /opt/crowdsec
 
 COPY prepare.sh /tmp/prepare.sh
-RUN chmod +x /tmp/prepares.sh && /tmp/prepare.sh && rm -f /tmp/prepare.sh
+RUN chmod +x /tmp/prepare.sh && /tmp/prepare.sh && rm -f /tmp/prepare.sh
 
-# Fix CVE-2020-28928 & CVE-2020-8231
-RUN apk --no-cache add "musl-utils>1.1.24-r2" "curl>7.67.0-r1"
+# Fix CVE-2020-28928, CVE-2020-8231 & CVE-2020-1971
+RUN apk --no-cache add "musl-utils>1.1.24-r2" "curl>7.67.0-r1" "libcrypto1.1>1.1.1g-r0"
 
 VOLUME /www /http-confs /server-confs /modsec-confs /modsec-crs-confs /cache
 

Dockerfile-amd64

@@ -20,10 +20,10 @@ COPY lua/ /opt/lua
 COPY crowdsec/ /opt/crowdsec
 
 COPY prepare.sh /tmp/prepare.sh
-RUN chmod +x /tmp/prepares.sh && /tmp/prepare.sh && rm -f /tmp/prepare.sh
+RUN chmod +x /tmp/prepare.sh && /tmp/prepare.sh && rm -f /tmp/prepare.sh
 
-# Fix CVE-2020-28928 & CVE-2020-8231
-RUN apk --no-cache add "musl-utils>1.1.24-r2" "curl>7.67.0-r1"
+# Fix CVE-2020-28928, CVE-2020-8231 & CVE-2020-1971
+RUN apk --no-cache add "musl-utils>1.1.24-r2" "curl>7.67.0-r1" "libcrypto1.1>1.1.1g-r0"
 
 VOLUME /www /http-confs /server-confs /modsec-confs /modsec-crs-confs /cache
 

Dockerfile-arm32v7

@@ -27,10 +27,10 @@ COPY lua/ /opt/lua
 COPY crowdsec/ /opt/crowdsec
 
 COPY prepare.sh /tmp/prepare.sh
-RUN chmod +x /tmp/prepares.sh && /tmp/prepare.sh && rm -f /tmp/prepare.sh
+RUN chmod +x /tmp/prepare.sh && /tmp/prepare.sh && rm -f /tmp/prepare.sh
 
-# Fix CVE-2020-28928 & CVE-2020-8231
-RUN apk --no-cache add "musl-utils>1.1.24-r2" "curl>7.67.0-r1"
+# Fix CVE-2020-28928, CVE-2020-8231 & CVE-2020-1971
+RUN apk --no-cache add "musl-utils>1.1.24-r2" "curl>7.67.0-r1" "libcrypto1.1>1.1.1g-r0"
 
 VOLUME /www /http-confs /server-confs /modsec-confs /modsec-crs-confs /cache
 

Dockerfile-arm64v8

@@ -27,10 +27,10 @@ COPY lua/ /opt/lua
 COPY crowdsec/ /opt/crowdsec
 
 COPY prepare.sh /tmp/prepare.sh
-RUN chmod +x /tmp/prepares.sh && /tmp/prepare.sh && rm -f /tmp/prepare.sh
+RUN chmod +x /tmp/prepare.sh && /tmp/prepare.sh && rm -f /tmp/prepare.sh
 
-# Fix CVE-2020-28928 & CVE-2020-8231
-RUN apk --no-cache add "musl-utils>1.1.24-r2" "curl>7.67.0-r1"
+# Fix CVE-2020-28928, CVE-2020-8231 & CVE-2020-1971
+RUN apk --no-cache add "musl-utils>1.1.24-r2" "curl>7.67.0-r1" "libcrypto1.1>1.1.1g-r0"
 
 VOLUME /www /http-confs /server-confs /modsec-confs /modsec-crs-confs /cache
 

Dockerfile-i386

@@ -20,10 +20,10 @@ COPY lua/ /opt/lua
 COPY crowdsec/ /opt/crowdsec
 
 COPY prepare.sh /tmp/prepare.sh
-RUN chmod +x /tmp/prepares.sh && /tmp/prepare.sh && rm -f /tmp/prepare.sh
+RUN chmod +x /tmp/prepare.sh && /tmp/prepare.sh && rm -f /tmp/prepare.sh
 
-# Fix CVE-2020-28928 & CVE-2020-8231
-RUN apk --no-cache add "musl-utils>1.1.24-r2" "curl>7.67.0-r1"
+# Fix CVE-2020-28928, CVE-2020-8231 & CVE-2020-1971
+RUN apk --no-cache add "musl-utils>1.1.24-r2" "curl>7.67.0-r1" "libcrypto1.1>1.1.1g-r0"
 
 VOLUME /www /http-confs /server-confs /modsec-confs /modsec-crs-confs /cache
 

autoconf/Dockerfile

@@ -10,6 +10,9 @@ COPY entrypoint/* /opt/entrypoint/
 COPY autoconf/* /opt/entrypoint/
 RUN chmod +x /opt/entrypoint/*.py /opt/entrypoint/*.sh
 
+# Fix CVE-2020-1971
+RUN apk add "libcrypto1.1>1.1.1g-r0"
+
 VOLUME /etc/nginx
 
 ENTRYPOINT ["/opt/entrypoint/entrypoint.py"]

autoconf/Dockerfile-amd64

@@ -10,6 +10,9 @@ COPY entrypoint/* /opt/entrypoint/
 COPY autoconf/* /opt/entrypoint/
 RUN chmod +x /opt/entrypoint/*.py /opt/entrypoint/*.sh
 
+# Fix CVE-2020-1971
+RUN apk add "libcrypto1.1>1.1.1g-r0"
+
 VOLUME /etc/nginx
 
 ENTRYPOINT ["/opt/entrypoint/entrypoint.py"]

autoconf/Dockerfile-arm32v7

@@ -17,6 +17,9 @@ COPY entrypoint/* /opt/entrypoint/
 COPY autoconf/* /opt/entrypoint/
 RUN chmod +x /opt/entrypoint/*.py /opt/entrypoint/*.sh
 
+# Fix CVE-2020-1971
+RUN apk add "libcrypto1.1>1.1.1g-r0"
+
 VOLUME /etc/nginx
 
 ENTRYPOINT ["/opt/entrypoint/entrypoint.py"]

autoconf/Dockerfile-arm64v8

@@ -17,6 +17,9 @@ COPY entrypoint/* /opt/entrypoint/
 COPY autoconf/* /opt/entrypoint/
 RUN chmod +x /opt/entrypoint/*.py /opt/entrypoint/*.sh
 
+# Fix CVE-2020-1971
+RUN apk add "libcrypto1.1>1.1.1g-r0"
+
 VOLUME /etc/nginx
 
 ENTRYPOINT ["/opt/entrypoint/entrypoint.py"]

autoconf/Dockerfile-i386

@@ -10,6 +10,9 @@ COPY entrypoint/* /opt/entrypoint/
 COPY autoconf/* /opt/entrypoint/
 RUN chmod +x /opt/entrypoint/*.py /opt/entrypoint/*.sh
 
+# Fix CVE-2020-1971
+RUN apk add "libcrypto1.1>1.1.1g-r0"
+
 VOLUME /etc/nginx
 
 ENTRYPOINT ["/opt/entrypoint/entrypoint.py"]

ui/Dockerfile

@@ -10,6 +10,9 @@ COPY entrypoint/* /opt/entrypoint/
 COPY ui/ /opt/entrypoint/
 RUN chmod +x /opt/entrypoint/*.py /opt/entrypoint/*.sh
 
+# Fix CVE-2020-1971
+RUN apk add "libcrypto1.1>1.1.1g-r0"
+
 VOLUME /etc/nginx
 
 EXPOSE 5000

ui/Dockerfile-amd64

@@ -10,6 +10,9 @@ COPY entrypoint/* /opt/entrypoint/
 COPY ui/ /opt/entrypoint/
 RUN chmod +x /opt/entrypoint/*.py /opt/entrypoint/*.sh
 
+# Fix CVE-2020-1971
+RUN apk add "libcrypto1.1>1.1.1g-r0"
+
 VOLUME /etc/nginx
 
 EXPOSE 5000

ui/Dockerfile-arm32v7

@@ -17,6 +17,9 @@ COPY entrypoint/* /opt/entrypoint/
 COPY ui/ /opt/entrypoint/
 RUN chmod +x /opt/entrypoint/*.py /opt/entrypoint/*.sh
 
+# Fix CVE-2020-1971
+RUN apk add "libcrypto1.1>1.1.1g-r0"
+
 VOLUME /etc/nginx
 
 EXPOSE 5000

ui/Dockerfile-arm64v8

@@ -17,6 +17,9 @@ COPY entrypoint/* /opt/entrypoint/
 COPY ui/ /opt/entrypoint/
 RUN chmod +x /opt/entrypoint/*.py /opt/entrypoint/*.sh
 
+# Fix CVE-2020-1971
+RUN apk add "libcrypto1.1>1.1.1g-r0"
+
 VOLUME /etc/nginx
 
 EXPOSE 5000

ui/Dockerfile-i386

@@ -10,6 +10,9 @@ COPY entrypoint/* /opt/entrypoint/
 COPY ui/ /opt/entrypoint/
 RUN chmod +x /opt/entrypoint/*.py /opt/entrypoint/*.sh
 
+# Fix CVE-2020-1971
+RUN apk add "libcrypto1.1>1.1.1g-r0"
+
 VOLUME /etc/nginx
 
 EXPOSE 5000