diff --git a/Dockerfile b/Dockerfile index 0ddc531..1c12a8b 100644 --- a/Dockerfile +++ b/Dockerfile @@ -28,6 +28,9 @@ RUN apk --no-cache add certbot libstdc++ libmaxminddb geoip pcre yajl fail2ban c touch /var/log/nginx/error.log /var/log/nginx/modsec_audit.log && \ chown nginx:nginx /var/log/nginx/*.log +# Fix CVE-2020-28928 +RUN apk --no-cache add "musl-utils>1.1.24-r2" + VOLUME /www /http-confs /server-confs /modsec-confs /modsec-crs-confs /cache EXPOSE 8080/tcp 8443/tcp diff --git a/Dockerfile-amd64 b/Dockerfile-amd64 index 787e293..0eb65c0 100644 --- a/Dockerfile-amd64 +++ b/Dockerfile-amd64 @@ -28,6 +28,9 @@ RUN apk --no-cache add certbot libstdc++ libmaxminddb geoip pcre yajl fail2ban c touch /var/log/nginx/error.log /var/log/nginx/modsec_audit.log && \ chown nginx:nginx /var/log/nginx/*.log +# Fix CVE-2020-28928 +RUN apk --no-cache add "musl-utils>1.1.24-r2" + VOLUME /www /http-confs /server-confs /modsec-confs /modsec-crs-confs /cache EXPOSE 8080/tcp 8443/tcp diff --git a/Dockerfile-arm32v7 b/Dockerfile-arm32v7 index be069ef..2904951 100644 --- a/Dockerfile-arm32v7 +++ b/Dockerfile-arm32v7 @@ -35,6 +35,9 @@ RUN apk --no-cache add certbot libstdc++ libmaxminddb geoip pcre yajl fail2ban c touch /var/log/nginx/error.log /var/log/nginx/modsec_audit.log && \ chown nginx:nginx /var/log/nginx/*.log +# Fix CVE-2020-28928 +RUN apk --no-cache add "musl-utils>1.1.24-r2" + VOLUME /www /http-confs /server-confs /modsec-confs /modsec-crs-confs /cache EXPOSE 8080/tcp 8443/tcp diff --git a/Dockerfile-arm64v8 b/Dockerfile-arm64v8 index 6716859..ad10b9d 100644 --- a/Dockerfile-arm64v8 +++ b/Dockerfile-arm64v8 @@ -35,6 +35,9 @@ RUN apk --no-cache add certbot libstdc++ libmaxminddb geoip pcre yajl fail2ban c touch /var/log/nginx/error.log /var/log/nginx/modsec_audit.log && \ chown nginx:nginx /var/log/nginx/*.log +# Fix CVE-2020-28928 +RUN apk --no-cache add "musl-utils>1.1.24-r2" + VOLUME /www /http-confs /server-confs /modsec-confs /modsec-crs-confs /cache EXPOSE 8080/tcp 8443/tcp diff --git a/Dockerfile-i386 b/Dockerfile-i386 index 187098f..dfe3e9e 100644 --- a/Dockerfile-i386 +++ b/Dockerfile-i386 @@ -28,6 +28,9 @@ RUN apk --no-cache add certbot libstdc++ libmaxminddb geoip pcre yajl fail2ban c touch /var/log/nginx/error.log /var/log/nginx/modsec_audit.log && \ chown nginx:nginx /var/log/nginx/*.log +# Fix CVE-2020-28928 +RUN apk --no-cache add "musl-utils>1.1.24-r2" + VOLUME /www /http-confs /server-confs /modsec-confs /modsec-crs-confs /cache EXPOSE 8080/tcp 8443/tcp