Makussu/bunkerweb
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

dirty fix for CVE-2020-28928

Browse Source
This commit is contained in:
bunkerity 2020-11-29 15:30:12 +01:00
parent 9688e66508
commit b92f74ed98
No known key found for this signature in database
GPG Key ID: 654FFF51CEF7CC47
5 changed files with 15 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
Dockerfile
View File

@ -28,6 +28,9 @@ RUN apk --no-cache add certbot libstdc++ libmaxminddb geoip pcre yajl fail2ban c
touch /var/log/nginx/error.log /var/log/nginx/modsec_audit.log && \ touch /var/log/nginx/error.log /var/log/nginx/modsec_audit.log && \
chown nginx:nginx /var/log/nginx/*.log chown nginx:nginx /var/log/nginx/*.log
# Fix CVE-2020-28928
RUN apk --no-cache add "musl-utils>1.1.24-r2"
VOLUME /www /http-confs /server-confs /modsec-confs /modsec-crs-confs /cache VOLUME /www /http-confs /server-confs /modsec-confs /modsec-crs-confs /cache
EXPOSE 8080/tcp 8443/tcp EXPOSE 8080/tcp 8443/tcp

3
Dockerfile-amd64
View File

@ -28,6 +28,9 @@ RUN apk --no-cache add certbot libstdc++ libmaxminddb geoip pcre yajl fail2ban c
touch /var/log/nginx/error.log /var/log/nginx/modsec_audit.log && \ touch /var/log/nginx/error.log /var/log/nginx/modsec_audit.log && \
chown nginx:nginx /var/log/nginx/*.log chown nginx:nginx /var/log/nginx/*.log
# Fix CVE-2020-28928
RUN apk --no-cache add "musl-utils>1.1.24-r2"
VOLUME /www /http-confs /server-confs /modsec-confs /modsec-crs-confs /cache VOLUME /www /http-confs /server-confs /modsec-confs /modsec-crs-confs /cache
EXPOSE 8080/tcp 8443/tcp EXPOSE 8080/tcp 8443/tcp

3
Dockerfile-arm32v7
View File

@ -35,6 +35,9 @@ RUN apk --no-cache add certbot libstdc++ libmaxminddb geoip pcre yajl fail2ban c
touch /var/log/nginx/error.log /var/log/nginx/modsec_audit.log && \ touch /var/log/nginx/error.log /var/log/nginx/modsec_audit.log && \
chown nginx:nginx /var/log/nginx/*.log chown nginx:nginx /var/log/nginx/*.log
# Fix CVE-2020-28928
RUN apk --no-cache add "musl-utils>1.1.24-r2"
VOLUME /www /http-confs /server-confs /modsec-confs /modsec-crs-confs /cache VOLUME /www /http-confs /server-confs /modsec-confs /modsec-crs-confs /cache
EXPOSE 8080/tcp 8443/tcp EXPOSE 8080/tcp 8443/tcp

3
Dockerfile-arm64v8
View File

@ -35,6 +35,9 @@ RUN apk --no-cache add certbot libstdc++ libmaxminddb geoip pcre yajl fail2ban c
touch /var/log/nginx/error.log /var/log/nginx/modsec_audit.log && \ touch /var/log/nginx/error.log /var/log/nginx/modsec_audit.log && \
chown nginx:nginx /var/log/nginx/*.log chown nginx:nginx /var/log/nginx/*.log
# Fix CVE-2020-28928
RUN apk --no-cache add "musl-utils>1.1.24-r2"
VOLUME /www /http-confs /server-confs /modsec-confs /modsec-crs-confs /cache VOLUME /www /http-confs /server-confs /modsec-confs /modsec-crs-confs /cache
EXPOSE 8080/tcp 8443/tcp EXPOSE 8080/tcp 8443/tcp

3
Dockerfile-i386
View File

@ -28,6 +28,9 @@ RUN apk --no-cache add certbot libstdc++ libmaxminddb geoip pcre yajl fail2ban c
touch /var/log/nginx/error.log /var/log/nginx/modsec_audit.log && \ touch /var/log/nginx/error.log /var/log/nginx/modsec_audit.log && \
chown nginx:nginx /var/log/nginx/*.log chown nginx:nginx /var/log/nginx/*.log
# Fix CVE-2020-28928
RUN apk --no-cache add "musl-utils>1.1.24-r2"
VOLUME /www /http-confs /server-confs /modsec-confs /modsec-crs-confs /cache VOLUME /www /http-confs /server-confs /modsec-confs /modsec-crs-confs /cache
EXPOSE 8080/tcp 8443/tcp EXPOSE 8080/tcp 8443/tcp