ignore CVE-2021-36159 and redirect job logs as root when using autoconf

This commit is contained in:
bunkerity
2021-08-02 10:41:46 +02:00
parent 652614f41b
commit bc01427def
6 changed files with 20 additions and 12 deletions

View File

@@ -12,9 +12,10 @@ RUN chmod +x /tmp/docker.sh && \
/tmp/docker.sh && \
rm -f /tmp/docker.sh
# Fix CVE-2021-22901, CVE-2021-22898, CVE-2021-22897, CVE-2021-33560 and CVE-2021-36159
# Fix CVE-2021-22901, CVE-2021-22898, CVE-2021-22897 and CVE-2021-33560
RUN apk add "curl>=7.77.0-r0" "libgcrypt>=1.8.8-r0"
RUN apk add "apk-tools>=2.12.6-r0"
# Temp : can't fix CVE-2021-36159 because fixed version is not available on alpine arm/v7
# RUN apk add "apk-tools>=2.12.6-r0"
VOLUME /www /http-confs /server-confs /modsec-confs /modsec-crs-confs /cache /pre-server-confs /acme-challenge /plugins