From 0002ee2aeef06b35072a9f41f850200277a1e8d9 Mon Sep 17 00:00:00 2001 From: Mathew Merrick Date: Tue, 23 Jun 2020 20:40:29 -0700 Subject: [PATCH 1/2] npm libgnutls vulnerability --- npm/Dockerfile | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/npm/Dockerfile b/npm/Dockerfile index a3286aab69..3953c6cf71 100644 --- a/npm/Dockerfile +++ b/npm/Dockerfile @@ -1,5 +1,5 @@ # Use a minimal image as a parent image -FROM ubuntu:focal +FROM ubuntu:focal-20200606 ARG NPM_BUILD_DIR # Install dependencies. @@ -7,6 +7,9 @@ RUN apt-get update RUN apt-get install -y iptables RUN apt-get install -y ipset RUN apt-get install -y ca-certificates + +# https://lists.ubuntu.com/archives/ubuntu-security-announce/2020-June/005466.html +RUN apt-get install -y libgnutls30=3.6.13-2ubuntu1.1 RUN apt-get upgrade -y # Install plugin. From 8e72ee2ad38e4b8ab517815dd0367d246b02a181 Mon Sep 17 00:00:00 2001 From: Mathew Merrick Date: Tue, 23 Jun 2020 20:47:29 -0700 Subject: [PATCH 2/2] lock npm image back to ubuntu 18 --- npm/Dockerfile | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/npm/Dockerfile b/npm/Dockerfile index 3953c6cf71..2f40171bb3 100644 --- a/npm/Dockerfile +++ b/npm/Dockerfile @@ -1,5 +1,5 @@ # Use a minimal image as a parent image -FROM ubuntu:focal-20200606 +FROM ubuntu:bionic-20200526 ARG NPM_BUILD_DIR # Install dependencies. @@ -7,9 +7,6 @@ RUN apt-get update RUN apt-get install -y iptables RUN apt-get install -y ipset RUN apt-get install -y ca-certificates - -# https://lists.ubuntu.com/archives/ubuntu-security-announce/2020-June/005466.html -RUN apt-get install -y libgnutls30=3.6.13-2ubuntu1.1 RUN apt-get upgrade -y # Install plugin.