Skip to content

Commit

Permalink
security: fix multiple CVEs
Browse files Browse the repository at this point in the history
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
  • Loading branch information
aramase committed Aug 9, 2022
1 parent 9a4d7f4 commit 94077a6
Showing 1 changed file with 4 additions and 1 deletion.
5 changes: 4 additions & 1 deletion docker/Dockerfile
Expand Up @@ -28,7 +28,10 @@ RUN export GOOS=$TARGETOS && \

FROM $BASEIMAGE
COPY --from=builder /go/src/sigs.k8s.io/secrets-store-csi-driver/_output/secrets-store-csi /secrets-store-csi
RUN clean-install ca-certificates mount
# upgrading libtirpc-common due to CVE-2021-46828
# upgrading libtirpc3 due to CVE-2021-46828
# upgrading libgnutls30 due to CVE-2022-2509
RUN clean-install ca-certificates mount libtirpc-common libtirpc3 libgnutls30

LABEL maintainers="ritazh"
LABEL description="Secrets Store CSI Driver"
Expand Down

0 comments on commit 94077a6

Please sign in to comment.