Merge pull request #826 from aramase/CVE-2021-43618

security: fix CVE-2021-43618
kubernetes-sigs · Jan 4, 2022 · efed957 · efed957
2 parents a9eed5d + 6462375
commit efed957
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/docker/Dockerfile b/docker/Dockerfile
@@ -28,7 +28,8 @@ RUN export GOOS=$TARGETOS && \
 
 FROM $BASEIMAGE
 COPY --from=builder /go/src/sigs.k8s.io/secrets-store-csi-driver/_output/secrets-store-csi /secrets-store-csi
-RUN clean-install ca-certificates mount
+# upgrading libgmp10 due to CVE-2021-43618
+RUN clean-install ca-certificates mount libgmp10
 
 LABEL maintainers="ritazh"
 LABEL description="Secrets Store CSI Driver"