MGMT-12278: Fix CVE-2022-3515. Update libksba to its latest version (…

…currently libksba-1.3.5-9.el8.x86_64) which include the fix for CVE-2022-3515. MGMT-11949: Fix CVE-2016-3709. Update libxml2 to its latest version (currently libxml2-2.9.7-16.el8.x86_64) which include the fix fo CVE-2016-3709
openshift · Jul 31, 2023 · 5c96334 · 5c96334
1 parent 83852f8
commit 5c96334
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/Dockerfile.assisted-service b/Dockerfile.assisted-service
@@ -47,6 +47,8 @@ RUN dnf install -y --setopt=install_weak_deps=False skopeo
 RUN dnf install -y libvirt-libs nmstate nmstate-libs &&\
     dnf clean all
 
+RUN dnf update libksba libxml2 -y && dnf clean all
+
 ARG WORK_DIR=/data
 
 RUN mkdir $WORK_DIR && chmod 775 $WORK_DIR

diff --git a/Dockerfile.assisted-service.ocp b/Dockerfile.assisted-service.ocp
@@ -23,6 +23,8 @@ LABEL io.openshift.release.operator=true
 # https://issues.redhat.com/browse/AGENT-223
 RUN dnf install -y postgresql-server libvirt-libs nmstate nmstate-libs && dnf clean all
 
+RUN dnf update libksba libxml2 -y && dnf clean all
+
 COPY hack/agent_installer/start_db.sh start_db.sh
 
 RUN su - postgres -c "mkdir -p /tmp/postgres/data"