Merge pull request #1117 from andyzhangx/libgmp10

fix: CVE-2021-43618 in Ubuntu image
kubernetes-sigs · Dec 20, 2021 · e5b9408 · e5b9408
2 parents b7afeb7 + 291e261
commit e5b9408
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/.github/workflows/pluto.yaml b/.github/workflows/pluto.yaml
@@ -1,4 +1,4 @@
-name: k8s apiVersion check test
+name: k8s api version check
 on:
     pull_request: {}
     push: {}

diff --git a/pkg/azurediskplugin/Dockerfile b/pkg/azurediskplugin/Dockerfile
@@ -17,7 +17,7 @@ FROM k8s.gcr.io/build-image/debian-base:bullseye-v1.0.0
 RUN apt update && apt-mark unhold libcap2
 RUN clean-install util-linux e2fsprogs mount ca-certificates udev xfsprogs btrfs-progs
 # install updated packages to fix CVE issues
-RUN clean-install libssl1.1 libgssapi-krb5-2 libk5crypto3 libkrb5-3 libkrb5support0
+RUN clean-install libssl1.1 libgssapi-krb5-2 libk5crypto3 libkrb5-3 libkrb5support0 libgmp10
 
 LABEL maintainers="andyzhangx"
 LABEL description="Azure Disk CSI Driver"