Skip to content
This repository has been archived by the owner on Oct 12, 2023. It is now read-only.

Commit

Permalink
chore: update debian-iptables to bullseye-v1.5.0 (#1292)
Browse files Browse the repository at this point in the history
Signed-off-by: Anish Ramasekar <anish.ramasekar@gmail.com>
  • Loading branch information
aramase authored Jul 6, 2022
1 parent d9f6cb0 commit 446c2bc
Showing 1 changed file with 3 additions and 4 deletions.
7 changes: 3 additions & 4 deletions Dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -17,10 +17,9 @@ RUN export GOOS=$TARGETOS && \
export GOARM=$(echo ${TARGETPLATFORM} | cut -d / -f3 | tr -d 'v') && \
make build

FROM k8s.gcr.io/build-image/debian-iptables:bullseye-v1.4.0 AS nmi
# upgrading dpkg due to CVE-2022-1664
# upgrading libssl1.1 due to CVE-2022-2068
RUN clean-install ca-certificates dpkg libssl1.1
FROM k8s.gcr.io/build-image/debian-iptables:bullseye-v1.5.0 AS nmi
# upgrading gpgv due to CVE-2022-34903
RUN clean-install ca-certificates gpgv
COPY --from=builder /go/src/github.com/Azure/aad-pod-identity/bin/aad-pod-identity/nmi /bin/
RUN useradd -u 10001 nonroot
USER nonroot
Expand Down

0 comments on commit 446c2bc

Please sign in to comment.