Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

OpenSSL 1.0.2i for Alpine CVEs #2174

Merged
merged 1 commit into from
Sep 23, 2016
Merged

OpenSSL 1.0.2i for Alpine CVEs #2174

merged 1 commit into from
Sep 23, 2016

Conversation

andyshinn
Copy link
Contributor

@andyshinn andyshinn commented Sep 22, 2016

Related to #2171.

@yosifkit
Copy link
Member

diff --git a/alpine_3.1/rootfs.tar.gz b/alpine_3.1/rootfs.tar.gz
index 2ca4c45..926dda9 100644
Binary files a/alpine_3.1/rootfs.tar.gz and b/alpine_3.1/rootfs.tar.gz differ
diff --git a/alpine_3.2/rootfs.tar.gz b/alpine_3.2/rootfs.tar.gz
index 108e145..7320424 100644
Binary files a/alpine_3.2/rootfs.tar.gz and b/alpine_3.2/rootfs.tar.gz differ
diff --git a/alpine_3.3/rootfs.tar.gz b/alpine_3.3/rootfs.tar.gz
index 63cb38a..6aa53fe 100644
Binary files a/alpine_3.3/rootfs.tar.gz and b/alpine_3.3/rootfs.tar.gz differ
diff --git a/alpine_edge/rootfs.tar.gz b/alpine_edge/rootfs.tar.gz
index aa64441..c70660f 100644
Binary files a/alpine_edge/rootfs.tar.gz and b/alpine_edge/rootfs.tar.gz differ
diff --git a/alpine_latest/rootfs.tar.gz b/alpine_latest/rootfs.tar.gz
index 9444a9a..55794f2 100644
Binary files a/alpine_latest/rootfs.tar.gz and b/alpine_latest/rootfs.tar.gz differ

Build test of #2174; fbca4fe (alpine):

$ bashbrew build alpine:3.1
warning: insecure protocol git:// detected: git://github.com/gliderlabs/docker-alpine
Building bashbrew/cache:b19e9bbdc41575cdb770ac35e6ae3f26f821682d6f8c17a2479df1b27b527a65 (alpine:3.1)
Tagging alpine:3.1

$ test/run.sh alpine:3.1
testing alpine:3.1
    'utc' [1/4]...passed
    'cve-2014--shellshock' [2/4]...passed
    'no-hard-coded-passwords' [3/4]...passed
    'override-cmd' [4/4]...passed


$ bashbrew build alpine:3.2
Building bashbrew/cache:bc243b741a31345a60387fedaea0640d151a17df58383fd6836c136461a7bb26 (alpine:3.2)
Tagging alpine:3.2

$ test/run.sh alpine:3.2
testing alpine:3.2
    'utc' [1/4]...passed
    'cve-2014--shellshock' [2/4]...passed
    'no-hard-coded-passwords' [3/4]...passed
    'override-cmd' [4/4]...passed


$ bashbrew build alpine:3.3
Building bashbrew/cache:c463fd7004178280b74c7d5606d9222d4db6d9d4a006cae4bb6ad506ee920ac4 (alpine:3.3)
Tagging alpine:3.3

$ test/run.sh alpine:3.3
testing alpine:3.3
    'utc' [1/4]...passed
    'cve-2014--shellshock' [2/4]...passed
    'no-hard-coded-passwords' [3/4]...passed
    'override-cmd' [4/4]...passed


$ bashbrew build alpine:3.4
Building bashbrew/cache:5f811ebade56de3f8604e7976c113415a79da502cf74b857645211ae92b425c1 (alpine:3.4)
Tagging alpine:3.4
Tagging alpine:latest

$ test/run.sh alpine:3.4
testing alpine:3.4
    'utc' [1/4]...passed
    'cve-2014--shellshock' [2/4]...passed
    'no-hard-coded-passwords' [3/4]...passed
    'override-cmd' [4/4]...passed


$ bashbrew build alpine:edge
Building bashbrew/cache:43644fd686563556aa36a951fa23218aa0eede05c0376a65c87bfeab0fe0c77d (alpine:edge)
Tagging alpine:edge

$ test/run.sh alpine:edge
testing alpine:edge
    'utc' [1/4]...passed
    'cve-2014--shellshock' [2/4]...passed
    'no-hard-coded-passwords' [3/4]...passed
    'override-cmd' [4/4]...passed

@tianon
Copy link
Member

tianon commented Sep 22, 2016

Docker's automated builds team has asked us to hold this update until tomorrow morning (they're doing some system work and popular base images like alpine tend to overwhelm the queue 😇), so we'll merge/build/push first thing tomorrow. 👍

Thanks for the really quick turnaround, @andyshinn! ❤️ ❤️

@tianon tianon merged commit db6f937 into docker-library:master Sep 23, 2016
@andyshinn andyshinn deleted the alpine_openssl_1.0.2i branch September 23, 2016 16:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants