Merge pull request #25 from lyes-s/openssl-vulnerability-cve-2022-2097

~ CVE-2022-2097 Fix
lyes-sefiane · Jul 6, 2022 · d3c8c59 · d3c8c59
2 parents 0b035bb + 4db0bf3
commit d3c8c59
Show file tree

Hide file tree

Showing 4 changed files with 9 additions and 5 deletions.
diff --git a/flyway-service/Dockerfile b/flyway-service/Dockerfile
@@ -1,2 +1,4 @@
 FROM flyway/flyway:8.5.11-alpine
-ADD sql_versions /flyway/sqlf
+ADD sql_versions /flyway/sqlf
+USER root
+RUN apk add --update --no-cache libcrypto1.1=1.1.1q-r0
diff --git a/grafana-service/Dockerfile b/grafana-service/Dockerfile
@@ -1,3 +1,5 @@
 FROM grafana/grafana
 ADD provisioning /etc/grafana/provisioning
-ADD grafana.ini /etc/grafana/
+ADD grafana.ini /etc/grafana
+USER root
+RUN apk add --update --no-cache libcrypto1.1=1.1.1q-r0
diff --git a/network-device-inventory-service/Dockerfile b/network-device-inventory-service/Dockerfile
@@ -2,7 +2,7 @@ FROM amazoncorretto:11-alpine
 LABEL maintainer=lyes.sefiane@gmail.com
 WORKDIR network-device-inventory-service
 COPY ./target/network-device-inventory-service-0.0.1-SNAPSHOT.jar network-device-inventory.jar
-RUN apk add --update && \
+RUN apk add --update libcrypto1.1=1.1.1q-r0 && \
     rm -rf /var/cache/apk/*
 EXPOSE 8080
 ENTRYPOINT ["java","-jar","network-device-inventory.jar"]
diff --git a/nginx-service/Dockerfile b/nginx-service/Dockerfile
@@ -1,5 +1,5 @@
 FROM nginx:1.22-alpine
 ADD conf.d /etc/nginx/conf.d
-RUN apk add --update pcre2=10.40-r0 && \
-    curl=7.83.1-r2 && \
+USER root
+RUN apk add --update libcrypto1.1=1.1.1q-r0 pcre2=10.40-r0 curl=7.83.1-r2 && \
     rm -rf /var/cache/apk/*