Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

NO-ISSUE: Fix CVE-2023-27522 on kie-sandbox-image #2040

Merged
merged 3 commits into from
Nov 7, 2023
Merged

NO-ISSUE: Fix CVE-2023-27522 on kie-sandbox-image #2040

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
570f8e7
Fix CVE-2023-27522 on kie-sandbox-image
thiagoelg Nov 7, 2023
365ccc8
Update ubi-minimal in cors-proxy-image, kie-sandbox-extended-services…
thiagoelg Nov 7, 2023
2ad09b5
Sleep before testing docker images
thiagoelg Nov 7, 2023
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion packages/cors-proxy-image/Containerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@
# specific language governing permissions and limitations
# under the License.

FROM --platform=linux/amd64 registry.access.redhat.com/ubi9/ubi-minimal:9.2
FROM --platform=linux/amd64 registry.access.redhat.com/ubi9/ubi-minimal:9.3

ENV HOME /home/kie-sandbox
ENV NVM_DIR $HOME/.nvm
Expand Down
4 changes: 2 additions & 2 deletions packages/dashbuilder-viewer-image/Containerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,9 +15,9 @@
# specific language governing permissions and limitations
# under the License.

FROM --platform=linux/amd64 registry.access.redhat.com/ubi9/ubi-minimal:9.2
FROM --platform=linux/amd64 registry.access.redhat.com/ubi9/ubi-minimal:9.3

RUN microdnf --disableplugin=subscription-manager -y install httpd-2.4.53-11.el9_2.5.x86_64 \
RUN microdnf --disableplugin=subscription-manager -y install httpd-2.4.57-5.el9.x86_64 \
&& microdnf --disableplugin=subscription-manager clean all \
&& sed -i -e 's/Listen 80/Listen 8080/' /etc/httpd/conf/httpd.conf \
&& sed -i -e 's/#ServerName www.example.com:80/ServerName 127.0.0.1:8080/' /etc/httpd/conf/httpd.conf \
Expand Down
2 changes: 1 addition & 1 deletion packages/kie-sandbox-distribution/package.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,7 @@
"docker:start-no-pull": "docker compose up -d --wait --pull=never",
"docker:stop": "docker compose stop",
"install": "pnpm docker:create-env-file",
"test": "run-script-if --bool \"$(build-env containerImages.build)\" --bool \"$(build-env tests.run)\" --ignore-errors \"$(build-env tests.ignoreFailures)\" --then \"pnpm docker:start-no-pull\" \"jest --silent --verbose\" \"pnpm docker:stop\""
"test": "run-script-if --bool \"$(build-env containerImages.build)\" --bool \"$(build-env tests.run)\" --ignore-errors \"$(build-env tests.ignoreFailures)\" --then \"pnpm docker:start-no-pull\" \"sleep 10\" \"jest --silent --verbose\" \"pnpm docker:stop\""
},
"dependencies": {
"@kie-tools/cors-proxy-image": "workspace:*",
Expand Down
2 changes: 1 addition & 1 deletion packages/kie-sandbox-extended-services-image/Containerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@
# specific language governing permissions and limitations
# under the License.

FROM --platform=linux/amd64 registry.access.redhat.com/ubi9/ubi-minimal:9.2
FROM --platform=linux/amd64 registry.access.redhat.com/ubi9/ubi-minimal:9.3

RUN mkdir /kie-sandbox /.cache \
&& chgrp -R 0 /kie-sandbox /.cache \
Expand Down
4 changes: 2 additions & 2 deletions packages/kie-sandbox-image/Containerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,11 +15,11 @@
# specific language governing permissions and limitations
# under the License.

FROM --platform=linux/amd64 registry.access.redhat.com/ubi9/ubi-minimal:9.2
FROM --platform=linux/amd64 registry.access.redhat.com/ubi9/ubi-minimal:9.3

COPY entrypoint.sh dist-dev/image-env-to-json-standalone dist-dev/EnvJson.schema.json /tmp/

RUN microdnf --disableplugin=subscription-manager -y install httpd-2.4.53-11.el9_2.5.x86_64 \
RUN microdnf --disableplugin=subscription-manager -y install httpd-2.4.57-5.el9.x86_64 \
&& microdnf --disableplugin=subscription-manager clean all \
&& echo "Mutex posixsem" >> /etc/httpd/conf/httpd.conf \
&& sed -i -e 's/Listen 80/Listen 8080/' /etc/httpd/conf/httpd.conf \
Expand Down