Skip to content

Commit

Permalink
Add fixes for CVE-2024-5535 and CVE-2024-24790 (#18)
Browse files Browse the repository at this point in the history
CVE-2024-5535
- alpine openssl cirical vulnerability fixes by requring openssl version > 3.1.6-r0
CVE-2024-24790
- various 'Is' methods not working as expected, fixed by bumping builder image to golang:1.22.5 to include backported fix.
  • Loading branch information
kshave authored Jul 27, 2024
1 parent 9a8982a commit 91bf480
Showing 1 changed file with 4 additions and 1 deletion.
5 changes: 4 additions & 1 deletion agent/Dockerfile
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
############################
# STEP 1 build the image for creating the executable
############################
FROM docker.io/library/golang:1.22-alpine3.19 as builder
FROM docker.io/library/golang:1.22.5-alpine3.19 as builder

# Install git + SSL ca certificates + make
RUN apk update && apk upgrade && apk add --no-cache git ca-certificates make unzip g++ && update-ca-certificates && apk --no-cache add openssl wget && rm -rf /var/cache/apk/*
Expand Down Expand Up @@ -53,6 +53,9 @@ COPY --from=builder /app/synthetic-heart/agent /app/synthetic-heart/agent
# Create a /tmp/ diretctory (required for go plugin for Unix Domain Socket)
COPY --from=builder /app/synthetic-heart/.emptyfile /tmp/.emptyfile

# Fix for CVE-2024-5535
RUN apk add "openssl>3.1.6-r0"

WORKDIR /app/synthetic-heart

# Run the binary.
Expand Down

0 comments on commit 91bf480

Please sign in to comment.