Merge pull request #895 from kubernetes-sigs/fix-CVE-2021-3996-1.2

fix: CVE-2021-3996 in image build
kubernetes-sigs · Jan 25, 2022 · e38b070 · e38b070
2 parents daa079f + c48000d
commit e38b070
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pkg/azurefileplugin/Dockerfile b/pkg/azurefileplugin/Dockerfile
@@ -20,7 +20,7 @@ COPY ./_output/${ARCH}/azurefileplugin /azurefileplugin
 RUN apt update && apt-mark unhold libcap2
 RUN clean-install ca-certificates cifs-utils util-linux e2fsprogs mount udev xfsprogs nfs-common
 # install updated packages to fix CVE issues
-RUN clean-install libssl1.1 libgssapi-krb5-2 libk5crypto3 libkrb5-3 libkrb5support0 libgmp10
+RUN clean-install libssl1.1 libgssapi-krb5-2 libk5crypto3 libkrb5-3 libkrb5support0 libgmp10 bsdutils
 
 LABEL maintainers="andyzhangx"
 LABEL description="AzureFile CSI Driver"