Skip to content

Commit d006172

Browse files
committed
Don't install weak dependencies
With this change, it won't install mod_http2 which resolves CVE-2018-17189
1 parent c5408ba commit d006172

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

Dockerfile

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -15,6 +15,7 @@ LABEL name="Httpd" \
1515
description="Apache HTTP Server"
1616

1717
RUN ARCH=$(uname -m) && \
18+
dnf config-manager --setopt=tsflags=nodocs --setopt=install_weak_deps=False --save && \
1819
dnf -y --disableplugin=subscription-manager --setopt=tsflags=nodocs update && \
1920
dnf -y --disableplugin=subscription-manager --setopt=tsflags=nodocs install \
2021
httpd \

0 commit comments

Comments
 (0)