Skip to content

Commit 918e777

Browse files
jemsabKaniska244
andauthored
Remove uninstallation of imagemagick from debian (#1652)
* Remove uninstallation of imagemagick from debian The current version of the Rust Dockerfile removes the imagemagick package from the OCI image because of CVE CVE-2019-10131. According to Debian's security tracker https://security-tracker.debian.org/tracker/CVE-2019-10131, the vulnerability has been fixed in all Debian versions referenced in the manifest file (bullseye, bookworm and trixie). This workaround is therefore no longer necessary. Removing the workaround will also remove a layer from the generated OCI image reducing deployment size. * Bump version from 2.0.6 to 2.0.7 * Update Rust image version in README --------- Co-authored-by: Kaniska <kaniska244@github.com>
1 parent 631c66b commit 918e777

File tree

3 files changed

+2
-6
lines changed

3 files changed

+2
-6
lines changed

src/rust/.devcontainer/Dockerfile

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,6 @@
22
ARG VARIANT="trixie"
33
FROM rust:1-${VARIANT}
44

5-
RUN apt-get update && export DEBIAN_FRONTEND=noninteractive \
6-
# Remove imagemagick due to https://security-tracker.debian.org/tracker/CVE-2019-10131
7-
&& apt-get purge -y imagemagick imagemagick-6-common
8-
95
# Fixing vulnerability issue by upgrading svn to 1.14.5. Ref https://subversion.apache.org/security/CVE-2024-46901-advisory.txt
106
COPY ./scripts/install-subversion.sh /tmp/install-subversion.sh
117
RUN chmod +x /tmp/install-subversion.sh

src/rust/README.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -42,4 +42,4 @@ Alternatively, you can use the contents of [.devcontainer](.devcontainer) to ful
4242

4343
Copyright (c) Microsoft Corporation. All rights reserved.
4444

45-
Licensed under the MIT License. See [LICENSE](https://github.com/devcontainers/images/blob/main/LICENSE).
45+
Licensed under the MIT License. See [LICENSE](https://github.com/devcontainers/images/blob/main/LICENSE).

src/rust/manifest.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -65,4 +65,4 @@
6565
"git": {}
6666
}
6767
}
68-
}
68+
}

0 commit comments

Comments
 (0)