Merge pull request #589 from andyzhangx/libgmp10

andyzhangx · web-flow · commit 21ea3247410b · 2021-12-19T15:36:43.000+08:00
fix: CVE-2021-43618 in Ubuntu image
diff --git a/.github/workflows/pluto.yaml b/.github/workflows/pluto.yaml
@@ -1,4 +1,4 @@
-name: apiVersion deprecation test
+name: k8s api version check
 on:
     pull_request: {}
     push: {}
diff --git a/pkg/blobplugin/Dockerfile b/pkg/blobplugin/Dockerfile
@@ -17,7 +17,7 @@ COPY ./_output/blobplugin /blobplugin
 RUN apt update && apt-mark unhold libcap2
 RUN clean-install ca-certificates libfuse-dev libcurl4-gnutls-dev libgnutls28-dev uuid-dev libgcrypt20-dev util-linux mount udev wget e2fsprogs nfs-common netbase
 # install updated packages to fix CVE issues
-RUN clean-install libssl1.1 libgssapi-krb5-2 libk5crypto3 libkrb5-3 libkrb5support0
+RUN clean-install libssl1.1 libgssapi-krb5-2 libk5crypto3 libkrb5-3 libkrb5support0 libgmp10
 RUN mkdir /blobfuse-proxy/
 COPY ./_output/blobfuse-proxy.deb /blobfuse-proxy/
 # for compatibility, remove this after v1.6.0 release (todo)

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-name: apiVersion deprecation test`
	`1`	`+name: k8s api version check`
`2`	`2`	`on:`
`3`	`3`	`pull_request: {}`
`4`	`4`	`push: {}`