Skip to content

Commit cc34f1d

Browse files
authored
fix: update ca-certificates version in the check to remove e-tugra cert (#812)
1 parent ea3155c commit cc34f1d

File tree

1 file changed

+2
-3
lines changed

1 file changed

+2
-3
lines changed

stackable-base/Dockerfile

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -137,9 +137,8 @@ chown stackable:stackable /stackable/.profile
137137

138138
# CVE-2023-37920: Remove "e-Tugra" root certificates
139139
# e-Tugra's root certificates were subject to an investigation prompted by reporting of security issues in their systems
140-
# The package ca-certificates 2023.07.22 fixes the problem, until ubi9-minimal updates to it, we should remove them
141-
# manually.
142-
if [ "$(rpm -qa ca-certificates)" != "ca-certificates-2023.2.60_v7.0.306-90.1.el9_2.noarch" ]; then
140+
# Until they are removed by default from ca-certificates, we should remove them manually
141+
if [ "$(rpm -qa ca-certificates)" != "ca-certificates-2024.2.69_v8.0.303-91.4.el9_4.noarch" ]; then
143142
echo "The ca-certificates package was updated. Please check if the e-Tugra root certificates are present. \
144143
When they have been removed, manually blacklisting them should be removed"
145144
echo "Let me help you by running trust list --filter=ca-anchors | grep 'E-Tugra'"

0 commit comments

Comments
 (0)