From 67cc29ff15072d64dacf267267c55447ff8c1d25 Mon Sep 17 00:00:00 2001 From: GUGEMAN Date: Mon, 9 Oct 2023 14:28:13 +0200 Subject: [PATCH] Removed libcurl dependency. cURL is purged after usage inside the Dockerfile, but the libcurl dependency was left. Container security scanners find CVEs related to cURL (like CVE-2023-38545). By adding `--autoremove` option to the purge command, the dependencies will also get purged. --- ubuntu/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ubuntu/Dockerfile b/ubuntu/Dockerfile index 43308eba..bc5c489d 100644 --- a/ubuntu/Dockerfile +++ b/ubuntu/Dockerfile @@ -27,7 +27,7 @@ RUN set -ex; \ apt-get install -y --no-install-recommends curl ca-certificates \ && UBUNTU_CODENAME=$(cat /etc/os-release | grep UBUNTU_CODENAME | cut -d = -f 2) \ && curl -fL https://download.konghq.com/gateway-${KONG_VERSION%%.*}.x-ubuntu-${UBUNTU_CODENAME}/pool/all/k/kong/kong_${KONG_VERSION}_$arch.deb -o /tmp/kong.deb \ - && apt-get purge -y curl \ + && apt-get purge --autoremove -y curl \ && echo "$KONG_SHA256 /tmp/kong.deb" | sha256sum -c - \ || exit 1; \ else \