commit f2da63dbece0e4b1d7058a9ccc9cbf7934ce2c8c
author Gary Wu <gary.i.wu@huawei.com> Mon May 07 17:21:22 2018 -0700
committer Michael Lando <ml636r@att.com> Wed May 09 15:36:18 2018 +0000
tree c9b6b866c64bc1949d6aacd301a844f59958a383
parent d0a8a0d8c712ee968367509101b2530870f54cb1

Fix additional library CVEs in sdc-docker-base

Fix CVEs around the following packages:
  binutils
  jq
  libtasn1
  libpng
  curl libcurl

Change-Id: Ib9b8419e3f35072a43bdc88a92255ee6f8968943
Issue-ID: SDC-1310
Signed-off-by: Gary Wu <gary.i.wu@huawei.com>

base_sdc-elasticsearch/Dockerfile

diff --git a/base_sdc-elasticsearch/Dockerfile b/base_sdc-elasticsearch/Dockerfile
index 8cbfeb2..045cc4c 100644
--- a/base_sdc-elasticsearch/Dockerfile
+++ b/base_sdc-elasticsearch/Dockerfile
@@ -5,4 +5,7 @@
 # Install Chef
 RUN set -ex && \
     apk add --no-cache curl vim bash=4.4.12-r2 build-base=0.5-r0 ruby=2.4.4-r0 ruby-dev=2.4.4-r0 libffi-dev=3.2.1-r4 libxml2-dev=2.9.7-r0 && \
-    gem install chef:13.8.5 berkshelf:6.3.1 io-console:0.4.6 --no-document
+    gem install chef:13.8.5 berkshelf:6.3.1 io-console:0.4.6 --no-document && \
+    echo "http://nl.alpinelinux.org/alpine/edge/main" >> /etc/apk/repositories && \
+    apk update && \
+    apk add binutils=2.30-r1 curl=7.59.0-r1 libcurl=7.59.0-r1 libtasn1=4.13-r0