This is an automated email from the ASF dual-hosted git repository. rantunes pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/incubator-kie-tools-temporary-rnd-do-not-use.git
commit cd9336e4f684df6a70aaec3d994071ae04bbd4f0 Author: Thiago Lugli <[email protected]> AuthorDate: Tue Nov 7 16:26:01 2023 -0300 NO-ISSUE: Fix CVE-2023-27522 on kie-sandbox-image (#2040) --- packages/cors-proxy-image/Containerfile | 2 +- packages/dashbuilder-viewer-image/Containerfile | 4 ++-- packages/kie-sandbox-distribution/package.json | 2 +- packages/kie-sandbox-extended-services-image/Containerfile | 2 +- packages/kie-sandbox-image/Containerfile | 4 ++-- 5 files changed, 7 insertions(+), 7 deletions(-) diff --git a/packages/cors-proxy-image/Containerfile b/packages/cors-proxy-image/Containerfile index 7a83867e18..9793d9e9fa 100644 --- a/packages/cors-proxy-image/Containerfile +++ b/packages/cors-proxy-image/Containerfile @@ -15,7 +15,7 @@ # specific language governing permissions and limitations # under the License. -FROM --platform=linux/amd64 registry.access.redhat.com/ubi9/ubi-minimal:9.2 +FROM --platform=linux/amd64 registry.access.redhat.com/ubi9/ubi-minimal:9.3 ENV HOME /home/kie-sandbox ENV NVM_DIR $HOME/.nvm diff --git a/packages/dashbuilder-viewer-image/Containerfile b/packages/dashbuilder-viewer-image/Containerfile index ae547b2eb3..e57389dfbc 100644 --- a/packages/dashbuilder-viewer-image/Containerfile +++ b/packages/dashbuilder-viewer-image/Containerfile @@ -15,9 +15,9 @@ # specific language governing permissions and limitations # under the License. -FROM --platform=linux/amd64 registry.access.redhat.com/ubi9/ubi-minimal:9.2 +FROM --platform=linux/amd64 registry.access.redhat.com/ubi9/ubi-minimal:9.3 -RUN microdnf --disableplugin=subscription-manager -y install httpd-2.4.53-11.el9_2.5.x86_64 \ +RUN microdnf --disableplugin=subscription-manager -y install httpd-2.4.57-5.el9.x86_64 \ && microdnf --disableplugin=subscription-manager clean all \ && sed -i -e 's/Listen 80/Listen 8080/' /etc/httpd/conf/httpd.conf \ && sed -i -e 's/#ServerName www.example.com:80/ServerName 127.0.0.1:8080/' /etc/httpd/conf/httpd.conf \ diff --git a/packages/kie-sandbox-distribution/package.json b/packages/kie-sandbox-distribution/package.json index 19c97ba426..e79fdf6288 100644 --- a/packages/kie-sandbox-distribution/package.json +++ b/packages/kie-sandbox-distribution/package.json @@ -22,7 +22,7 @@ "docker:start-no-pull": "docker compose up -d --wait --pull=never", "docker:stop": "docker compose stop", "install": "pnpm docker:create-env-file", - "test": "run-script-if --bool \"$(build-env containerImages.build)\" --bool \"$(build-env tests.run)\" --ignore-errors \"$(build-env tests.ignoreFailures)\" --then \"pnpm docker:start-no-pull\" \"jest --silent --verbose\" \"pnpm docker:stop\"" + "test": "run-script-if --bool \"$(build-env containerImages.build)\" --bool \"$(build-env tests.run)\" --ignore-errors \"$(build-env tests.ignoreFailures)\" --then \"pnpm docker:start-no-pull\" \"sleep 10\" \"jest --silent --verbose\" \"pnpm docker:stop\"" }, "dependencies": { "@kie-tools/cors-proxy-image": "workspace:*", diff --git a/packages/kie-sandbox-extended-services-image/Containerfile b/packages/kie-sandbox-extended-services-image/Containerfile index 936b62d77a..b5f82e8ab7 100644 --- a/packages/kie-sandbox-extended-services-image/Containerfile +++ b/packages/kie-sandbox-extended-services-image/Containerfile @@ -15,7 +15,7 @@ # specific language governing permissions and limitations # under the License. -FROM --platform=linux/amd64 registry.access.redhat.com/ubi9/ubi-minimal:9.2 +FROM --platform=linux/amd64 registry.access.redhat.com/ubi9/ubi-minimal:9.3 RUN mkdir /kie-sandbox /.cache \ && chgrp -R 0 /kie-sandbox /.cache \ diff --git a/packages/kie-sandbox-image/Containerfile b/packages/kie-sandbox-image/Containerfile index 94796f2e1b..4bc6325b81 100644 --- a/packages/kie-sandbox-image/Containerfile +++ b/packages/kie-sandbox-image/Containerfile @@ -15,11 +15,11 @@ # specific language governing permissions and limitations # under the License. -FROM --platform=linux/amd64 registry.access.redhat.com/ubi9/ubi-minimal:9.2 +FROM --platform=linux/amd64 registry.access.redhat.com/ubi9/ubi-minimal:9.3 COPY entrypoint.sh dist-dev/image-env-to-json-standalone dist-dev/EnvJson.schema.json /tmp/ -RUN microdnf --disableplugin=subscription-manager -y install httpd-2.4.53-11.el9_2.5.x86_64 \ +RUN microdnf --disableplugin=subscription-manager -y install httpd-2.4.57-5.el9.x86_64 \ && microdnf --disableplugin=subscription-manager clean all \ && echo "Mutex posixsem" >> /etc/httpd/conf/httpd.conf \ && sed -i -e 's/Listen 80/Listen 8080/' /etc/httpd/conf/httpd.conf \ --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
