Fix additional library CVEs

Change-Id: I82aa5c334f365e6ebaf65d88abb79beb96472ef4
Issue-ID: SDC-1310
Signed-off-by: Michael Lando <ml636r@att.com>

diff --git a/base_sdc-cassandra/Dockerfile b/base_sdc-cassandra/Dockerfile
index 052d9b8..e73d066 100644 (file)
--- a/base_sdc-cassandra/Dockerfile
+++ b/base_sdc-cassandra/Dockerfile
@@ -56,29 +56,30 @@ RUN echo "deb http://deb.debian.org/debian stretch main" >> /etc/apt/sources.lis
     apt-get -y --no-install-recommends install \
       vim=2:7.4.488-7+deb8u3 vim-common=2:7.4.488-7+deb8u3 vim-runtime=2:7.4.488-7+deb8u3 \
       apt-utils=1.0.9.8.4 \
-      openjdk-8-jdk=8u162-b12-1~bpo8+1 \
+      openjdk-8-jdk \
       libavahi-client3=0.7-4 libavahi-common-data=0.7-4 libavahi-common3=0.7-4 \
-      curl=7.58.0-2 libcurl3=7.58.0-2 \
+      curl=7.60.0-2 libcurl4=7.60.0-2 \
       krb5-locales=1.16-2 libgssapi-krb5-2=1.16-2 libkrb5-3=1.16-2 libkrb5support0=1.16-2 \
       libtiff5=4.0.9-5 \
       libx11-6=2:1.6.5-1 libx11-data=2:1.6.5-1 libx11-xcb1=2:1.6.5-1 \
-      libxml2=2.9.4+dfsg1-6.1 \
+      libxml2=2.9.4+dfsg1-7 \
       libxtst6=2:1.2.3-1 \
-      perl=5.26.2-3 \
+      perl=5.26.2-5 \
       python=2.7.15~rc1-1 \
       libsqlite3-0=3.23.1-1 \
       libdb5.3=5.3.28-13.1+b1 \
       libcairo2=1.15.10-3 libcairo-gobject2=1.15.10-3 \
       libc-bin=2.27-3 libc6=2.27-3 multiarch-support=2.27-3 \
       libgtk2.0-0=2.24.32-1 libgtk2.0-common=2.24.32-1 \
-      libharfbuzz0b=1.7.6-1 \
+      libharfbuzz0b=1.7.6-1+b1 \
       libgcrypt20=1.8.2-2 \
-      libtasn1-6=4.13-2 \
+      libtasn1-6=4.13-3 \
       libxi6=2:1.7.9-1 \
       libldap-2.4-2=2.4.44+dfsg-5+deb9u1 \
       libpcre3=2:8.39-9 \
       passwd=1:4.5-1 \
-      zlib1g=1:1.2.8.dfsg-5 && \
+      zlib1g=1:1.2.11.dfsg-1 \
+      ntp=1:4.2.8p11+dfsg-1 && \
     apt-get -y autoremove
 
 

diff --git a/base_sdc-elasticsearch/Dockerfile b/base_sdc-elasticsearch/Dockerfile
index 045cc4c..cb7382b 100644 (file)
--- a/base_sdc-elasticsearch/Dockerfile
+++ b/base_sdc-elasticsearch/Dockerfile
@@ -8,4 +8,4 @@ RUN set -ex && \
     gem install chef:13.8.5 berkshelf:6.3.1 io-console:0.4.6 --no-document && \
     echo "http://nl.alpinelinux.org/alpine/edge/main" >> /etc/apk/repositories && \
     apk update && \
-    apk add binutils=2.30-r1 curl=7.59.0-r1 libcurl=7.59.0-r1 libtasn1=4.13-r0
+    apk add binutils=2.30-r1 curl=7.60.0-r1 libcurl=7.60.0-r1 libtasn1=4.13-r0

diff --git a/base_sdc-jetty/Dockerfile b/base_sdc-jetty/Dockerfile
index d7be282..6a43ef0 100644 (file)
--- a/base_sdc-jetty/Dockerfile
+++ b/base_sdc-jetty/Dockerfile
@@ -7,8 +7,8 @@ USER root
 RUN set -ex && \
     apk add --no-cache \
         jq=1.5-r5 \
-        curl=7.59.0-r0 \
-        curl-dev=7.59.0-r0 \
+        curl=7.60.0-r1 \
+        curl-dev=7.60.0-r1 \
         openssl-dev=1.0.2o-r0 \
         vim=8.0.1359-r0 \
         bash=4.4.19-r1 \

diff --git a/base_sdc-kibana/Dockerfile b/base_sdc-kibana/Dockerfile
index cd9cadb..7151cc0 100644 (file)
--- a/base_sdc-kibana/Dockerfile
+++ b/base_sdc-kibana/Dockerfile
@@ -44,21 +44,21 @@ RUN echo "deb http://deb.debian.org/debian stretch main" >> /etc/apt/sources.lis
     apt-get -y --no-install-recommends install \
       vim=2:7.4.488-7+deb8u3 vim-common=2:7.4.488-7+deb8u3 vim-runtime=2:7.4.488-7+deb8u3 \
       bash=4.4.18-2+b1 \
-      curl=7.58.0-2 libcurl3=7.58.0-2 \
+      curl=7.60.0-2 libcurl4=7.60.0-2 \
       krb5-locales=1.16-2 libgssapi-krb5-2=1.16-2 libkrb5-3=1.16-2 libkrb5support0=1.16-2 \
-      openssl=1.1.0h-2 \
-      perl-base=5.26.2-3 \
-      systemd=238-4 \
+      openssl=1.1.0h-4 \
+      perl-base=5.26.2-5 \
+      systemd=238-5 \
       wget=1.19.5-1 \
       libdb5.3=5.3.28-13.1+b1 \
       libc-bin=2.27-3 libc6=2.27-3 multiarch-support=2.27-3 \
       libgnutls30=3.5.18-1 \
       libgcrypt20=1.8.2-2 \
-      libtasn1-6=4.13-2 \
+      libtasn1-6=4.13-3 \
       libldap-2.4-2=2.4.44+dfsg-5+deb9u1 \
       libpcre3=2:8.39-9 \
       passwd=1:4.5-1 \
-      zlib1g=1:1.2.8.dfsg-5 && \
+      zlib1g=1:1.2.11.dfsg-1 && \
     apt-get -y autoremove
 
 # install chef-solo

diff --git a/base_sdc-python/Dockerfile b/base_sdc-python/Dockerfile
index 7f6a8c4..443fd7b 100644 (file)
--- a/base_sdc-python/Dockerfile
+++ b/base_sdc-python/Dockerfile
@@ -14,4 +14,4 @@ RUN pip install 'influxdb==5.0.0' 'pycurl== 7.43.0.1' 'requests==2.18.4' &&  \
     gem install chef:13.8.5 berkshelf:6.3.1 io-console:0.4.6 --no-document && \
     echo "http://nl.alpinelinux.org/alpine/edge/main" >> /etc/apk/repositories && \
     apk update && \
-    apk add binutils=2.30-r1 jq=1.6_rc1-r1 libpng=1.6.34-r1
+    apk add binutils=2.26-r1 jq=1.6_rc1-r1 libpng=1.6.34-r1

diff --git a/base_sdc-sanity/Dockerfile b/base_sdc-sanity/Dockerfile
index 6eac58d..35dff60 100644 (file)
--- a/base_sdc-sanity/Dockerfile
+++ b/base_sdc-sanity/Dockerfile
@@ -6,4 +6,4 @@ RUN set -ex && \
     gem install chef:13.8.5 berkshelf:6.3.1 io-console:0.4.6 --no-document && \
     echo "http://nl.alpinelinux.org/alpine/edge/main" >> /etc/apk/repositories && \
     apk update && \
-    apk add binutils=2.30-r1 curl=7.59.0-r1 libcurl=7.59.0-r1 libtasn1=4.13-r0
+    apk add binutils=2.30-r1 curl=7.60.0-r1 libcurl=7.60.0-r1 libtasn1=4.13-r0

diff --git a/base_sdc-vnc/Dockerfile b/base_sdc-vnc/Dockerfile
index d24f319..a834498 100644 (file)
--- a/base_sdc-vnc/Dockerfile
+++ b/base_sdc-vnc/Dockerfile
@@ -2,7 +2,7 @@ FROM consol/ubuntu-xfce-vnc:1.3.0
 
 USER 0
 
-RUN apt-get -y update && apt-get -y install curl=7.47.0-1ubuntu2.7
+RUN apt-get -y update && apt-get -y install curl=7.47.0-1ubuntu2.8
 
 # install chef-solo
 RUN curl -L  https://www.opscode.com/chef/install.sh | bash

diff --git a/pom.xml b/pom.xml
index bf81779..5c892f6 100644 (file)
--- a/pom.xml
+++ b/pom.xml
@@ -5,7 +5,7 @@
   <groupId>org.onap.sdc.sdc-docker-base</groupId>
   <artifactId>sdc-docker-base</artifactId>
   <packaging>pom</packaging>
-  <version>1.3.1-SNAPSHOT</version>
+  <version>1.3.2-SNAPSHOT</version>
   <name>sdc-sdc-docker-base</name>
 
   <properties>
@@ -129,7 +129,7 @@
                             <dockerFileDir>${project.basedir}/base_sdc-sanity</dockerFileDir>
                         </build>
                     </image>
-                                        <!-- base_sdc-vnc  -->
+                                         <!--base_sdc-vnc-->
                     <image>
                         <name>onap/base_sdc-vnc</name>
                         <alias>base_sdc-vnc</alias>