Merge branch 'devops/log4j2-vulnerability-patch-dev' into 'dev'

Apply vulnerability patch to mitigate CVE-2021-44228

See merge request crafty-controller/crafty-commander!114
This commit is contained in:
xithical 2021-12-12 15:29:18 +00:00
commit a86181e368

View File

@ -2,6 +2,9 @@ FROM python:alpine
LABEL maintainer="Dockerfile created by Zedifus <https://gitlab.com/zedifus>" LABEL maintainer="Dockerfile created by Zedifus <https://gitlab.com/zedifus>"
# Security Patch for CVE-2021-44228
ENV LOG4J_FORMAT_MSG_NO_LOOKUPS=true
# Install Packages & Garbage Collect Compile Deps & Harden # Install Packages & Garbage Collect Compile Deps & Harden
COPY requirements.txt /commander/requirements.txt COPY requirements.txt /commander/requirements.txt
RUN apk add --no-cache -X http://dl-cdn.alpinelinux.org/alpine/latest-stable/community \ RUN apk add --no-cache -X http://dl-cdn.alpinelinux.org/alpine/latest-stable/community \