Skip to content

Commit 44918ae

Browse files
authored
Docker: Update deps version for fixed CVE (#2778)
Signed-off-by: Viet Nguyen Duc <[email protected]>
1 parent 35b2d0e commit 44918ae

File tree

1 file changed

+7
-2
lines changed

1 file changed

+7
-2
lines changed

Base/Dockerfile

Lines changed: 7 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -10,9 +10,10 @@ ARG MVN_SELENIUM_VERSION
1010
# Default value should be aligned with upstream Selenium (https://github.com/SeleniumHQ/selenium/blob/trunk/MODULE.bazel)
1111
ARG OPENTELEMETRY_VERSION=1.48.0
1212
ARG GRPC_VERSION=1.71.0
13+
ARG NETTY_VERSION=4.2.0.Final
1314
ARG CS_VERSION=2.1.18
1415
ARG POSTGRESQL_VERSION=42.7.5
15-
ARG ENVSUBST_VERSION=1.4.3
16+
ARG ENVSUBST_VERSION=1.4.4
1617

1718
#Arguments to define the user running Selenium
1819
ARG SEL_USER=seluser
@@ -77,6 +78,7 @@ RUN apt-get -qqy update \
7778
&& apt-get upgrade -yq \
7879
&& apt-get -qqy --no-install-recommends install \
7980
python3 python3-pip python3-venv \
81+
&& python3 -m pip install --upgrade setuptools virtualenv --break-system-packages \
8082
&& rm -rf /var/lib/apt/lists/* /var/cache/apt/* \
8183
&& echo "source $VENV_PATH/bin/activate" >> /etc/bash.bashrc
8284

@@ -142,6 +144,9 @@ RUN --mount=type=secret,id=SEL_PASSWD \
142144
java -jar /tmp/cs fetch --classpath --cache /external_jars \
143145
io.opentelemetry:opentelemetry-exporter-otlp:${OPENTELEMETRY_VERSION} \
144146
io.grpc:grpc-netty:${GRPC_VERSION} \
147+
io.netty:netty-codec-http:${NETTY_VERSION} \
148+
io.netty:netty-handler:${NETTY_VERSION} \
149+
io.netty:netty-common:${NETTY_VERSION} \
145150
> /external_jars/.classpath.txt \
146151
&& chmod 664 /external_jars/.classpath.txt \
147152
&& java -jar /tmp/cs fetch --classpath --cache /external_jars \
@@ -179,7 +184,7 @@ COPY --chown="${SEL_UID}:${SEL_GID}" certs/tls.crt certs/tls.key certs/server.jk
179184
# Add envsubst binary
180185
#===================================================
181186
RUN ARCH=$(if [ "$(dpkg --print-architecture)" = "amd64" ]; then echo "x86_64"; else echo "$(dpkg --print-architecture)"; fi) \
182-
&& curl -fsSL https://github.com/a8m/envsubst/releases/download/v${ENVSUBST_VERSION}/envsubst-$(uname -s)-${ARCH} -o envsubst \
187+
&& curl -fsSL https://github.com/ndviet/envsubst/releases/download/v${ENVSUBST_VERSION}/envsubst-$(uname -s)-${ARCH} -o envsubst \
183188
&& chmod +x envsubst \
184189
&& mv envsubst /usr/local/bin \
185190
&& ln -sf /usr/local/bin/envsubst /usr/bin/envsubst

0 commit comments

Comments
 (0)