opendev/system-config
Code Issues Proposed changes

gerrit: update git

Browse Source 
Pull in updated git packages to address CVE-2022-23521.

This is a direct copy of work done in
Ib08ff1fc7b3c8623fa6b927f3010af72e1b946cf

git is included from the openjdk base image

Change-Id: Ia219a2485d166bc192f2172b56a076c94de38e0c
This commit is contained in:
Ian Wienand 2023-01-20 11:45:37 +11:00
parent c5c3e6e575
commit 023a1acc6d
No known key found for this signature in database
1 changed files with 13 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
docker/gerrit/base/Dockerfile
View File

@ -45,6 +45,19 @@ RUN addgroup gerrit --gid 3000 --system \
--ingroup gerrit \
gerrit
# Begin temporary git package upgrade
RUN ARCH=`dpkg --print-architecture` \
&& cd /tmp \
&& apt-get update \
&& apt-get -y install wget \
&& wget https://static.opendev.org/project/opendev.org/debs/git/git_2.30.2-1opendev1.0_$ARCH.deb \
&& wget https://static.opendev.org/project/opendev.org/debs/git/git-man_2.30.2-1opendev1.0_all.deb \
&& apt-get -y install /tmp/git_*.deb /tmp/git-man_*.deb \
&& rm -f /tmp/*.deb \
&& apt-get clean \
&& rm -rf /var/lib/apt/lists/*
# End temporary git package upgrade
# Startup scripts
COPY wait-for-it.sh /wait-for-it.sh
RUN chmod +x /wait-for-it.sh