zuul/nodepool
Code Issues Proposed changes

Update git

Browse Source 
This updates git to address CVE-2022-23521.

Change-Id: Ib08ff1fc7b3c8623fa6b927f3010af72e1b946cf
Co-Authored-By: Jeremy Stanley <fungi@yuggoth.org>
Co-Authored-By: Clark Boylan <clark.boylan@gmail.com>
This commit is contained in:
James E. Blair 2023-01-18 15:33:57 -08:00
parent 46f44b8669
commit 938d28abe8
1 changed files with 13 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
Dockerfile
View File

@ -117,6 +117,19 @@ RUN \
apt-get clean \
&& rm -rf /var/lib/apt/lists/*
# Begin temporary git package upgrade
RUN ARCH=`dpkg --print-architecture` \
&& cd /tmp \
&& apt-get update \
&& apt-get -y install wget \
&& wget https://static.opendev.org/project/opendev.org/debs/git/git_2.30.2-1opendev1.0_$ARCH.deb \
&& wget https://static.opendev.org/project/opendev.org/debs/git/git-man_2.30.2-1opendev1.0_all.deb \
&& apt-get -y install /tmp/git_*.deb /tmp/git-man_*.deb \
&& rm -f /tmp/*.deb \
&& apt-get clean \
&& rm -rf /var/lib/apt/lists/*
# End temporary git package upgrade
# NOTE(ianw) 2022-08-02 : move this into its own cgroup on cgroupsv2
# hosts for nested podman calls to work; see comments in
# https://github.com/containers/podman/issues/14884