Skip to content

Upgrade gnutls to fix CVE-2026-1584 vulnerability (UID2-6655) #2394

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
sunnywu wants to merge 1 commit into
base: main
Choose a base branch
from
+3 −3
Open

Upgrade gnutls to fix CVE-2026-1584 vulnerability (UID2-6655) #2394

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
FROM eclipse-temurin@sha256:693c22ea458d62395bac47a2da405d0d18c77b205211ceec4846a550a37684b6

# For Amazon Corretto Crypto Provider
RUN apk add --no-cache gcompat
RUN apk add --no-cache --upgrade gnutls gcompat

WORKDIR /app
EXPOSE 8080
Expand Down
2 changes: 1 addition & 1 deletion scripts/azure-cc/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@
FROM eclipse-temurin@sha256:693c22ea458d62395bac47a2da405d0d18c77b205211ceec4846a550a37684b6

# Install necessary packages and set up virtual environment
RUN apk update && apk add --no-cache jq python3 py3-pip && \
RUN apk update && apk add --no-cache --upgrade gnutls && apk add --no-cache jq python3 py3-pip && \
python3 -m venv /venv && \
. /venv/bin/activate && \
pip install --no-cache-dir requests azure-identity azure-keyvault-secrets && \
Expand Down
2 changes: 1 addition & 1 deletion scripts/gcp-oidc/Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ LABEL "tee.launch_policy.allow_env_override"="API_TOKEN_SECRET_NAME,DEPLOYMENT_E
LABEL "tee.launch_policy.log_redirect"="always"

# Install Packages
RUN apk update && apk add --no-cache --upgrade libpng && apk add --no-cache jq python3 py3-pip && \
RUN apk update && apk add --no-cache --upgrade libpng gnutls && apk add --no-cache jq python3 py3-pip && \
python3 -m venv /venv && \
. /venv/bin/activate && \
pip install --no-cache-dir google-cloud-secret-manager google-auth google-api-core packaging && \
Expand Down
Loading