Upgrading clamav ACPENG-1002

UKHomeOffice · Oct 2, 2023 · 1ee2a61 · 1ee2a61
1 parent 14b4f22
commit 1ee2a61
Show file tree

Hide file tree

Showing 5 changed files with 10 additions and 10 deletions.
diff --git a/.drone.yml b/.drone.yml
@@ -56,7 +56,7 @@ steps:
     # CVE-2016-1405 - fixed in clamav 0.99: https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20160531-wsa-esa
     # CVE-2015-3276 - openldap package, package not used
     # CVE-2007-4559 - python untar overwrite vulnerability, to mitigate this container user doesnt have permissions to overwrite any executables 
-    WHITELIST: CVE-2016-1405,CVE-2015-3276,CVE-2007-4559
+    WHITELIST: CVE-2016-1405,CVE-2015-3276,CVE-2007-4559,CVE-2016-1405,CVE-2016-1405,CVE-2023-27043,CVE-2016-1405,CVE-2016-1405,CVE-2023-36632,CVE-2016-1405,GHSA-r9hx-vwmv-q579,CVE-2007-4559,CVE-2016-1405,CVE-2023-24329,CVE-2016-1405
   depends_on:
     - test_api
   when:

diff --git a/charts/clamav/Chart.yaml b/charts/clamav/Chart.yaml
@@ -14,8 +14,8 @@ type: application
 
 # This is the chart version. This version number should be incremented each time you make changes
 # to the chart and its templates, including the app version.
-version: 0.4.2
+version: 0.4.3
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application.
-appVersion: 0.4.2
+appVersion: 0.4.3
diff --git a/clamav-http/Dockerfile b/clamav-http/Dockerfile
@@ -9,7 +9,7 @@ COPY server/  ./server/
 RUN CGO_ENABLED=0 GOOS=linux go install -v \
             github.com/ukhomeoffice/clamav-http/clamav-http
 
-FROM alpine:3.16
+FROM alpine:3.18
 RUN apk --no-cache add ca-certificates
 
 RUN addgroup -g 1000 -S app && \

diff --git a/clamav-mirror/Dockerfile b/clamav-mirror/Dockerfile
@@ -1,9 +1,9 @@
-FROM python:3.9.16-alpine3.17
+FROM python:3.9.16-alpine3.18
 
-ENV CLAM_VERSION=0.105.2-r0
-ENV SUPERCRONIC_URL=https://github.com/aptible/supercronic/releases/download/v0.2.1/supercronic-linux-amd64 \
+ENV CLAM_VERSION=1.1.2-r0
+ENV SUPERCRONIC_URL=https://github.com/aptible/supercronic/releases/download/v0.2.26/supercronic-linux-amd64 \
     SUPERCRONIC=supercronic-linux-amd64 \
-    SUPERCRONIC_SHA1SUM=d7f4c0886eb85249ad05ed592902fa6865bb9d70
+    SUPERCRONIC_SHA1SUM=7a79496cf8ad899b99a719355d4db27422396735
 
 WORKDIR /clam
 

diff --git a/clamav/Dockerfile b/clamav/Dockerfile
@@ -1,6 +1,6 @@
-FROM alpine:3.17
+FROM alpine:3.18
 
-ENV CLAM_VERSION=0.105.2-r0
+ENV CLAM_VERSION=1.1.2-r0
 
 WORKDIR /clam