Merge pull request #55 from axoflow/fix-cve-2023-43804

syslog-ng: add workaround for CVE-2023-43804
axoflow · Oct 27, 2023 · e136725 · e136725
2 parents 2c1a725 + 3dab5aa
commit e136725
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/syslog-ng/alpine.dockerfile b/syslog-ng/alpine.dockerfile
@@ -73,6 +73,8 @@ RUN apk add --repository /axoflow -U --upgrade --no-cache \
     syslog-ng-tags-parser \
     syslog-ng-xml
 
+RUN /var/lib/syslog-ng-venv/bin/pip install -U urllib3==1.26.18
+
 EXPOSE 514/udp
 EXPOSE 601/tcp
 EXPOSE 6514/tcp