Fix CVE-2020-8231

https://build.opnfv.org/ci/view/functest-kubernetes-trivy/job/functest-kubernetes-opnfv-functest-kubernetes-benchmarking-hunter-trivy/1/console

Change-Id: Icd687fbc1f99a1a741271179dc2289cc884f1bdf
Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>
(cherry picked from commit c9efbc79d9c7b23a90a85303d9fc8007bbc2bb60)

diff --git a/docker/core/Dockerfile b/docker/core/Dockerfile
index 30598f6..72e4775 100644 (file)
--- a/docker/core/Dockerfile
+++ b/docker/core/Dockerfile
@@ -8,6 +8,7 @@ COPY Try-a-quick-fix-vs-asynchronuous-issues.patch /tmp/Try-a-quick-fix-vs-async
 COPY Switch-to-threading.Thread-for-Rally-tasks.patch /tmp/Switch-to-threading.Thread-for-Rally-tasks.patch
 COPY Allow-offline-testing-in-PodWithClusterIPSvc.patch /tmp/Allow-offline-testing-in-PodWithClusterIPSvc.patch
 RUN apk -U upgrade && \
+    apk --no-cache add --update libcurl --repository=http://dl-cdn.alpinelinux.org/alpine/v3.11/main && \
     apk --no-cache add --update python py-pip bash git grep libffi openssl mailcap && \
     apk --no-cache add --virtual .build-deps --update \
         python-dev build-base libffi-dev openssl-dev && \