Upgrade libcurl from 3.11

It fixes CVE-2020-8231

Change-Id: I90ad55ca8babfa2f178af4d1d601c064d95ed112
Signed-off-by: Cédric Ollivier <cedric.ollivier@orange.com>

diff --git a/docker/core/Dockerfile b/docker/core/Dockerfile
index 1a763f7..130ad5f 100644 (file)
--- a/docker/core/Dockerfile
+++ b/docker/core/Dockerfile
@@ -4,6 +4,7 @@ ARG BRANCH=stable/jerma
 ARG OPENSTACK_TAG=stable/train
 
 RUN apk -U upgrade && \
+    apk --no-cache add --update libcurl --repository=http://dl-cdn.alpinelinux.org/alpine/v3.11/main && \
     apk --no-cache add --update python3 bash git mailcap libxml2 libxslt && \
     apk --no-cache add --virtual .build-deps --update \
         python3-dev build-base libxml2-dev libxslt-dev && \