From bfe3c1b892d63c10a699c0f0c846998c40c3f5b2 Mon Sep 17 00:00:00 2001
From: Hernan Rojek Moriceau <hrojek@ibm.com>
Date: Fri, 19 May 2023 12:12:38 +0000
Subject: [PATCH] fix (docker): Mitigates RSA vulnerability on the base Docker
 image. https://nvd.nist.gov/vuln/detail/CVE-2023-0361

---
 Dockerfile | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/Dockerfile b/Dockerfile
index b9cda00..ba84de5 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -118,5 +118,8 @@ RUN mkdir -p ${STORE_DIR} && chmod -R 777 ${STORE_DIR}
 # Set default run command
 CMD ["tini","run_orchestrator"]
 
+# needed to mitigate CVE-2023-0361
+RUN apt install libgnutls30>=3.7.1-5+deb11u3
+
 # Change to application user
 USER 2000