search

adobe-apiplatform / apigateway

A Performant API Gateway based on NGINX and Openresty
MIT License
301 stars 57 forks source link

Update to Alpine 3.8 to fix alpine vulnerability #73

Closed moritzraho closed 5 years ago

moritzraho commented 5 years ago

Vulnerability: https://justi.cz/security/2018/09/13/alpine-apk-rce.html https://alpinelinux.org/posts/Alpine-3.8.1-released.html

NOTE Could not build/test because of #72 if someone could look at this issue it would be great as I have no experience with godep

moritzraho commented 5 years ago

This must be merged after #74 Solved 2 errors after updating alpine to 3.8

  1. needed to apk add perl-utils for hmac lua to include prove which is needed by hmac lua and somehow not included anymore in installed perl packages
  2. needed to update ZMQ_ADAPTOR_VERSION to commit https://github.com/adobe-apiplatform/api-gateway-zmq-adaptor/commit/0235b04f39a480b5347411c278900e5c57874cf5. A new release should be made ?