Patch CVE-2018-14618

Author: renatomefi

.hadolint.yaml

@@ -1,3 +1,4 @@
 ignored:
     - DL3018 # Pin versions in apk add - See: https://github.com/hadolint/hadolint/wiki/DL3018
     - SC2086 # For now I had troubles to do a proper quoting for PHPIZE_DEPS - See: https://github.com/koalaman/shellcheck/wiki/SC2086
+    - DL3017 # For upgrading CVEs we need to use upgrade

Dockerfile-cli

@@ -20,6 +20,9 @@ RUN set -x \
     && docker-php-source-tarball clean && rm /usr/local/bin/php-cgi && rm /usr/local/bin/phpdbg && rm -rf /tmp/pear ~/.pearrc \
     && apk del .phpize-deps
 
+# Patch CVE-2018-14618
+RUN apk upgrade --no-cache curl
+
 COPY src/php/conf/default.ini /usr/local/etc/php/conf.d/
 COPY src/php/cli/conf/*.ini /usr/local/etc/php/conf.d/
 

Dockerfile-fpm

@@ -21,6 +21,9 @@ RUN apk add --no-cache --virtual .phpize-deps $PHPIZE_DEPS \
     && apk del .phpize-deps \
     && apk add --no-cache fcgi
 
+# Patch CVE-2018-14618
+RUN apk upgrade --no-cache curl
+
 COPY src/php/conf/default.ini /usr/local/etc/php/conf.d/
 COPY src/php/fpm/conf/*.conf /usr/local/etc/php-fpm.d/