From 05bcee7eb1fff6b695ca34eec4127f2f0051d74b Mon Sep 17 00:00:00 2001
From: peng9808 <peng.lai@daocloud.io>
Date: Tue, 26 Nov 2024 09:54:47 +0800
Subject: [PATCH] fix nss vulnerabilities

---
 docker-drbd9/Dockerfile.rhel7 | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/docker-drbd9/Dockerfile.rhel7 b/docker-drbd9/Dockerfile.rhel7
index 61495ef..84d934f 100644
--- a/docker-drbd9/Dockerfile.rhel7
+++ b/docker-drbd9/Dockerfile.rhel7
@@ -1,5 +1,10 @@
 From ghcr.io/hwameistor/drbd9-rhel7:v9.0.32-1
 
+#RUN yum -y update-minimal --security --sec-severity=Important --sec-severity=Critical && \
+#    yum clean all
+RUN yum install -y epel-release && \
+    yum update -y nss nss-sysinit nss-tools && \
+    yum clean all
 COPY /config-drbd.sh /
 COPY /entry.sh /
 RUN chmod +x /entry.sh